Sep 6 01:19:43.025364 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Sep 6 01:19:43.025383 kernel: Linux version 5.15.190-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Sep 5 23:00:12 -00 2025 Sep 6 01:19:43.025390 kernel: earlycon: pl11 at MMIO 0x00000000effec000 (options '') Sep 6 01:19:43.025397 kernel: printk: bootconsole [pl11] enabled Sep 6 01:19:43.025402 kernel: efi: EFI v2.70 by EDK II Sep 6 01:19:43.025408 kernel: efi: ACPI 2.0=0x3fd5f018 SMBIOS=0x3e580000 SMBIOS 3.0=0x3e560000 MEMATTR=0x3f214018 RNG=0x3fd5f998 MEMRESERVE=0x3761cf98 Sep 6 01:19:43.025414 kernel: random: crng init done Sep 6 01:19:43.025420 kernel: ACPI: Early table checksum verification disabled Sep 6 01:19:43.025425 kernel: ACPI: RSDP 0x000000003FD5F018 000024 (v02 VRTUAL) Sep 6 01:19:43.025431 kernel: ACPI: XSDT 0x000000003FD5FF18 00006C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:19:43.025436 kernel: ACPI: FACP 0x000000003FD5FC18 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:19:43.025441 kernel: ACPI: DSDT 0x000000003FD41018 01DFCD (v02 MSFTVM DSDT01 00000001 INTL 20230628) Sep 6 01:19:43.025448 kernel: ACPI: DBG2 0x000000003FD5FB18 000072 (v00 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:19:43.025454 kernel: ACPI: GTDT 0x000000003FD5FD98 000060 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:19:43.025460 kernel: ACPI: OEM0 0x000000003FD5F098 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:19:43.025466 kernel: ACPI: SPCR 0x000000003FD5FA98 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:19:43.025472 kernel: ACPI: APIC 0x000000003FD5F818 0000FC (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:19:43.025479 kernel: ACPI: SRAT 0x000000003FD5F198 000234 (v03 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:19:43.025485 kernel: ACPI: PPTT 0x000000003FD5F418 000120 (v01 VRTUAL MICROSFT 00000000 MSFT 00000000) Sep 6 01:19:43.025491 kernel: ACPI: BGRT 0x000000003FD5FE98 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 6 01:19:43.025496 kernel: ACPI: SPCR: console: pl011,mmio32,0xeffec000,115200 Sep 6 01:19:43.025502 kernel: NUMA: Failed to initialise from firmware Sep 6 01:19:43.025508 kernel: NUMA: Faking a node at [mem 0x0000000000000000-0x00000001bfffffff] Sep 6 01:19:43.025513 kernel: NUMA: NODE_DATA [mem 0x1bf7f3900-0x1bf7f8fff] Sep 6 01:19:43.025519 kernel: Zone ranges: Sep 6 01:19:43.025525 kernel: DMA [mem 0x0000000000000000-0x00000000ffffffff] Sep 6 01:19:43.025530 kernel: DMA32 empty Sep 6 01:19:43.025536 kernel: Normal [mem 0x0000000100000000-0x00000001bfffffff] Sep 6 01:19:43.025543 kernel: Movable zone start for each node Sep 6 01:19:43.025549 kernel: Early memory node ranges Sep 6 01:19:43.025554 kernel: node 0: [mem 0x0000000000000000-0x00000000007fffff] Sep 6 01:19:43.025560 kernel: node 0: [mem 0x0000000000824000-0x000000003e54ffff] Sep 6 01:19:43.025566 kernel: node 0: [mem 0x000000003e550000-0x000000003e87ffff] Sep 6 01:19:43.025572 kernel: node 0: [mem 0x000000003e880000-0x000000003fc7ffff] Sep 6 01:19:43.025577 kernel: node 0: [mem 0x000000003fc80000-0x000000003fcfffff] Sep 6 01:19:43.025583 kernel: node 0: [mem 0x000000003fd00000-0x000000003fffffff] Sep 6 01:19:43.025589 kernel: node 0: [mem 0x0000000100000000-0x00000001bfffffff] Sep 6 01:19:43.025594 kernel: Initmem setup node 0 [mem 0x0000000000000000-0x00000001bfffffff] Sep 6 01:19:43.025600 kernel: On node 0, zone DMA: 36 pages in unavailable ranges Sep 6 01:19:43.025606 kernel: psci: probing for conduit method from ACPI. Sep 6 01:19:43.025616 kernel: psci: PSCIv1.1 detected in firmware. Sep 6 01:19:43.025622 kernel: psci: Using standard PSCI v0.2 function IDs Sep 6 01:19:43.025628 kernel: psci: MIGRATE_INFO_TYPE not supported. Sep 6 01:19:43.025634 kernel: psci: SMC Calling Convention v1.4 Sep 6 01:19:43.025640 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x0 -> Node -1 Sep 6 01:19:43.025647 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x1 -> Node -1 Sep 6 01:19:43.025653 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Sep 6 01:19:43.025659 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Sep 6 01:19:43.025665 kernel: pcpu-alloc: [0] 0 [0] 1 Sep 6 01:19:43.025671 kernel: Detected PIPT I-cache on CPU0 Sep 6 01:19:43.025678 kernel: CPU features: detected: GIC system register CPU interface Sep 6 01:19:43.025684 kernel: CPU features: detected: Hardware dirty bit management Sep 6 01:19:43.025690 kernel: CPU features: detected: Spectre-BHB Sep 6 01:19:43.025696 kernel: CPU features: kernel page table isolation forced ON by KASLR Sep 6 01:19:43.025702 kernel: CPU features: detected: Kernel page table isolation (KPTI) Sep 6 01:19:43.025708 kernel: CPU features: detected: ARM erratum 1418040 Sep 6 01:19:43.025716 kernel: CPU features: detected: ARM erratum 1542419 (kernel portion) Sep 6 01:19:43.025722 kernel: CPU features: detected: SSBS not fully self-synchronizing Sep 6 01:19:43.025728 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1032156 Sep 6 01:19:43.036795 kernel: Policy zone: Normal Sep 6 01:19:43.036806 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=5cb382ab59aa1336098b36da02e2d4491706a6fda80ee56c4ff8582cce9206a4 Sep 6 01:19:43.036814 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Sep 6 01:19:43.036820 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Sep 6 01:19:43.036827 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Sep 6 01:19:43.036833 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Sep 6 01:19:43.036839 kernel: software IO TLB: mapped [mem 0x000000003a550000-0x000000003e550000] (64MB) Sep 6 01:19:43.036846 kernel: Memory: 3986880K/4194160K available (9792K kernel code, 2094K rwdata, 7592K rodata, 36416K init, 777K bss, 207280K reserved, 0K cma-reserved) Sep 6 01:19:43.036858 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Sep 6 01:19:43.036865 kernel: trace event string verifier disabled Sep 6 01:19:43.036871 kernel: rcu: Preemptible hierarchical RCU implementation. Sep 6 01:19:43.036878 kernel: rcu: RCU event tracing is enabled. Sep 6 01:19:43.036885 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Sep 6 01:19:43.036891 kernel: Trampoline variant of Tasks RCU enabled. Sep 6 01:19:43.036897 kernel: Tracing variant of Tasks RCU enabled. Sep 6 01:19:43.036904 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Sep 6 01:19:43.036910 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Sep 6 01:19:43.036916 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Sep 6 01:19:43.036922 kernel: GICv3: 960 SPIs implemented Sep 6 01:19:43.036930 kernel: GICv3: 0 Extended SPIs implemented Sep 6 01:19:43.036936 kernel: GICv3: Distributor has no Range Selector support Sep 6 01:19:43.036942 kernel: Root IRQ handler: gic_handle_irq Sep 6 01:19:43.036948 kernel: GICv3: 16 PPIs implemented Sep 6 01:19:43.036954 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000effee000 Sep 6 01:19:43.036960 kernel: ITS: No ITS available, not enabling LPIs Sep 6 01:19:43.036967 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Sep 6 01:19:43.036973 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Sep 6 01:19:43.036979 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Sep 6 01:19:43.036985 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Sep 6 01:19:43.036992 kernel: Console: colour dummy device 80x25 Sep 6 01:19:43.037000 kernel: printk: console [tty1] enabled Sep 6 01:19:43.037006 kernel: ACPI: Core revision 20210730 Sep 6 01:19:43.037013 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Sep 6 01:19:43.037019 kernel: pid_max: default: 32768 minimum: 301 Sep 6 01:19:43.037026 kernel: LSM: Security Framework initializing Sep 6 01:19:43.037032 kernel: SELinux: Initializing. Sep 6 01:19:43.037038 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 6 01:19:43.037045 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 6 01:19:43.037051 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3a8030, hints 0xe, misc 0x31e1 Sep 6 01:19:43.037059 kernel: Hyper-V: Host Build 10.0.22477.1619-1-0 Sep 6 01:19:43.037065 kernel: rcu: Hierarchical SRCU implementation. Sep 6 01:19:43.037071 kernel: Remapping and enabling EFI services. Sep 6 01:19:43.037078 kernel: smp: Bringing up secondary CPUs ... Sep 6 01:19:43.037084 kernel: Detected PIPT I-cache on CPU1 Sep 6 01:19:43.037091 kernel: GICv3: CPU1: found redistributor 1 region 1:0x00000000f000e000 Sep 6 01:19:43.037097 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Sep 6 01:19:43.037103 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Sep 6 01:19:43.037110 kernel: smp: Brought up 1 node, 2 CPUs Sep 6 01:19:43.037117 kernel: SMP: Total of 2 processors activated. Sep 6 01:19:43.037125 kernel: CPU features: detected: 32-bit EL0 Support Sep 6 01:19:43.037131 kernel: CPU features: detected: Instruction cache invalidation not required for I/D coherence Sep 6 01:19:43.037138 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Sep 6 01:19:43.037144 kernel: CPU features: detected: CRC32 instructions Sep 6 01:19:43.037151 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Sep 6 01:19:43.037157 kernel: CPU features: detected: LSE atomic instructions Sep 6 01:19:43.037164 kernel: CPU features: detected: Privileged Access Never Sep 6 01:19:43.037170 kernel: CPU: All CPU(s) started at EL1 Sep 6 01:19:43.037176 kernel: alternatives: patching kernel code Sep 6 01:19:43.037184 kernel: devtmpfs: initialized Sep 6 01:19:43.037195 kernel: KASLR enabled Sep 6 01:19:43.037202 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Sep 6 01:19:43.037210 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Sep 6 01:19:43.037217 kernel: pinctrl core: initialized pinctrl subsystem Sep 6 01:19:43.037223 kernel: SMBIOS 3.1.0 present. Sep 6 01:19:43.037230 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 09/28/2024 Sep 6 01:19:43.037237 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Sep 6 01:19:43.037244 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Sep 6 01:19:43.037252 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Sep 6 01:19:43.037259 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Sep 6 01:19:43.037266 kernel: audit: initializing netlink subsys (disabled) Sep 6 01:19:43.037273 kernel: audit: type=2000 audit(0.093:1): state=initialized audit_enabled=0 res=1 Sep 6 01:19:43.037279 kernel: thermal_sys: Registered thermal governor 'step_wise' Sep 6 01:19:43.037286 kernel: cpuidle: using governor menu Sep 6 01:19:43.037293 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Sep 6 01:19:43.037301 kernel: ASID allocator initialised with 32768 entries Sep 6 01:19:43.037308 kernel: ACPI: bus type PCI registered Sep 6 01:19:43.037314 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Sep 6 01:19:43.037321 kernel: Serial: AMBA PL011 UART driver Sep 6 01:19:43.037328 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Sep 6 01:19:43.037335 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Sep 6 01:19:43.037341 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Sep 6 01:19:43.037348 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Sep 6 01:19:43.037355 kernel: cryptd: max_cpu_qlen set to 1000 Sep 6 01:19:43.037362 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Sep 6 01:19:43.037369 kernel: ACPI: Added _OSI(Module Device) Sep 6 01:19:43.037376 kernel: ACPI: Added _OSI(Processor Device) Sep 6 01:19:43.037382 kernel: ACPI: Added _OSI(Processor Aggregator Device) Sep 6 01:19:43.037389 kernel: ACPI: Added _OSI(Linux-Dell-Video) Sep 6 01:19:43.037395 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Sep 6 01:19:43.037402 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Sep 6 01:19:43.037409 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Sep 6 01:19:43.037415 kernel: ACPI: Interpreter enabled Sep 6 01:19:43.037423 kernel: ACPI: Using GIC for interrupt routing Sep 6 01:19:43.037430 kernel: ARMH0011:00: ttyAMA0 at MMIO 0xeffec000 (irq = 12, base_baud = 0) is a SBSA Sep 6 01:19:43.037437 kernel: printk: console [ttyAMA0] enabled Sep 6 01:19:43.037444 kernel: printk: bootconsole [pl11] disabled Sep 6 01:19:43.037451 kernel: ARMH0011:01: ttyAMA1 at MMIO 0xeffeb000 (irq = 13, base_baud = 0) is a SBSA Sep 6 01:19:43.037458 kernel: iommu: Default domain type: Translated Sep 6 01:19:43.037464 kernel: iommu: DMA domain TLB invalidation policy: strict mode Sep 6 01:19:43.037471 kernel: vgaarb: loaded Sep 6 01:19:43.037478 kernel: pps_core: LinuxPPS API ver. 1 registered Sep 6 01:19:43.037484 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Sep 6 01:19:43.037492 kernel: PTP clock support registered Sep 6 01:19:43.037499 kernel: Registered efivars operations Sep 6 01:19:43.037506 kernel: No ACPI PMU IRQ for CPU0 Sep 6 01:19:43.037512 kernel: No ACPI PMU IRQ for CPU1 Sep 6 01:19:43.037519 kernel: clocksource: Switched to clocksource arch_sys_counter Sep 6 01:19:43.037525 kernel: VFS: Disk quotas dquot_6.6.0 Sep 6 01:19:43.037532 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Sep 6 01:19:43.037539 kernel: pnp: PnP ACPI init Sep 6 01:19:43.037546 kernel: pnp: PnP ACPI: found 0 devices Sep 6 01:19:43.037554 kernel: NET: Registered PF_INET protocol family Sep 6 01:19:43.037561 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Sep 6 01:19:43.037567 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Sep 6 01:19:43.037574 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Sep 6 01:19:43.037581 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Sep 6 01:19:43.037588 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Sep 6 01:19:43.037595 kernel: TCP: Hash tables configured (established 32768 bind 32768) Sep 6 01:19:43.037602 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 6 01:19:43.037610 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 6 01:19:43.037617 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Sep 6 01:19:43.037623 kernel: PCI: CLS 0 bytes, default 64 Sep 6 01:19:43.037630 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 1 counters available Sep 6 01:19:43.037637 kernel: kvm [1]: HYP mode not available Sep 6 01:19:43.037644 kernel: Initialise system trusted keyrings Sep 6 01:19:43.037650 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Sep 6 01:19:43.037657 kernel: Key type asymmetric registered Sep 6 01:19:43.037664 kernel: Asymmetric key parser 'x509' registered Sep 6 01:19:43.037672 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Sep 6 01:19:43.037678 kernel: io scheduler mq-deadline registered Sep 6 01:19:43.037685 kernel: io scheduler kyber registered Sep 6 01:19:43.037692 kernel: io scheduler bfq registered Sep 6 01:19:43.037699 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Sep 6 01:19:43.037705 kernel: thunder_xcv, ver 1.0 Sep 6 01:19:43.037712 kernel: thunder_bgx, ver 1.0 Sep 6 01:19:43.037718 kernel: nicpf, ver 1.0 Sep 6 01:19:43.037725 kernel: nicvf, ver 1.0 Sep 6 01:19:43.037882 kernel: rtc-efi rtc-efi.0: registered as rtc0 Sep 6 01:19:43.037947 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-09-06T01:19:42 UTC (1757121582) Sep 6 01:19:43.037956 kernel: efifb: probing for efifb Sep 6 01:19:43.037963 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Sep 6 01:19:43.037970 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Sep 6 01:19:43.037977 kernel: efifb: scrolling: redraw Sep 6 01:19:43.037984 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Sep 6 01:19:43.037990 kernel: Console: switching to colour frame buffer device 128x48 Sep 6 01:19:43.037998 kernel: fb0: EFI VGA frame buffer device Sep 6 01:19:43.038005 kernel: SMCCC: SOC_ID: ARCH_SOC_ID not implemented, skipping .... Sep 6 01:19:43.038012 kernel: hid: raw HID events driver (C) Jiri Kosina Sep 6 01:19:43.038019 kernel: NET: Registered PF_INET6 protocol family Sep 6 01:19:43.038025 kernel: Segment Routing with IPv6 Sep 6 01:19:43.038032 kernel: In-situ OAM (IOAM) with IPv6 Sep 6 01:19:43.038039 kernel: NET: Registered PF_PACKET protocol family Sep 6 01:19:43.038045 kernel: Key type dns_resolver registered Sep 6 01:19:43.038052 kernel: registered taskstats version 1 Sep 6 01:19:43.038058 kernel: Loading compiled-in X.509 certificates Sep 6 01:19:43.038067 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.190-flatcar: 72ab5ba99c2368429c7a4d04fccfc5a39dd84386' Sep 6 01:19:43.038073 kernel: Key type .fscrypt registered Sep 6 01:19:43.038080 kernel: Key type fscrypt-provisioning registered Sep 6 01:19:43.038087 kernel: ima: No TPM chip found, activating TPM-bypass! Sep 6 01:19:43.038093 kernel: ima: Allocated hash algorithm: sha1 Sep 6 01:19:43.038100 kernel: ima: No architecture policies found Sep 6 01:19:43.038107 kernel: clk: Disabling unused clocks Sep 6 01:19:43.038113 kernel: Freeing unused kernel memory: 36416K Sep 6 01:19:43.038121 kernel: Run /init as init process Sep 6 01:19:43.038128 kernel: with arguments: Sep 6 01:19:43.038135 kernel: /init Sep 6 01:19:43.038141 kernel: with environment: Sep 6 01:19:43.038148 kernel: HOME=/ Sep 6 01:19:43.038154 kernel: TERM=linux Sep 6 01:19:43.038161 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Sep 6 01:19:43.038169 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 6 01:19:43.038180 systemd[1]: Detected virtualization microsoft. Sep 6 01:19:43.038187 systemd[1]: Detected architecture arm64. Sep 6 01:19:43.038194 systemd[1]: Running in initrd. Sep 6 01:19:43.038201 systemd[1]: No hostname configured, using default hostname. Sep 6 01:19:43.038208 systemd[1]: Hostname set to . Sep 6 01:19:43.038215 systemd[1]: Initializing machine ID from random generator. Sep 6 01:19:43.038222 systemd[1]: Queued start job for default target initrd.target. Sep 6 01:19:43.038230 systemd[1]: Started systemd-ask-password-console.path. Sep 6 01:19:43.038238 systemd[1]: Reached target cryptsetup.target. Sep 6 01:19:43.038245 systemd[1]: Reached target paths.target. Sep 6 01:19:43.038252 systemd[1]: Reached target slices.target. Sep 6 01:19:43.038259 systemd[1]: Reached target swap.target. Sep 6 01:19:43.038266 systemd[1]: Reached target timers.target. Sep 6 01:19:43.038273 systemd[1]: Listening on iscsid.socket. Sep 6 01:19:43.038280 systemd[1]: Listening on iscsiuio.socket. Sep 6 01:19:43.038287 systemd[1]: Listening on systemd-journald-audit.socket. Sep 6 01:19:43.038296 systemd[1]: Listening on systemd-journald-dev-log.socket. Sep 6 01:19:43.038303 systemd[1]: Listening on systemd-journald.socket. Sep 6 01:19:43.038310 systemd[1]: Listening on systemd-networkd.socket. Sep 6 01:19:43.038317 systemd[1]: Listening on systemd-udevd-control.socket. Sep 6 01:19:43.038324 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 6 01:19:43.038332 systemd[1]: Reached target sockets.target. Sep 6 01:19:43.038339 systemd[1]: Starting kmod-static-nodes.service... Sep 6 01:19:43.038346 systemd[1]: Finished network-cleanup.service. Sep 6 01:19:43.038353 systemd[1]: Starting systemd-fsck-usr.service... Sep 6 01:19:43.038362 systemd[1]: Starting systemd-journald.service... Sep 6 01:19:43.038369 systemd[1]: Starting systemd-modules-load.service... Sep 6 01:19:43.038376 systemd[1]: Starting systemd-resolved.service... Sep 6 01:19:43.038384 systemd[1]: Starting systemd-vconsole-setup.service... Sep 6 01:19:43.038395 systemd-journald[276]: Journal started Sep 6 01:19:43.038438 systemd-journald[276]: Runtime Journal (/run/log/journal/db756a983e2649108ca8c8ebd7eb41c0) is 8.0M, max 78.5M, 70.5M free. Sep 6 01:19:43.016807 systemd-modules-load[277]: Inserted module 'overlay' Sep 6 01:19:43.063918 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Sep 6 01:19:43.064751 systemd[1]: Started systemd-journald.service. Sep 6 01:19:43.076945 kernel: Bridge firewalling registered Sep 6 01:19:43.077097 systemd-modules-load[277]: Inserted module 'br_netfilter' Sep 6 01:19:43.137351 kernel: audit: type=1130 audit(1757121583.082:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:43.137377 kernel: SCSI subsystem initialized Sep 6 01:19:43.137387 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Sep 6 01:19:43.137396 kernel: device-mapper: uevent: version 1.0.3 Sep 6 01:19:43.137404 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Sep 6 01:19:43.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:43.107242 systemd[1]: Finished kmod-static-nodes.service. Sep 6 01:19:43.169800 kernel: audit: type=1130 audit(1757121583.147:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:43.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:43.110650 systemd-resolved[278]: Positive Trust Anchors: Sep 6 01:19:43.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:43.110658 systemd-resolved[278]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 6 01:19:43.225125 kernel: audit: type=1130 audit(1757121583.172:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:43.225147 kernel: audit: type=1130 audit(1757121583.199:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:43.199000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:43.110687 systemd-resolved[278]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 6 01:19:43.286804 kernel: audit: type=1130 audit(1757121583.230:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:43.230000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:43.112826 systemd-resolved[278]: Defaulting to hostname 'linux'. Sep 6 01:19:43.147028 systemd-modules-load[277]: Inserted module 'dm_multipath' Sep 6 01:19:43.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:43.148040 systemd[1]: Started systemd-resolved.service. Sep 6 01:19:43.328000 kernel: audit: type=1130 audit(1757121583.287:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:43.173104 systemd[1]: Finished systemd-fsck-usr.service. Sep 6 01:19:43.199818 systemd[1]: Finished systemd-modules-load.service. Sep 6 01:19:43.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:43.230713 systemd[1]: Finished systemd-vconsole-setup.service. Sep 6 01:19:43.382395 kernel: audit: type=1130 audit(1757121583.359:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:43.288320 systemd[1]: Reached target nss-lookup.target. Sep 6 01:19:43.386000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:43.315993 systemd[1]: Starting dracut-cmdline-ask.service... Sep 6 01:19:43.419169 kernel: audit: type=1130 audit(1757121583.386:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:43.324685 systemd[1]: Starting systemd-sysctl.service... Sep 6 01:19:43.445206 kernel: audit: type=1130 audit(1757121583.414:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:43.414000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:43.333630 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 6 01:19:43.346150 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 6 01:19:43.457956 dracut-cmdline[297]: dracut-dracut-053 Sep 6 01:19:43.457956 dracut-cmdline[297]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=5cb382ab59aa1336098b36da02e2d4491706a6fda80ee56c4ff8582cce9206a4 Sep 6 01:19:43.363038 systemd[1]: Finished dracut-cmdline-ask.service. Sep 6 01:19:43.387368 systemd[1]: Finished systemd-sysctl.service. Sep 6 01:19:43.415615 systemd[1]: Starting dracut-cmdline.service... Sep 6 01:19:43.533757 kernel: Loading iSCSI transport class v2.0-870. Sep 6 01:19:43.551761 kernel: iscsi: registered transport (tcp) Sep 6 01:19:43.573147 kernel: iscsi: registered transport (qla4xxx) Sep 6 01:19:43.573218 kernel: QLogic iSCSI HBA Driver Sep 6 01:19:43.603041 systemd[1]: Finished dracut-cmdline.service. Sep 6 01:19:43.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:43.608349 systemd[1]: Starting dracut-pre-udev.service... Sep 6 01:19:43.661763 kernel: raid6: neonx8 gen() 13722 MB/s Sep 6 01:19:43.681745 kernel: raid6: neonx8 xor() 10793 MB/s Sep 6 01:19:43.701743 kernel: raid6: neonx4 gen() 13538 MB/s Sep 6 01:19:43.723743 kernel: raid6: neonx4 xor() 10988 MB/s Sep 6 01:19:43.743742 kernel: raid6: neonx2 gen() 12972 MB/s Sep 6 01:19:43.763741 kernel: raid6: neonx2 xor() 10396 MB/s Sep 6 01:19:43.786744 kernel: raid6: neonx1 gen() 10625 MB/s Sep 6 01:19:43.807741 kernel: raid6: neonx1 xor() 8776 MB/s Sep 6 01:19:43.829743 kernel: raid6: int64x8 gen() 6265 MB/s Sep 6 01:19:43.850743 kernel: raid6: int64x8 xor() 3539 MB/s Sep 6 01:19:43.871793 kernel: raid6: int64x4 gen() 7234 MB/s Sep 6 01:19:43.893772 kernel: raid6: int64x4 xor() 3856 MB/s Sep 6 01:19:43.913772 kernel: raid6: int64x2 gen() 6147 MB/s Sep 6 01:19:43.933770 kernel: raid6: int64x2 xor() 3322 MB/s Sep 6 01:19:43.954781 kernel: raid6: int64x1 gen() 5037 MB/s Sep 6 01:19:43.979917 kernel: raid6: int64x1 xor() 2646 MB/s Sep 6 01:19:43.979978 kernel: raid6: using algorithm neonx8 gen() 13722 MB/s Sep 6 01:19:43.979988 kernel: raid6: .... xor() 10793 MB/s, rmw enabled Sep 6 01:19:43.984320 kernel: raid6: using neon recovery algorithm Sep 6 01:19:44.007619 kernel: xor: measuring software checksum speed Sep 6 01:19:44.007631 kernel: 8regs : 17199 MB/sec Sep 6 01:19:44.015160 kernel: 32regs : 19478 MB/sec Sep 6 01:19:44.015170 kernel: arm64_neon : 27691 MB/sec Sep 6 01:19:44.015177 kernel: xor: using function: arm64_neon (27691 MB/sec) Sep 6 01:19:44.075747 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Sep 6 01:19:44.085111 systemd[1]: Finished dracut-pre-udev.service. Sep 6 01:19:44.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:44.092000 audit: BPF prog-id=7 op=LOAD Sep 6 01:19:44.092000 audit: BPF prog-id=8 op=LOAD Sep 6 01:19:44.094099 systemd[1]: Starting systemd-udevd.service... Sep 6 01:19:44.111835 systemd-udevd[474]: Using default interface naming scheme 'v252'. Sep 6 01:19:44.118148 systemd[1]: Started systemd-udevd.service. Sep 6 01:19:44.123000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:44.128820 systemd[1]: Starting dracut-pre-trigger.service... Sep 6 01:19:44.144259 dracut-pre-trigger[495]: rd.md=0: removing MD RAID activation Sep 6 01:19:44.175117 systemd[1]: Finished dracut-pre-trigger.service. Sep 6 01:19:44.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:44.181480 systemd[1]: Starting systemd-udev-trigger.service... Sep 6 01:19:44.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:44.220315 systemd[1]: Finished systemd-udev-trigger.service. Sep 6 01:19:44.273919 kernel: hv_vmbus: Vmbus version:5.3 Sep 6 01:19:44.288769 kernel: hv_vmbus: registering driver hid_hyperv Sep 6 01:19:44.309816 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input0 Sep 6 01:19:44.309888 kernel: hv_vmbus: registering driver hyperv_keyboard Sep 6 01:19:44.309907 kernel: hid-generic 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Sep 6 01:19:44.314297 kernel: hv_vmbus: registering driver hv_storvsc Sep 6 01:19:44.331278 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/MSFT1000:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input1 Sep 6 01:19:44.331341 kernel: hv_vmbus: registering driver hv_netvsc Sep 6 01:19:44.332757 kernel: scsi host0: storvsc_host_t Sep 6 01:19:44.342744 kernel: scsi host1: storvsc_host_t Sep 6 01:19:44.342960 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Sep 6 01:19:44.355403 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Sep 6 01:19:44.376069 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Sep 6 01:19:44.400281 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Sep 6 01:19:44.400304 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Sep 6 01:19:44.418160 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Sep 6 01:19:44.418275 kernel: sd 0:0:0:0: [sda] Write Protect is off Sep 6 01:19:44.418355 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Sep 6 01:19:44.418431 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Sep 6 01:19:44.418509 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Sep 6 01:19:44.418591 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Sep 6 01:19:44.418608 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Sep 6 01:19:44.418685 kernel: hv_netvsc 000d3afd-7083-000d-3afd-7083000d3afd eth0: VF slot 1 added Sep 6 01:19:44.428770 kernel: hv_vmbus: registering driver hv_pci Sep 6 01:19:44.441549 kernel: hv_pci f1f930d1-e793-41d5-95d6-dcb7cf2d75a8: PCI VMBus probing: Using version 0x10004 Sep 6 01:19:44.523323 kernel: hv_pci f1f930d1-e793-41d5-95d6-dcb7cf2d75a8: PCI host bridge to bus e793:00 Sep 6 01:19:44.523462 kernel: pci_bus e793:00: root bus resource [mem 0xfc0000000-0xfc00fffff window] Sep 6 01:19:44.523577 kernel: pci_bus e793:00: No busn resource found for root bus, will use [bus 00-ff] Sep 6 01:19:44.523659 kernel: pci e793:00:02.0: [15b3:1018] type 00 class 0x020000 Sep 6 01:19:44.523774 kernel: pci e793:00:02.0: reg 0x10: [mem 0xfc0000000-0xfc00fffff 64bit pref] Sep 6 01:19:44.523856 kernel: pci e793:00:02.0: enabling Extended Tags Sep 6 01:19:44.523933 kernel: pci e793:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at e793:00:02.0 (capable of 126.016 Gb/s with 8.0 GT/s PCIe x16 link) Sep 6 01:19:44.524009 kernel: pci_bus e793:00: busn_res: [bus 00-ff] end is updated to 00 Sep 6 01:19:44.524081 kernel: pci e793:00:02.0: BAR 0: assigned [mem 0xfc0000000-0xfc00fffff 64bit pref] Sep 6 01:19:44.560822 kernel: mlx5_core e793:00:02.0: enabling device (0000 -> 0002) Sep 6 01:19:44.788383 kernel: mlx5_core e793:00:02.0: firmware version: 16.30.1284 Sep 6 01:19:44.788534 kernel: mlx5_core e793:00:02.0: MLX5E: StrdRq(1) RqSz(8) StrdSz(2048) RxCqeCmprss(0) Sep 6 01:19:44.788618 kernel: hv_netvsc 000d3afd-7083-000d-3afd-7083000d3afd eth0: VF registering: eth1 Sep 6 01:19:44.788702 kernel: mlx5_core e793:00:02.0 eth1: joined to eth0 Sep 6 01:19:44.798767 kernel: mlx5_core e793:00:02.0 enP59283s1: renamed from eth1 Sep 6 01:19:44.931495 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Sep 6 01:19:44.956783 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/sda6 scanned by (udev-worker) (533) Sep 6 01:19:44.968388 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 6 01:19:45.090084 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Sep 6 01:19:45.109202 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Sep 6 01:19:45.114935 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Sep 6 01:19:45.127123 systemd[1]: Starting disk-uuid.service... Sep 6 01:19:45.161758 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Sep 6 01:19:45.172761 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Sep 6 01:19:46.179826 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Sep 6 01:19:46.180866 disk-uuid[601]: The operation has completed successfully. Sep 6 01:19:46.240313 systemd[1]: disk-uuid.service: Deactivated successfully. Sep 6 01:19:46.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:46.246000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:46.240411 systemd[1]: Finished disk-uuid.service. Sep 6 01:19:46.248075 systemd[1]: Starting verity-setup.service... Sep 6 01:19:46.288783 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Sep 6 01:19:46.491177 systemd[1]: Found device dev-mapper-usr.device. Sep 6 01:19:46.497775 systemd[1]: Mounting sysusr-usr.mount... Sep 6 01:19:46.516000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:46.507323 systemd[1]: Finished verity-setup.service. Sep 6 01:19:46.561752 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Sep 6 01:19:46.559903 systemd[1]: Mounted sysusr-usr.mount. Sep 6 01:19:46.564254 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Sep 6 01:19:46.565054 systemd[1]: Starting ignition-setup.service... Sep 6 01:19:46.581064 systemd[1]: Starting parse-ip-for-networkd.service... Sep 6 01:19:46.615718 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Sep 6 01:19:46.615787 kernel: BTRFS info (device sda6): using free space tree Sep 6 01:19:46.620470 kernel: BTRFS info (device sda6): has skinny extents Sep 6 01:19:46.672612 systemd[1]: mnt-oem.mount: Deactivated successfully. Sep 6 01:19:46.677716 systemd[1]: Finished parse-ip-for-networkd.service. Sep 6 01:19:46.682000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:46.688000 audit: BPF prog-id=9 op=LOAD Sep 6 01:19:46.689016 systemd[1]: Starting systemd-networkd.service... Sep 6 01:19:46.715758 systemd-networkd[847]: lo: Link UP Sep 6 01:19:46.715789 systemd-networkd[847]: lo: Gained carrier Sep 6 01:19:46.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:46.716249 systemd-networkd[847]: Enumeration completed Sep 6 01:19:46.716355 systemd[1]: Started systemd-networkd.service. Sep 6 01:19:46.726712 systemd[1]: Reached target network.target. Sep 6 01:19:46.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:46.730378 systemd-networkd[847]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 6 01:19:46.769508 iscsid[853]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Sep 6 01:19:46.769508 iscsid[853]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Sep 6 01:19:46.769508 iscsid[853]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Sep 6 01:19:46.769508 iscsid[853]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Sep 6 01:19:46.769508 iscsid[853]: If using hardware iscsi like qla4xxx this message can be ignored. Sep 6 01:19:46.769508 iscsid[853]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Sep 6 01:19:46.769508 iscsid[853]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Sep 6 01:19:46.785000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:46.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:46.862000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:46.741515 systemd[1]: Starting iscsiuio.service... Sep 6 01:19:46.750982 systemd[1]: Started iscsiuio.service. Sep 6 01:19:46.759818 systemd[1]: Starting iscsid.service... Sep 6 01:19:46.773103 systemd[1]: Started iscsid.service. Sep 6 01:19:46.785766 systemd[1]: Finished ignition-setup.service. Sep 6 01:19:46.810344 systemd[1]: Starting dracut-initqueue.service... Sep 6 01:19:46.830031 systemd[1]: Starting ignition-fetch-offline.service... Sep 6 01:19:46.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:46.857883 systemd[1]: Finished dracut-initqueue.service. Sep 6 01:19:46.862717 systemd[1]: Reached target remote-fs-pre.target. Sep 6 01:19:46.874605 systemd[1]: Reached target remote-cryptsetup.target. Sep 6 01:19:46.952106 kernel: mlx5_core e793:00:02.0 enP59283s1: Link up Sep 6 01:19:46.883283 systemd[1]: Reached target remote-fs.target. Sep 6 01:19:46.893896 systemd[1]: Starting dracut-pre-mount.service... Sep 6 01:19:46.916010 systemd[1]: Finished dracut-pre-mount.service. Sep 6 01:19:46.997392 kernel: hv_netvsc 000d3afd-7083-000d-3afd-7083000d3afd eth0: Data path switched to VF: enP59283s1 Sep 6 01:19:46.998031 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 01:19:46.997539 systemd-networkd[847]: enP59283s1: Link UP Sep 6 01:19:46.997619 systemd-networkd[847]: eth0: Link UP Sep 6 01:19:46.997781 systemd-networkd[847]: eth0: Gained carrier Sep 6 01:19:47.010979 systemd-networkd[847]: enP59283s1: Gained carrier Sep 6 01:19:47.021833 systemd-networkd[847]: eth0: DHCPv4 address 10.200.20.17/24, gateway 10.200.20.1 acquired from 168.63.129.16 Sep 6 01:19:48.064847 systemd-networkd[847]: eth0: Gained IPv6LL Sep 6 01:19:49.196761 ignition[857]: Ignition 2.14.0 Sep 6 01:19:49.196778 ignition[857]: Stage: fetch-offline Sep 6 01:19:49.196840 ignition[857]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 01:19:49.196867 ignition[857]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 01:19:49.254628 ignition[857]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 01:19:49.254815 ignition[857]: parsed url from cmdline: "" Sep 6 01:19:49.254820 ignition[857]: no config URL provided Sep 6 01:19:49.254828 ignition[857]: reading system config file "/usr/lib/ignition/user.ign" Sep 6 01:19:49.298857 kernel: kauditd_printk_skb: 18 callbacks suppressed Sep 6 01:19:49.298881 kernel: audit: type=1130 audit(1757121589.269:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:49.269000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:49.261523 systemd[1]: Finished ignition-fetch-offline.service. Sep 6 01:19:49.254838 ignition[857]: no config at "/usr/lib/ignition/user.ign" Sep 6 01:19:49.271163 systemd[1]: Starting ignition-fetch.service... Sep 6 01:19:49.254846 ignition[857]: failed to fetch config: resource requires networking Sep 6 01:19:49.255182 ignition[857]: Ignition finished successfully Sep 6 01:19:49.290016 ignition[873]: Ignition 2.14.0 Sep 6 01:19:49.290022 ignition[873]: Stage: fetch Sep 6 01:19:49.290156 ignition[873]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 01:19:49.290179 ignition[873]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 01:19:49.293502 ignition[873]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 01:19:49.299985 ignition[873]: parsed url from cmdline: "" Sep 6 01:19:49.299993 ignition[873]: no config URL provided Sep 6 01:19:49.300000 ignition[873]: reading system config file "/usr/lib/ignition/user.ign" Sep 6 01:19:49.300011 ignition[873]: no config at "/usr/lib/ignition/user.ign" Sep 6 01:19:49.300062 ignition[873]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Sep 6 01:19:49.397869 ignition[873]: GET result: OK Sep 6 01:19:49.397990 ignition[873]: config has been read from IMDS userdata Sep 6 01:19:49.398046 ignition[873]: parsing config with SHA512: 2c80a021127a3c8ab39f2d506f1c039010b2ce1f906ba4b64ebcb818dfc3256e32c686a40ec8a9272a344b152b1e411e50006e615c7d75f8a36cb4b9c0ef857c Sep 6 01:19:49.401816 unknown[873]: fetched base config from "system" Sep 6 01:19:49.402352 ignition[873]: fetch: fetch complete Sep 6 01:19:49.437808 kernel: audit: type=1130 audit(1757121589.414:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:49.414000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:49.401823 unknown[873]: fetched base config from "system" Sep 6 01:19:49.402366 ignition[873]: fetch: fetch passed Sep 6 01:19:49.401828 unknown[873]: fetched user config from "azure" Sep 6 01:19:49.402409 ignition[873]: Ignition finished successfully Sep 6 01:19:49.410482 systemd[1]: Finished ignition-fetch.service. Sep 6 01:19:49.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:49.444931 ignition[879]: Ignition 2.14.0 Sep 6 01:19:49.415915 systemd[1]: Starting ignition-kargs.service... Sep 6 01:19:49.491892 kernel: audit: type=1130 audit(1757121589.458:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:49.444938 ignition[879]: Stage: kargs Sep 6 01:19:49.517860 kernel: audit: type=1130 audit(1757121589.500:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:49.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:49.454158 systemd[1]: Finished ignition-kargs.service. Sep 6 01:19:49.445055 ignition[879]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 01:19:49.479763 systemd[1]: Starting ignition-disks.service... Sep 6 01:19:49.445082 ignition[879]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 01:19:49.496232 systemd[1]: Finished ignition-disks.service. Sep 6 01:19:49.450924 ignition[879]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 01:19:49.501788 systemd[1]: Reached target initrd-root-device.target. Sep 6 01:19:49.452367 ignition[879]: kargs: kargs passed Sep 6 01:19:49.522801 systemd[1]: Reached target local-fs-pre.target. Sep 6 01:19:49.452424 ignition[879]: Ignition finished successfully Sep 6 01:19:49.531327 systemd[1]: Reached target local-fs.target. Sep 6 01:19:49.486968 ignition[885]: Ignition 2.14.0 Sep 6 01:19:49.543036 systemd[1]: Reached target sysinit.target. Sep 6 01:19:49.486974 ignition[885]: Stage: disks Sep 6 01:19:49.552813 systemd[1]: Reached target basic.target. Sep 6 01:19:49.487083 ignition[885]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 01:19:49.561899 systemd[1]: Starting systemd-fsck-root.service... Sep 6 01:19:49.487102 ignition[885]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 01:19:49.491235 ignition[885]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 01:19:49.494792 ignition[885]: disks: disks passed Sep 6 01:19:49.494865 ignition[885]: Ignition finished successfully Sep 6 01:19:49.642810 systemd-fsck[893]: ROOT: clean, 629/7326000 files, 481083/7359488 blocks Sep 6 01:19:49.667071 kernel: audit: type=1130 audit(1757121589.642:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:49.642000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:49.636194 systemd[1]: Finished systemd-fsck-root.service. Sep 6 01:19:49.643974 systemd[1]: Mounting sysroot.mount... Sep 6 01:19:49.691897 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Sep 6 01:19:49.688073 systemd[1]: Mounted sysroot.mount. Sep 6 01:19:49.692303 systemd[1]: Reached target initrd-root-fs.target. Sep 6 01:19:49.726329 systemd[1]: Mounting sysroot-usr.mount... Sep 6 01:19:49.731200 systemd[1]: Starting flatcar-metadata-hostname.service... Sep 6 01:19:49.740163 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Sep 6 01:19:49.740197 systemd[1]: Reached target ignition-diskful.target. Sep 6 01:19:49.746224 systemd[1]: Mounted sysroot-usr.mount. Sep 6 01:19:49.796981 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 6 01:19:49.802741 systemd[1]: Starting initrd-setup-root.service... Sep 6 01:19:49.824761 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 scanned by mount (903) Sep 6 01:19:49.836493 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Sep 6 01:19:49.836530 kernel: BTRFS info (device sda6): using free space tree Sep 6 01:19:49.836540 initrd-setup-root[908]: cut: /sysroot/etc/passwd: No such file or directory Sep 6 01:19:49.848662 kernel: BTRFS info (device sda6): has skinny extents Sep 6 01:19:49.853952 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 6 01:19:49.867019 initrd-setup-root[934]: cut: /sysroot/etc/group: No such file or directory Sep 6 01:19:49.890480 initrd-setup-root[942]: cut: /sysroot/etc/shadow: No such file or directory Sep 6 01:19:49.902306 initrd-setup-root[950]: cut: /sysroot/etc/gshadow: No such file or directory Sep 6 01:19:50.307307 systemd[1]: Finished initrd-setup-root.service. Sep 6 01:19:50.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:50.331560 systemd[1]: Starting ignition-mount.service... Sep 6 01:19:50.342403 kernel: audit: type=1130 audit(1757121590.311:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:50.338570 systemd[1]: Starting sysroot-boot.service... Sep 6 01:19:50.352852 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Sep 6 01:19:50.352966 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Sep 6 01:19:50.373916 systemd[1]: Finished sysroot-boot.service. Sep 6 01:19:50.399026 kernel: audit: type=1130 audit(1757121590.377:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:50.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:50.399094 ignition[971]: INFO : Ignition 2.14.0 Sep 6 01:19:50.399094 ignition[971]: INFO : Stage: mount Sep 6 01:19:50.399094 ignition[971]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 01:19:50.399094 ignition[971]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 01:19:50.451747 kernel: audit: type=1130 audit(1757121590.407:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:50.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:50.451825 ignition[971]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 01:19:50.451825 ignition[971]: INFO : mount: mount passed Sep 6 01:19:50.451825 ignition[971]: INFO : Ignition finished successfully Sep 6 01:19:50.403658 systemd[1]: Finished ignition-mount.service. Sep 6 01:19:50.904791 coreos-metadata[902]: Sep 06 01:19:50.904 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Sep 6 01:19:50.913341 coreos-metadata[902]: Sep 06 01:19:50.912 INFO Fetch successful Sep 6 01:19:50.946909 coreos-metadata[902]: Sep 06 01:19:50.946 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Sep 6 01:19:50.960817 coreos-metadata[902]: Sep 06 01:19:50.960 INFO Fetch successful Sep 6 01:19:50.975625 coreos-metadata[902]: Sep 06 01:19:50.975 INFO wrote hostname ci-3510.3.8-n-645ca388a2 to /sysroot/etc/hostname Sep 6 01:19:50.984982 systemd[1]: Finished flatcar-metadata-hostname.service. Sep 6 01:19:50.991000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:51.012857 systemd[1]: Starting ignition-files.service... Sep 6 01:19:51.022103 kernel: audit: type=1130 audit(1757121590.991:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:51.022960 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 6 01:19:51.039771 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by mount (981) Sep 6 01:19:51.053330 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Sep 6 01:19:51.053347 kernel: BTRFS info (device sda6): using free space tree Sep 6 01:19:51.053357 kernel: BTRFS info (device sda6): has skinny extents Sep 6 01:19:51.063744 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 6 01:19:51.078895 ignition[1000]: INFO : Ignition 2.14.0 Sep 6 01:19:51.078895 ignition[1000]: INFO : Stage: files Sep 6 01:19:51.090017 ignition[1000]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 01:19:51.090017 ignition[1000]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 01:19:51.090017 ignition[1000]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 01:19:51.090017 ignition[1000]: DEBUG : files: compiled without relabeling support, skipping Sep 6 01:19:51.124374 ignition[1000]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Sep 6 01:19:51.124374 ignition[1000]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Sep 6 01:19:51.187073 ignition[1000]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Sep 6 01:19:51.194872 ignition[1000]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Sep 6 01:19:51.202028 ignition[1000]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Sep 6 01:19:51.194939 unknown[1000]: wrote ssh authorized keys file for user: core Sep 6 01:19:51.214337 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Sep 6 01:19:51.214337 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-arm64.tar.gz: attempt #1 Sep 6 01:19:51.277443 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Sep 6 01:19:51.683875 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Sep 6 01:19:51.695882 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Sep 6 01:19:51.706039 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Sep 6 01:19:51.706039 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Sep 6 01:19:51.706039 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Sep 6 01:19:51.706039 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 6 01:19:51.706039 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 6 01:19:51.706039 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 6 01:19:51.706039 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 6 01:19:51.706039 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Sep 6 01:19:51.706039 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Sep 6 01:19:51.706039 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Sep 6 01:19:51.706039 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Sep 6 01:19:51.831099 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Sep 6 01:19:51.831099 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Sep 6 01:19:51.831099 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1280286840" Sep 6 01:19:51.831099 ignition[1000]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1280286840": device or resource busy Sep 6 01:19:51.831099 ignition[1000]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1280286840", trying btrfs: device or resource busy Sep 6 01:19:51.831099 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1280286840" Sep 6 01:19:51.831099 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1280286840" Sep 6 01:19:51.831099 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem1280286840" Sep 6 01:19:51.831099 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem1280286840" Sep 6 01:19:51.831099 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Sep 6 01:19:51.831099 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Sep 6 01:19:51.831099 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(e): oem config not found in "/usr/share/oem", looking on oem partition Sep 6 01:19:51.831099 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(f): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1835949286" Sep 6 01:19:51.831099 ignition[1000]: CRITICAL : files: createFilesystemsFiles: createFiles: op(e): op(f): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1835949286": device or resource busy Sep 6 01:19:51.740494 systemd[1]: mnt-oem1280286840.mount: Deactivated successfully. Sep 6 01:19:51.998030 ignition[1000]: ERROR : files: createFilesystemsFiles: createFiles: op(e): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1835949286", trying btrfs: device or resource busy Sep 6 01:19:51.998030 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1835949286" Sep 6 01:19:51.998030 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1835949286" Sep 6 01:19:51.998030 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [started] unmounting "/mnt/oem1835949286" Sep 6 01:19:51.998030 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [finished] unmounting "/mnt/oem1835949286" Sep 6 01:19:51.998030 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Sep 6 01:19:51.998030 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(12): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Sep 6 01:19:51.998030 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-arm64.raw: attempt #1 Sep 6 01:19:52.172664 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET result: OK Sep 6 01:19:52.424933 ignition[1000]: INFO : files: createFilesystemsFiles: createFiles: op(12): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Sep 6 01:19:52.439578 ignition[1000]: INFO : files: op(13): [started] processing unit "waagent.service" Sep 6 01:19:52.439578 ignition[1000]: INFO : files: op(13): [finished] processing unit "waagent.service" Sep 6 01:19:52.439578 ignition[1000]: INFO : files: op(14): [started] processing unit "nvidia.service" Sep 6 01:19:52.439578 ignition[1000]: INFO : files: op(14): [finished] processing unit "nvidia.service" Sep 6 01:19:52.439578 ignition[1000]: INFO : files: op(15): [started] processing unit "prepare-helm.service" Sep 6 01:19:52.439578 ignition[1000]: INFO : files: op(15): op(16): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 6 01:19:52.439578 ignition[1000]: INFO : files: op(15): op(16): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 6 01:19:52.439578 ignition[1000]: INFO : files: op(15): [finished] processing unit "prepare-helm.service" Sep 6 01:19:52.439578 ignition[1000]: INFO : files: op(17): [started] setting preset to enabled for "prepare-helm.service" Sep 6 01:19:52.439578 ignition[1000]: INFO : files: op(17): [finished] setting preset to enabled for "prepare-helm.service" Sep 6 01:19:52.439578 ignition[1000]: INFO : files: op(18): [started] setting preset to enabled for "waagent.service" Sep 6 01:19:52.439578 ignition[1000]: INFO : files: op(18): [finished] setting preset to enabled for "waagent.service" Sep 6 01:19:52.439578 ignition[1000]: INFO : files: op(19): [started] setting preset to enabled for "nvidia.service" Sep 6 01:19:52.439578 ignition[1000]: INFO : files: op(19): [finished] setting preset to enabled for "nvidia.service" Sep 6 01:19:52.439578 ignition[1000]: INFO : files: createResultFile: createFiles: op(1a): [started] writing file "/sysroot/etc/.ignition-result.json" Sep 6 01:19:52.439578 ignition[1000]: INFO : files: createResultFile: createFiles: op(1a): [finished] writing file "/sysroot/etc/.ignition-result.json" Sep 6 01:19:52.439578 ignition[1000]: INFO : files: files passed Sep 6 01:19:52.439578 ignition[1000]: INFO : Ignition finished successfully Sep 6 01:19:52.661152 kernel: audit: type=1130 audit(1757121592.443:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.505000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.557000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.439518 systemd[1]: Finished ignition-files.service. Sep 6 01:19:52.469769 systemd[1]: Starting initrd-setup-root-after-ignition.service... Sep 6 01:19:52.670000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.481386 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Sep 6 01:19:52.687949 initrd-setup-root-after-ignition[1025]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Sep 6 01:19:52.482296 systemd[1]: Starting ignition-quench.service... Sep 6 01:19:52.500901 systemd[1]: ignition-quench.service: Deactivated successfully. Sep 6 01:19:52.500999 systemd[1]: Finished ignition-quench.service. Sep 6 01:19:52.552509 systemd[1]: Finished initrd-setup-root-after-ignition.service. Sep 6 01:19:52.732000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.558249 systemd[1]: Reached target ignition-complete.target. Sep 6 01:19:52.571396 systemd[1]: Starting initrd-parse-etc.service... Sep 6 01:19:52.596464 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Sep 6 01:19:52.596569 systemd[1]: Finished initrd-parse-etc.service. Sep 6 01:19:52.608206 systemd[1]: Reached target initrd-fs.target. Sep 6 01:19:52.619752 systemd[1]: Reached target initrd.target. Sep 6 01:19:52.633432 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Sep 6 01:19:52.634311 systemd[1]: Starting dracut-pre-pivot.service... Sep 6 01:19:52.661751 systemd[1]: Finished dracut-pre-pivot.service. Sep 6 01:19:52.671228 systemd[1]: Starting initrd-cleanup.service... Sep 6 01:19:52.700125 systemd[1]: Stopped target nss-lookup.target. Sep 6 01:19:52.704616 systemd[1]: Stopped target remote-cryptsetup.target. Sep 6 01:19:52.850000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.713618 systemd[1]: Stopped target timers.target. Sep 6 01:19:52.723764 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Sep 6 01:19:52.867000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.723829 systemd[1]: Stopped dracut-pre-pivot.service. Sep 6 01:19:52.878000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.732722 systemd[1]: Stopped target initrd.target. Sep 6 01:19:52.886000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.742328 systemd[1]: Stopped target basic.target. Sep 6 01:19:52.896000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.750779 systemd[1]: Stopped target ignition-complete.target. Sep 6 01:19:52.759599 systemd[1]: Stopped target ignition-diskful.target. Sep 6 01:19:52.923900 iscsid[853]: iscsid shutting down. Sep 6 01:19:52.769305 systemd[1]: Stopped target initrd-root-device.target. Sep 6 01:19:52.940900 ignition[1038]: INFO : Ignition 2.14.0 Sep 6 01:19:52.940900 ignition[1038]: INFO : Stage: umount Sep 6 01:19:52.940900 ignition[1038]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 6 01:19:52.940900 ignition[1038]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 6 01:19:52.940900 ignition[1038]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 6 01:19:52.940900 ignition[1038]: INFO : umount: umount passed Sep 6 01:19:52.940900 ignition[1038]: INFO : Ignition finished successfully Sep 6 01:19:52.943000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.957000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.973000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.995000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:53.012000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.778239 systemd[1]: Stopped target remote-fs.target. Sep 6 01:19:53.021000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.786790 systemd[1]: Stopped target remote-fs-pre.target. Sep 6 01:19:53.030000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.796910 systemd[1]: Stopped target sysinit.target. Sep 6 01:19:53.040000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.809454 systemd[1]: Stopped target local-fs.target. Sep 6 01:19:53.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.819261 systemd[1]: Stopped target local-fs-pre.target. Sep 6 01:19:52.830110 systemd[1]: Stopped target swap.target. Sep 6 01:19:52.840801 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Sep 6 01:19:52.840866 systemd[1]: Stopped dracut-pre-mount.service. Sep 6 01:19:52.850775 systemd[1]: Stopped target cryptsetup.target. Sep 6 01:19:52.859776 systemd[1]: dracut-initqueue.service: Deactivated successfully. Sep 6 01:19:52.859827 systemd[1]: Stopped dracut-initqueue.service. Sep 6 01:19:52.867905 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Sep 6 01:19:52.867948 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Sep 6 01:19:52.878433 systemd[1]: ignition-files.service: Deactivated successfully. Sep 6 01:19:53.125000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.878473 systemd[1]: Stopped ignition-files.service. Sep 6 01:19:52.886587 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Sep 6 01:19:53.145000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.886625 systemd[1]: Stopped flatcar-metadata-hostname.service. Sep 6 01:19:52.897858 systemd[1]: Stopping ignition-mount.service... Sep 6 01:19:52.905176 systemd[1]: Stopping iscsid.service... Sep 6 01:19:52.914458 systemd[1]: Stopping sysroot-boot.service... Sep 6 01:19:52.936112 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Sep 6 01:19:52.936194 systemd[1]: Stopped systemd-udev-trigger.service. Sep 6 01:19:53.198000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.943717 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Sep 6 01:19:52.943798 systemd[1]: Stopped dracut-pre-trigger.service. Sep 6 01:19:53.221000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.959953 systemd[1]: sysroot-boot.mount: Deactivated successfully. Sep 6 01:19:53.230000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.960636 systemd[1]: iscsid.service: Deactivated successfully. Sep 6 01:19:53.242000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.960769 systemd[1]: Stopped iscsid.service. Sep 6 01:19:52.974815 systemd[1]: initrd-cleanup.service: Deactivated successfully. Sep 6 01:19:52.974905 systemd[1]: Finished initrd-cleanup.service. Sep 6 01:19:53.268000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.996332 systemd[1]: ignition-mount.service: Deactivated successfully. Sep 6 01:19:53.276000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:52.996423 systemd[1]: Stopped ignition-mount.service. Sep 6 01:19:53.288000 audit: BPF prog-id=6 op=UNLOAD Sep 6 01:19:53.013133 systemd[1]: ignition-disks.service: Deactivated successfully. Sep 6 01:19:53.301000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:53.013189 systemd[1]: Stopped ignition-disks.service. Sep 6 01:19:53.311000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:53.022316 systemd[1]: ignition-kargs.service: Deactivated successfully. Sep 6 01:19:53.319000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:53.022361 systemd[1]: Stopped ignition-kargs.service. Sep 6 01:19:53.339000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:53.030326 systemd[1]: ignition-fetch.service: Deactivated successfully. Sep 6 01:19:53.363479 kernel: hv_netvsc 000d3afd-7083-000d-3afd-7083000d3afd eth0: Data path switched from VF: enP59283s1 Sep 6 01:19:53.357000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:53.030368 systemd[1]: Stopped ignition-fetch.service. Sep 6 01:19:53.368000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:53.041013 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Sep 6 01:19:53.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:53.377000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:53.041059 systemd[1]: Stopped ignition-fetch-offline.service. Sep 6 01:19:53.050442 systemd[1]: Stopped target paths.target. Sep 6 01:19:53.058487 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Sep 6 01:19:53.066768 systemd[1]: Stopped systemd-ask-password-console.path. Sep 6 01:19:53.076579 systemd[1]: Stopped target slices.target. Sep 6 01:19:53.086552 systemd[1]: Stopped target sockets.target. Sep 6 01:19:53.094828 systemd[1]: iscsid.socket: Deactivated successfully. Sep 6 01:19:53.094874 systemd[1]: Closed iscsid.socket. Sep 6 01:19:53.116898 systemd[1]: ignition-setup.service: Deactivated successfully. Sep 6 01:19:53.116958 systemd[1]: Stopped ignition-setup.service. Sep 6 01:19:53.126690 systemd[1]: Stopping iscsiuio.service... Sep 6 01:19:53.136286 systemd[1]: iscsiuio.service: Deactivated successfully. Sep 6 01:19:53.136386 systemd[1]: Stopped iscsiuio.service. Sep 6 01:19:53.146151 systemd[1]: Stopped target network.target. Sep 6 01:19:53.157083 systemd[1]: iscsiuio.socket: Deactivated successfully. Sep 6 01:19:53.157119 systemd[1]: Closed iscsiuio.socket. Sep 6 01:19:53.165614 systemd[1]: Stopping systemd-networkd.service... Sep 6 01:19:53.173817 systemd[1]: Stopping systemd-resolved.service... Sep 6 01:19:53.181162 systemd-networkd[847]: eth0: DHCPv6 lease lost Sep 6 01:19:53.465000 audit: BPF prog-id=9 op=UNLOAD Sep 6 01:19:53.186064 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 6 01:19:53.474000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:53.186168 systemd[1]: Stopped systemd-networkd.service. Sep 6 01:19:53.200061 systemd[1]: systemd-networkd.socket: Deactivated successfully. Sep 6 01:19:53.200101 systemd[1]: Closed systemd-networkd.socket. Sep 6 01:19:53.209095 systemd[1]: Stopping network-cleanup.service... Sep 6 01:19:53.217651 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Sep 6 01:19:53.217716 systemd[1]: Stopped parse-ip-for-networkd.service. Sep 6 01:19:53.222812 systemd[1]: systemd-sysctl.service: Deactivated successfully. Sep 6 01:19:53.222869 systemd[1]: Stopped systemd-sysctl.service. Sep 6 01:19:53.235685 systemd[1]: systemd-modules-load.service: Deactivated successfully. Sep 6 01:19:53.235747 systemd[1]: Stopped systemd-modules-load.service. Sep 6 01:19:53.245582 systemd[1]: Stopping systemd-udevd.service... Sep 6 01:19:53.256118 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Sep 6 01:19:53.256658 systemd[1]: systemd-resolved.service: Deactivated successfully. Sep 6 01:19:53.256780 systemd[1]: Stopped systemd-resolved.service. Sep 6 01:19:53.269186 systemd[1]: systemd-udevd.service: Deactivated successfully. Sep 6 01:19:53.269311 systemd[1]: Stopped systemd-udevd.service. Sep 6 01:19:53.278200 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Sep 6 01:19:53.278248 systemd[1]: Closed systemd-udevd-control.socket. Sep 6 01:19:53.289033 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Sep 6 01:19:53.289068 systemd[1]: Closed systemd-udevd-kernel.socket. Sep 6 01:19:53.293917 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Sep 6 01:19:53.293967 systemd[1]: Stopped dracut-pre-udev.service. Sep 6 01:19:53.302233 systemd[1]: dracut-cmdline.service: Deactivated successfully. Sep 6 01:19:53.302283 systemd[1]: Stopped dracut-cmdline.service. Sep 6 01:19:53.311467 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Sep 6 01:19:53.311507 systemd[1]: Stopped dracut-cmdline-ask.service. Sep 6 01:19:53.320807 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Sep 6 01:19:53.329974 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Sep 6 01:19:53.330031 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Sep 6 01:19:53.344069 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Sep 6 01:19:53.344122 systemd[1]: Stopped kmod-static-nodes.service. Sep 6 01:19:53.358360 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Sep 6 01:19:53.358408 systemd[1]: Stopped systemd-vconsole-setup.service. Sep 6 01:19:53.649000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:53.369419 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Sep 6 01:19:53.663000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:53.369896 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Sep 6 01:19:53.369987 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Sep 6 01:19:53.466385 systemd[1]: network-cleanup.service: Deactivated successfully. Sep 6 01:19:53.466488 systemd[1]: Stopped network-cleanup.service. Sep 6 01:19:53.640221 systemd[1]: sysroot-boot.service: Deactivated successfully. Sep 6 01:19:53.640323 systemd[1]: Stopped sysroot-boot.service. Sep 6 01:19:53.650379 systemd[1]: Reached target initrd-switch-root.target. Sep 6 01:19:53.655189 systemd[1]: initrd-setup-root.service: Deactivated successfully. Sep 6 01:19:53.655246 systemd[1]: Stopped initrd-setup-root.service. Sep 6 01:19:53.664767 systemd[1]: Starting initrd-switch-root.service... Sep 6 01:19:53.733621 systemd-journald[276]: Received SIGTERM from PID 1 (n/a). Sep 6 01:19:53.684067 systemd[1]: Switching root. Sep 6 01:19:53.733698 systemd-journald[276]: Journal stopped Sep 6 01:20:04.317036 kernel: SELinux: Class mctp_socket not defined in policy. Sep 6 01:20:04.317057 kernel: SELinux: Class anon_inode not defined in policy. Sep 6 01:20:04.317067 kernel: SELinux: the above unknown classes and permissions will be allowed Sep 6 01:20:04.317077 kernel: SELinux: policy capability network_peer_controls=1 Sep 6 01:20:04.317085 kernel: SELinux: policy capability open_perms=1 Sep 6 01:20:04.317093 kernel: SELinux: policy capability extended_socket_class=1 Sep 6 01:20:04.317102 kernel: SELinux: policy capability always_check_network=0 Sep 6 01:20:04.317109 kernel: SELinux: policy capability cgroup_seclabel=1 Sep 6 01:20:04.317117 kernel: SELinux: policy capability nnp_nosuid_transition=1 Sep 6 01:20:04.317125 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Sep 6 01:20:04.317133 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Sep 6 01:20:04.317142 kernel: kauditd_printk_skb: 43 callbacks suppressed Sep 6 01:20:04.317151 kernel: audit: type=1403 audit(1757121595.739:82): auid=4294967295 ses=4294967295 lsm=selinux res=1 Sep 6 01:20:04.317162 systemd[1]: Successfully loaded SELinux policy in 243.780ms. Sep 6 01:20:04.317173 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 22.434ms. Sep 6 01:20:04.317185 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 6 01:20:04.317194 systemd[1]: Detected virtualization microsoft. Sep 6 01:20:04.317203 systemd[1]: Detected architecture arm64. Sep 6 01:20:04.317211 systemd[1]: Detected first boot. Sep 6 01:20:04.317220 systemd[1]: Hostname set to . Sep 6 01:20:04.317229 systemd[1]: Initializing machine ID from random generator. Sep 6 01:20:04.317238 kernel: audit: type=1400 audit(1757121596.427:83): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 6 01:20:04.317249 kernel: audit: type=1400 audit(1757121596.427:84): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 6 01:20:04.317257 kernel: audit: type=1334 audit(1757121596.447:85): prog-id=10 op=LOAD Sep 6 01:20:04.317266 kernel: audit: type=1334 audit(1757121596.447:86): prog-id=10 op=UNLOAD Sep 6 01:20:04.317274 kernel: audit: type=1334 audit(1757121596.464:87): prog-id=11 op=LOAD Sep 6 01:20:04.317282 kernel: audit: type=1334 audit(1757121596.464:88): prog-id=11 op=UNLOAD Sep 6 01:20:04.317291 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Sep 6 01:20:04.317300 kernel: audit: type=1400 audit(1757121597.552:89): avc: denied { associate } for pid=1071 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 6 01:20:04.317310 kernel: audit: type=1300 audit(1757121597.552:89): arch=c00000b7 syscall=5 success=yes exit=0 a0=400014588c a1=40000c6df8 a2=40000cd0c0 a3=32 items=0 ppid=1054 pid=1071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:04.317320 kernel: audit: type=1327 audit(1757121597.552:89): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 6 01:20:04.317329 systemd[1]: Populated /etc with preset unit settings. Sep 6 01:20:04.317338 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 01:20:04.317347 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 01:20:04.317359 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 01:20:04.317368 kernel: kauditd_printk_skb: 6 callbacks suppressed Sep 6 01:20:04.317377 kernel: audit: type=1334 audit(1757121603.512:91): prog-id=12 op=LOAD Sep 6 01:20:04.317385 kernel: audit: type=1334 audit(1757121603.512:92): prog-id=3 op=UNLOAD Sep 6 01:20:04.317394 systemd[1]: initrd-switch-root.service: Deactivated successfully. Sep 6 01:20:04.317403 kernel: audit: type=1334 audit(1757121603.518:93): prog-id=13 op=LOAD Sep 6 01:20:04.317413 systemd[1]: Stopped initrd-switch-root.service. Sep 6 01:20:04.317423 kernel: audit: type=1334 audit(1757121603.524:94): prog-id=14 op=LOAD Sep 6 01:20:04.317431 kernel: audit: type=1334 audit(1757121603.524:95): prog-id=4 op=UNLOAD Sep 6 01:20:04.317441 kernel: audit: type=1334 audit(1757121603.524:96): prog-id=5 op=UNLOAD Sep 6 01:20:04.317450 kernel: audit: type=1131 audit(1757121603.525:97): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.317459 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Sep 6 01:20:04.317468 kernel: audit: type=1334 audit(1757121603.549:98): prog-id=12 op=UNLOAD Sep 6 01:20:04.317477 systemd[1]: Created slice system-addon\x2dconfig.slice. Sep 6 01:20:04.317487 kernel: audit: type=1130 audit(1757121603.570:99): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.317496 kernel: audit: type=1131 audit(1757121603.570:100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.317506 systemd[1]: Created slice system-addon\x2drun.slice. Sep 6 01:20:04.317516 systemd[1]: Created slice system-getty.slice. Sep 6 01:20:04.317525 systemd[1]: Created slice system-modprobe.slice. Sep 6 01:20:04.317534 systemd[1]: Created slice system-serial\x2dgetty.slice. Sep 6 01:20:04.317544 systemd[1]: Created slice system-system\x2dcloudinit.slice. Sep 6 01:20:04.317554 systemd[1]: Created slice system-systemd\x2dfsck.slice. Sep 6 01:20:04.317563 systemd[1]: Created slice user.slice. Sep 6 01:20:04.317572 systemd[1]: Started systemd-ask-password-console.path. Sep 6 01:20:04.317581 systemd[1]: Started systemd-ask-password-wall.path. Sep 6 01:20:04.317591 systemd[1]: Set up automount boot.automount. Sep 6 01:20:04.317601 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Sep 6 01:20:04.317610 systemd[1]: Stopped target initrd-switch-root.target. Sep 6 01:20:04.317619 systemd[1]: Stopped target initrd-fs.target. Sep 6 01:20:04.317628 systemd[1]: Stopped target initrd-root-fs.target. Sep 6 01:20:04.317637 systemd[1]: Reached target integritysetup.target. Sep 6 01:20:04.317646 systemd[1]: Reached target remote-cryptsetup.target. Sep 6 01:20:04.317655 systemd[1]: Reached target remote-fs.target. Sep 6 01:20:04.317666 systemd[1]: Reached target slices.target. Sep 6 01:20:04.317675 systemd[1]: Reached target swap.target. Sep 6 01:20:04.317684 systemd[1]: Reached target torcx.target. Sep 6 01:20:04.317693 systemd[1]: Reached target veritysetup.target. Sep 6 01:20:04.317702 systemd[1]: Listening on systemd-coredump.socket. Sep 6 01:20:04.317712 systemd[1]: Listening on systemd-initctl.socket. Sep 6 01:20:04.317721 systemd[1]: Listening on systemd-networkd.socket. Sep 6 01:20:04.317740 systemd[1]: Listening on systemd-udevd-control.socket. Sep 6 01:20:04.317750 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 6 01:20:04.317761 systemd[1]: Listening on systemd-userdbd.socket. Sep 6 01:20:04.317770 systemd[1]: Mounting dev-hugepages.mount... Sep 6 01:20:04.317779 systemd[1]: Mounting dev-mqueue.mount... Sep 6 01:20:04.317788 systemd[1]: Mounting media.mount... Sep 6 01:20:04.317799 systemd[1]: Mounting sys-kernel-debug.mount... Sep 6 01:20:04.317808 systemd[1]: Mounting sys-kernel-tracing.mount... Sep 6 01:20:04.317818 systemd[1]: Mounting tmp.mount... Sep 6 01:20:04.317827 systemd[1]: Starting flatcar-tmpfiles.service... Sep 6 01:20:04.317837 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 01:20:04.317846 systemd[1]: Starting kmod-static-nodes.service... Sep 6 01:20:04.317855 systemd[1]: Starting modprobe@configfs.service... Sep 6 01:20:04.317864 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 01:20:04.317874 systemd[1]: Starting modprobe@drm.service... Sep 6 01:20:04.317884 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 01:20:04.317894 systemd[1]: Starting modprobe@fuse.service... Sep 6 01:20:04.317903 systemd[1]: Starting modprobe@loop.service... Sep 6 01:20:04.317913 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Sep 6 01:20:04.317923 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Sep 6 01:20:04.317932 systemd[1]: Stopped systemd-fsck-root.service. Sep 6 01:20:04.317941 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Sep 6 01:20:04.317951 systemd[1]: Stopped systemd-fsck-usr.service. Sep 6 01:20:04.317961 systemd[1]: Stopped systemd-journald.service. Sep 6 01:20:04.317972 systemd[1]: systemd-journald.service: Consumed 3.242s CPU time. Sep 6 01:20:04.317982 systemd[1]: Starting systemd-journald.service... Sep 6 01:20:04.317991 kernel: loop: module loaded Sep 6 01:20:04.317999 kernel: fuse: init (API version 7.34) Sep 6 01:20:04.318008 systemd[1]: Starting systemd-modules-load.service... Sep 6 01:20:04.318017 systemd[1]: Starting systemd-network-generator.service... Sep 6 01:20:04.318027 systemd[1]: Starting systemd-remount-fs.service... Sep 6 01:20:04.318036 systemd[1]: Starting systemd-udev-trigger.service... Sep 6 01:20:04.318045 systemd[1]: verity-setup.service: Deactivated successfully. Sep 6 01:20:04.318056 systemd[1]: Stopped verity-setup.service. Sep 6 01:20:04.318065 systemd[1]: Mounted dev-hugepages.mount. Sep 6 01:20:04.318074 systemd[1]: Mounted dev-mqueue.mount. Sep 6 01:20:04.318084 systemd[1]: Mounted media.mount. Sep 6 01:20:04.318093 systemd[1]: Mounted sys-kernel-debug.mount. Sep 6 01:20:04.318102 systemd[1]: Mounted sys-kernel-tracing.mount. Sep 6 01:20:04.318112 systemd[1]: Mounted tmp.mount. Sep 6 01:20:04.318121 systemd[1]: Finished flatcar-tmpfiles.service. Sep 6 01:20:04.318134 systemd-journald[1177]: Journal started Sep 6 01:20:04.318170 systemd-journald[1177]: Runtime Journal (/run/log/journal/b81bdb9e6c874c54ba86d4b42fe3722e) is 8.0M, max 78.5M, 70.5M free. Sep 6 01:19:55.739000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Sep 6 01:19:56.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 6 01:19:56.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 6 01:19:56.447000 audit: BPF prog-id=10 op=LOAD Sep 6 01:19:56.447000 audit: BPF prog-id=10 op=UNLOAD Sep 6 01:19:56.464000 audit: BPF prog-id=11 op=LOAD Sep 6 01:19:56.464000 audit: BPF prog-id=11 op=UNLOAD Sep 6 01:19:57.552000 audit[1071]: AVC avc: denied { associate } for pid=1071 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 6 01:19:57.552000 audit[1071]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=400014588c a1=40000c6df8 a2=40000cd0c0 a3=32 items=0 ppid=1054 pid=1071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:57.552000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 6 01:19:57.584000 audit[1071]: AVC avc: denied { associate } for pid=1071 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Sep 6 01:19:57.584000 audit[1071]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=4000145969 a2=1ed a3=0 items=2 ppid=1054 pid=1071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:19:57.584000 audit: CWD cwd="/" Sep 6 01:19:57.584000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:19:57.584000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:19:57.584000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 6 01:20:03.512000 audit: BPF prog-id=12 op=LOAD Sep 6 01:20:03.512000 audit: BPF prog-id=3 op=UNLOAD Sep 6 01:20:03.518000 audit: BPF prog-id=13 op=LOAD Sep 6 01:20:03.524000 audit: BPF prog-id=14 op=LOAD Sep 6 01:20:03.524000 audit: BPF prog-id=4 op=UNLOAD Sep 6 01:20:03.524000 audit: BPF prog-id=5 op=UNLOAD Sep 6 01:20:03.525000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:03.549000 audit: BPF prog-id=12 op=UNLOAD Sep 6 01:20:03.570000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:03.570000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.120000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.135000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.146000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.146000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.153000 audit: BPF prog-id=15 op=LOAD Sep 6 01:20:04.153000 audit: BPF prog-id=16 op=LOAD Sep 6 01:20:04.153000 audit: BPF prog-id=17 op=LOAD Sep 6 01:20:04.153000 audit: BPF prog-id=13 op=UNLOAD Sep 6 01:20:04.153000 audit: BPF prog-id=14 op=UNLOAD Sep 6 01:20:04.253000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.313000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Sep 6 01:20:04.313000 audit[1177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=fffff49ccef0 a2=4000 a3=1 items=0 ppid=1 pid=1177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:04.313000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Sep 6 01:20:04.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:19:57.511899 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:19:57Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 01:20:03.511551 systemd[1]: Queued start job for default target multi-user.target. Sep 6 01:19:57.512188 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:19:57Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 6 01:20:03.511563 systemd[1]: Unnecessary job was removed for dev-sda6.device. Sep 6 01:19:57.512206 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:19:57Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 6 01:20:03.525780 systemd[1]: systemd-journald.service: Deactivated successfully. Sep 6 01:19:57.512240 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:19:57Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Sep 6 01:20:03.526143 systemd[1]: systemd-journald.service: Consumed 3.242s CPU time. Sep 6 01:19:57.512250 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:19:57Z" level=debug msg="skipped missing lower profile" missing profile=oem Sep 6 01:19:57.512280 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:19:57Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Sep 6 01:19:57.512292 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:19:57Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Sep 6 01:19:57.512482 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:19:57Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Sep 6 01:19:57.512512 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:19:57Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 6 01:19:57.512525 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:19:57Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 6 01:19:57.539248 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:19:57Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Sep 6 01:19:57.539312 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:19:57Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Sep 6 01:19:57.539333 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:19:57Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Sep 6 01:19:57.539348 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:19:57Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Sep 6 01:19:57.539370 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:19:57Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Sep 6 01:19:57.539384 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:19:57Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Sep 6 01:20:02.639747 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:20:02Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 01:20:02.640034 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:20:02Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 01:20:02.640129 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:20:02Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 01:20:02.640294 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:20:02Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 6 01:20:02.640347 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:20:02Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Sep 6 01:20:02.640403 /usr/lib/systemd/system-generators/torcx-generator[1071]: time="2025-09-06T01:20:02Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Sep 6 01:20:04.328850 systemd[1]: Started systemd-journald.service. Sep 6 01:20:04.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.329831 systemd[1]: Finished kmod-static-nodes.service. Sep 6 01:20:04.336000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.341000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.337117 systemd[1]: modprobe@configfs.service: Deactivated successfully. Sep 6 01:20:04.337251 systemd[1]: Finished modprobe@configfs.service. Sep 6 01:20:04.347000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.347000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.342625 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 01:20:04.342763 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 01:20:04.348106 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 6 01:20:04.348284 systemd[1]: Finished modprobe@drm.service. Sep 6 01:20:04.352000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.352000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.353194 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 01:20:04.353336 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 01:20:04.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.357000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.358662 systemd[1]: modprobe@fuse.service: Deactivated successfully. Sep 6 01:20:04.358815 systemd[1]: Finished modprobe@fuse.service. Sep 6 01:20:04.363000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.363000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.363928 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 01:20:04.364049 systemd[1]: Finished modprobe@loop.service. Sep 6 01:20:04.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.369000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.370600 systemd[1]: Finished systemd-modules-load.service. Sep 6 01:20:04.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.376477 systemd[1]: Finished systemd-network-generator.service. Sep 6 01:20:04.381000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.382453 systemd[1]: Finished systemd-remount-fs.service. Sep 6 01:20:04.386000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.387581 systemd[1]: Finished systemd-udev-trigger.service. Sep 6 01:20:04.392000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.393296 systemd[1]: Reached target network-pre.target. Sep 6 01:20:04.402060 systemd[1]: Mounting sys-fs-fuse-connections.mount... Sep 6 01:20:04.407664 systemd[1]: Mounting sys-kernel-config.mount... Sep 6 01:20:04.412054 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Sep 6 01:20:04.413906 systemd[1]: Starting systemd-hwdb-update.service... Sep 6 01:20:04.419937 systemd[1]: Starting systemd-journal-flush.service... Sep 6 01:20:04.424313 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 01:20:04.425569 systemd[1]: Starting systemd-random-seed.service... Sep 6 01:20:04.430074 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 01:20:04.431377 systemd[1]: Starting systemd-sysctl.service... Sep 6 01:20:04.436579 systemd[1]: Starting systemd-sysusers.service... Sep 6 01:20:04.441950 systemd[1]: Starting systemd-udev-settle.service... Sep 6 01:20:04.450145 systemd[1]: Mounted sys-fs-fuse-connections.mount. Sep 6 01:20:04.455201 systemd[1]: Mounted sys-kernel-config.mount. Sep 6 01:20:04.461643 udevadm[1191]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Sep 6 01:20:04.480813 systemd-journald[1177]: Time spent on flushing to /var/log/journal/b81bdb9e6c874c54ba86d4b42fe3722e is 13.781ms for 1087 entries. Sep 6 01:20:04.480813 systemd-journald[1177]: System Journal (/var/log/journal/b81bdb9e6c874c54ba86d4b42fe3722e) is 8.0M, max 2.6G, 2.6G free. Sep 6 01:20:04.559695 systemd-journald[1177]: Received client request to flush runtime journal. Sep 6 01:20:04.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:04.495173 systemd[1]: Finished systemd-random-seed.service. Sep 6 01:20:04.500453 systemd[1]: Reached target first-boot-complete.target. Sep 6 01:20:04.520334 systemd[1]: Finished systemd-sysctl.service. Sep 6 01:20:04.560720 systemd[1]: Finished systemd-journal-flush.service. Sep 6 01:20:04.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:05.069278 systemd[1]: Finished systemd-sysusers.service. Sep 6 01:20:05.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:05.075146 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 6 01:20:05.503649 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 6 01:20:05.508000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:05.511171 systemd[1]: Finished systemd-hwdb-update.service. Sep 6 01:20:05.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:05.515000 audit: BPF prog-id=18 op=LOAD Sep 6 01:20:05.515000 audit: BPF prog-id=19 op=LOAD Sep 6 01:20:05.515000 audit: BPF prog-id=7 op=UNLOAD Sep 6 01:20:05.515000 audit: BPF prog-id=8 op=UNLOAD Sep 6 01:20:05.517365 systemd[1]: Starting systemd-udevd.service... Sep 6 01:20:05.536008 systemd-udevd[1196]: Using default interface naming scheme 'v252'. Sep 6 01:20:05.662205 systemd[1]: Started systemd-udevd.service. Sep 6 01:20:05.670000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:05.678000 audit: BPF prog-id=20 op=LOAD Sep 6 01:20:05.679646 systemd[1]: Starting systemd-networkd.service... Sep 6 01:20:05.701935 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Sep 6 01:20:05.739000 audit: BPF prog-id=21 op=LOAD Sep 6 01:20:05.739000 audit: BPF prog-id=22 op=LOAD Sep 6 01:20:05.739000 audit: BPF prog-id=23 op=LOAD Sep 6 01:20:05.741402 systemd[1]: Starting systemd-userdbd.service... Sep 6 01:20:05.761775 kernel: mousedev: PS/2 mouse device common for all mice Sep 6 01:20:05.806000 audit[1201]: AVC avc: denied { confidentiality } for pid=1201 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Sep 6 01:20:05.820316 systemd[1]: Started systemd-userdbd.service. Sep 6 01:20:05.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:05.826766 kernel: hv_vmbus: registering driver hv_balloon Sep 6 01:20:05.838676 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Sep 6 01:20:05.838716 kernel: hv_balloon: Memory hot add disabled on ARM64 Sep 6 01:20:05.838757 kernel: hv_vmbus: registering driver hyperv_fb Sep 6 01:20:05.806000 audit[1201]: SYSCALL arch=c00000b7 syscall=105 success=yes exit=0 a0=aaaaebc154f0 a1=aa2c a2=ffffbc1b24b0 a3=aaaaebb75010 items=12 ppid=1196 pid=1201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:05.806000 audit: CWD cwd="/" Sep 6 01:20:05.806000 audit: PATH item=0 name=(null) inode=5863 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:05.806000 audit: PATH item=1 name=(null) inode=9966 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:05.806000 audit: PATH item=2 name=(null) inode=9966 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:05.806000 audit: PATH item=3 name=(null) inode=9967 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:05.806000 audit: PATH item=4 name=(null) inode=9966 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:05.806000 audit: PATH item=5 name=(null) inode=9968 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:05.806000 audit: PATH item=6 name=(null) inode=9966 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:05.806000 audit: PATH item=7 name=(null) inode=9969 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:05.806000 audit: PATH item=8 name=(null) inode=9966 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:05.806000 audit: PATH item=9 name=(null) inode=9970 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:05.806000 audit: PATH item=10 name=(null) inode=9966 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:05.806000 audit: PATH item=11 name=(null) inode=9971 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:20:05.806000 audit: PROCTITLE proctitle="(udev-worker)" Sep 6 01:20:05.850758 kernel: hv_utils: Registering HyperV Utility Driver Sep 6 01:20:05.854951 kernel: hv_vmbus: registering driver hv_utils Sep 6 01:20:05.855056 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Sep 6 01:20:05.861752 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Sep 6 01:20:05.874760 kernel: hv_utils: Heartbeat IC version 3.0 Sep 6 01:20:05.874855 kernel: hv_utils: Shutdown IC version 3.2 Sep 6 01:20:05.875998 kernel: hv_utils: TimeSync IC version 4.0 Sep 6 01:20:05.498449 kernel: Console: switching to colour dummy device 80x25 Sep 6 01:20:05.605250 systemd-journald[1177]: Time jumped backwards, rotating. Sep 6 01:20:05.605332 kernel: Console: switching to colour frame buffer device 128x48 Sep 6 01:20:05.711189 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 6 01:20:05.749750 systemd-networkd[1217]: lo: Link UP Sep 6 01:20:05.750075 systemd-networkd[1217]: lo: Gained carrier Sep 6 01:20:05.750606 systemd-networkd[1217]: Enumeration completed Sep 6 01:20:05.751288 systemd[1]: Started systemd-networkd.service. Sep 6 01:20:05.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:05.756287 systemd[1]: Finished systemd-udev-settle.service. Sep 6 01:20:05.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:05.762310 systemd[1]: Starting lvm2-activation-early.service... Sep 6 01:20:05.768130 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 6 01:20:05.783360 systemd-networkd[1217]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 6 01:20:05.830738 kernel: mlx5_core e793:00:02.0 enP59283s1: Link up Sep 6 01:20:05.857754 kernel: hv_netvsc 000d3afd-7083-000d-3afd-7083000d3afd eth0: Data path switched to VF: enP59283s1 Sep 6 01:20:05.858749 systemd-networkd[1217]: enP59283s1: Link UP Sep 6 01:20:05.859088 systemd-networkd[1217]: eth0: Link UP Sep 6 01:20:05.859099 systemd-networkd[1217]: eth0: Gained carrier Sep 6 01:20:05.867260 systemd-networkd[1217]: enP59283s1: Gained carrier Sep 6 01:20:05.876865 systemd-networkd[1217]: eth0: DHCPv4 address 10.200.20.17/24, gateway 10.200.20.1 acquired from 168.63.129.16 Sep 6 01:20:06.004164 lvm[1274]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 6 01:20:06.042636 systemd[1]: Finished lvm2-activation-early.service. Sep 6 01:20:06.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.049039 systemd[1]: Reached target cryptsetup.target. Sep 6 01:20:06.054863 systemd[1]: Starting lvm2-activation.service... Sep 6 01:20:06.059060 lvm[1276]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 6 01:20:06.086683 systemd[1]: Finished lvm2-activation.service. Sep 6 01:20:06.090000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.091600 systemd[1]: Reached target local-fs-pre.target. Sep 6 01:20:06.096408 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Sep 6 01:20:06.096442 systemd[1]: Reached target local-fs.target. Sep 6 01:20:06.101156 systemd[1]: Reached target machines.target. Sep 6 01:20:06.107128 systemd[1]: Starting ldconfig.service... Sep 6 01:20:06.112794 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 01:20:06.112872 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 01:20:06.114173 systemd[1]: Starting systemd-boot-update.service... Sep 6 01:20:06.119645 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Sep 6 01:20:06.126812 systemd[1]: Starting systemd-machine-id-commit.service... Sep 6 01:20:06.133145 systemd[1]: Starting systemd-sysext.service... Sep 6 01:20:06.162580 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1278 (bootctl) Sep 6 01:20:06.164006 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Sep 6 01:20:06.200366 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Sep 6 01:20:06.207000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.212211 systemd[1]: Unmounting usr-share-oem.mount... Sep 6 01:20:06.250744 systemd[1]: usr-share-oem.mount: Deactivated successfully. Sep 6 01:20:06.251062 systemd[1]: Unmounted usr-share-oem.mount. Sep 6 01:20:06.302747 kernel: loop0: detected capacity change from 0 to 211168 Sep 6 01:20:06.367852 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Sep 6 01:20:06.393757 kernel: loop1: detected capacity change from 0 to 211168 Sep 6 01:20:06.401102 (sd-sysext)[1290]: Using extensions 'kubernetes'. Sep 6 01:20:06.402906 (sd-sysext)[1290]: Merged extensions into '/usr'. Sep 6 01:20:06.410525 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Sep 6 01:20:06.411479 systemd[1]: Finished systemd-machine-id-commit.service. Sep 6 01:20:06.418211 systemd-fsck[1285]: fsck.fat 4.2 (2021-01-31) Sep 6 01:20:06.418211 systemd-fsck[1285]: /dev/sda1: 236 files, 117310/258078 clusters Sep 6 01:20:06.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.419388 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Sep 6 01:20:06.425000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.432138 systemd[1]: Mounting boot.mount... Sep 6 01:20:06.443372 systemd[1]: Mounting usr-share-oem.mount... Sep 6 01:20:06.448158 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 01:20:06.449511 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 01:20:06.454998 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 01:20:06.461976 systemd[1]: Starting modprobe@loop.service... Sep 6 01:20:06.466163 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 01:20:06.466298 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 01:20:06.469531 systemd[1]: Mounted boot.mount. Sep 6 01:20:06.476854 systemd[1]: Mounted usr-share-oem.mount. Sep 6 01:20:06.481527 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 01:20:06.481688 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 01:20:06.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.485000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.486624 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 01:20:06.486846 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 01:20:06.490000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.490000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.491982 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 01:20:06.492118 systemd[1]: Finished modprobe@loop.service. Sep 6 01:20:06.495000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.495000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.497001 systemd[1]: Finished systemd-boot-update.service. Sep 6 01:20:06.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.502317 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 01:20:06.502424 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 01:20:06.503441 systemd[1]: Finished systemd-sysext.service. Sep 6 01:20:06.508000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.510494 systemd[1]: Starting ensure-sysext.service... Sep 6 01:20:06.516035 systemd[1]: Starting systemd-tmpfiles-setup.service... Sep 6 01:20:06.525760 systemd[1]: Reloading. Sep 6 01:20:06.547483 systemd-tmpfiles[1301]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Sep 6 01:20:06.565457 systemd-tmpfiles[1301]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Sep 6 01:20:06.576796 /usr/lib/systemd/system-generators/torcx-generator[1321]: time="2025-09-06T01:20:06Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 01:20:06.576821 /usr/lib/systemd/system-generators/torcx-generator[1321]: time="2025-09-06T01:20:06Z" level=info msg="torcx already run" Sep 6 01:20:06.582012 systemd-tmpfiles[1301]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Sep 6 01:20:06.656736 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 01:20:06.656753 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 01:20:06.672431 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 01:20:06.736000 audit: BPF prog-id=24 op=LOAD Sep 6 01:20:06.736000 audit: BPF prog-id=20 op=UNLOAD Sep 6 01:20:06.736000 audit: BPF prog-id=25 op=LOAD Sep 6 01:20:06.736000 audit: BPF prog-id=26 op=LOAD Sep 6 01:20:06.736000 audit: BPF prog-id=18 op=UNLOAD Sep 6 01:20:06.736000 audit: BPF prog-id=19 op=UNLOAD Sep 6 01:20:06.737000 audit: BPF prog-id=27 op=LOAD Sep 6 01:20:06.737000 audit: BPF prog-id=21 op=UNLOAD Sep 6 01:20:06.737000 audit: BPF prog-id=28 op=LOAD Sep 6 01:20:06.737000 audit: BPF prog-id=29 op=LOAD Sep 6 01:20:06.737000 audit: BPF prog-id=22 op=UNLOAD Sep 6 01:20:06.737000 audit: BPF prog-id=23 op=UNLOAD Sep 6 01:20:06.737000 audit: BPF prog-id=30 op=LOAD Sep 6 01:20:06.737000 audit: BPF prog-id=15 op=UNLOAD Sep 6 01:20:06.738000 audit: BPF prog-id=31 op=LOAD Sep 6 01:20:06.738000 audit: BPF prog-id=32 op=LOAD Sep 6 01:20:06.738000 audit: BPF prog-id=16 op=UNLOAD Sep 6 01:20:06.738000 audit: BPF prog-id=17 op=UNLOAD Sep 6 01:20:06.750932 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 01:20:06.752249 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 01:20:06.758991 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 01:20:06.764825 systemd[1]: Starting modprobe@loop.service... Sep 6 01:20:06.768668 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 01:20:06.768811 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 01:20:06.769630 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 01:20:06.769803 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 01:20:06.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.774000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.775642 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 01:20:06.775792 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 01:20:06.779000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.779000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.780942 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 01:20:06.781061 systemd[1]: Finished modprobe@loop.service. Sep 6 01:20:06.784000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.784000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.786906 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 01:20:06.788304 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 01:20:06.794377 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 01:20:06.799869 systemd[1]: Starting modprobe@loop.service... Sep 6 01:20:06.803795 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 01:20:06.803945 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 01:20:06.804803 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 01:20:06.804967 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 01:20:06.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.811000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.812538 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 01:20:06.812673 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 01:20:06.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.817000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.818300 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 01:20:06.818428 systemd[1]: Finished modprobe@loop.service. Sep 6 01:20:06.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.822000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.826045 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 6 01:20:06.827523 systemd[1]: Starting modprobe@dm_mod.service... Sep 6 01:20:06.832610 systemd[1]: Starting modprobe@drm.service... Sep 6 01:20:06.837580 systemd[1]: Starting modprobe@efi_pstore.service... Sep 6 01:20:06.845018 systemd[1]: Starting modprobe@loop.service... Sep 6 01:20:06.848865 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 6 01:20:06.849001 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 01:20:06.849964 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 6 01:20:06.850113 systemd[1]: Finished modprobe@dm_mod.service. Sep 6 01:20:06.855000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.855000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.856877 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 6 01:20:06.857015 systemd[1]: Finished modprobe@drm.service. Sep 6 01:20:06.861000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.861000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.862548 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 6 01:20:06.862679 systemd[1]: Finished modprobe@efi_pstore.service. Sep 6 01:20:06.867000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.867000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.868264 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 6 01:20:06.868377 systemd[1]: Finished modprobe@loop.service. Sep 6 01:20:06.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.872000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:06.873654 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 6 01:20:06.873823 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 6 01:20:06.874868 systemd[1]: Finished ensure-sysext.service. Sep 6 01:20:06.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:07.034252 systemd[1]: Finished systemd-tmpfiles-setup.service. Sep 6 01:20:07.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:07.040751 systemd[1]: Starting audit-rules.service... Sep 6 01:20:07.046082 systemd[1]: Starting clean-ca-certificates.service... Sep 6 01:20:07.053078 systemd[1]: Starting systemd-journal-catalog-update.service... Sep 6 01:20:07.059000 audit: BPF prog-id=33 op=LOAD Sep 6 01:20:07.061552 systemd[1]: Starting systemd-resolved.service... Sep 6 01:20:07.067000 audit: BPF prog-id=34 op=LOAD Sep 6 01:20:07.069228 systemd[1]: Starting systemd-timesyncd.service... Sep 6 01:20:07.075087 systemd[1]: Starting systemd-update-utmp.service... Sep 6 01:20:07.122906 systemd[1]: Finished clean-ca-certificates.service. Sep 6 01:20:07.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:07.127935 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 6 01:20:07.143000 audit[1397]: SYSTEM_BOOT pid=1397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Sep 6 01:20:07.146984 systemd[1]: Finished systemd-update-utmp.service. Sep 6 01:20:07.155000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:07.163544 systemd[1]: Started systemd-timesyncd.service. Sep 6 01:20:07.167000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:07.168210 systemd[1]: Reached target time-set.target. Sep 6 01:20:07.253028 systemd-resolved[1394]: Positive Trust Anchors: Sep 6 01:20:07.253048 systemd-resolved[1394]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 6 01:20:07.253076 systemd-resolved[1394]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 6 01:20:07.308859 systemd-resolved[1394]: Using system hostname 'ci-3510.3.8-n-645ca388a2'. Sep 6 01:20:07.310698 systemd[1]: Started systemd-resolved.service. Sep 6 01:20:07.314000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:07.315065 systemd[1]: Reached target network.target. Sep 6 01:20:07.318987 systemd[1]: Reached target nss-lookup.target. Sep 6 01:20:07.354353 systemd[1]: Finished systemd-journal-catalog-update.service. Sep 6 01:20:07.361000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:07.364583 systemd-timesyncd[1396]: Contacted time server 23.186.168.130:123 (0.flatcar.pool.ntp.org). Sep 6 01:20:07.364645 systemd-timesyncd[1396]: Initial clock synchronization to Sat 2025-09-06 01:20:07.362722 UTC. Sep 6 01:20:07.514000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Sep 6 01:20:07.514000 audit[1412]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffffe466b0 a2=420 a3=0 items=0 ppid=1391 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:07.514000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Sep 6 01:20:07.529016 augenrules[1412]: No rules Sep 6 01:20:07.530086 systemd[1]: Finished audit-rules.service. Sep 6 01:20:07.581899 systemd-networkd[1217]: eth0: Gained IPv6LL Sep 6 01:20:07.583554 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 6 01:20:07.589333 systemd[1]: Reached target network-online.target. Sep 6 01:20:12.755969 ldconfig[1277]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Sep 6 01:20:12.773790 systemd[1]: Finished ldconfig.service. Sep 6 01:20:12.779712 systemd[1]: Starting systemd-update-done.service... Sep 6 01:20:12.823713 systemd[1]: Finished systemd-update-done.service. Sep 6 01:20:12.830919 systemd[1]: Reached target sysinit.target. Sep 6 01:20:12.835747 systemd[1]: Started motdgen.path. Sep 6 01:20:12.839585 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Sep 6 01:20:12.845988 systemd[1]: Started logrotate.timer. Sep 6 01:20:12.852092 systemd[1]: Started mdadm.timer. Sep 6 01:20:12.855974 systemd[1]: Started systemd-tmpfiles-clean.timer. Sep 6 01:20:12.860580 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Sep 6 01:20:12.860613 systemd[1]: Reached target paths.target. Sep 6 01:20:12.865267 systemd[1]: Reached target timers.target. Sep 6 01:20:12.869957 systemd[1]: Listening on dbus.socket. Sep 6 01:20:12.875009 systemd[1]: Starting docker.socket... Sep 6 01:20:12.881136 systemd[1]: Listening on sshd.socket. Sep 6 01:20:12.885368 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 01:20:12.885924 systemd[1]: Listening on docker.socket. Sep 6 01:20:12.890291 systemd[1]: Reached target sockets.target. Sep 6 01:20:12.896605 systemd[1]: Reached target basic.target. Sep 6 01:20:12.901308 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 6 01:20:12.901339 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 6 01:20:12.902574 systemd[1]: Starting containerd.service... Sep 6 01:20:12.907538 systemd[1]: Starting dbus.service... Sep 6 01:20:12.912160 systemd[1]: Starting enable-oem-cloudinit.service... Sep 6 01:20:12.917706 systemd[1]: Starting extend-filesystems.service... Sep 6 01:20:12.921979 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Sep 6 01:20:12.923500 systemd[1]: Starting kubelet.service... Sep 6 01:20:12.928255 systemd[1]: Starting motdgen.service... Sep 6 01:20:12.933254 systemd[1]: Started nvidia.service. Sep 6 01:20:12.938896 systemd[1]: Starting prepare-helm.service... Sep 6 01:20:12.943999 systemd[1]: Starting ssh-key-proc-cmdline.service... Sep 6 01:20:12.949517 systemd[1]: Starting sshd-keygen.service... Sep 6 01:20:12.957901 systemd[1]: Starting systemd-logind.service... Sep 6 01:20:12.964138 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 6 01:20:12.964205 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Sep 6 01:20:12.964859 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Sep 6 01:20:12.965803 systemd[1]: Starting update-engine.service... Sep 6 01:20:12.971237 systemd[1]: Starting update-ssh-keys-after-ignition.service... Sep 6 01:20:12.983813 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Sep 6 01:20:12.993892 jq[1440]: true Sep 6 01:20:12.994102 jq[1422]: false Sep 6 01:20:12.985443 systemd[1]: Finished ssh-key-proc-cmdline.service. Sep 6 01:20:13.016315 systemd[1]: motdgen.service: Deactivated successfully. Sep 6 01:20:13.016501 systemd[1]: Finished motdgen.service. Sep 6 01:20:13.023153 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Sep 6 01:20:13.023358 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Sep 6 01:20:13.027023 extend-filesystems[1423]: Found loop1 Sep 6 01:20:13.032439 extend-filesystems[1423]: Found sda Sep 6 01:20:13.032439 extend-filesystems[1423]: Found sda1 Sep 6 01:20:13.032439 extend-filesystems[1423]: Found sda2 Sep 6 01:20:13.032439 extend-filesystems[1423]: Found sda3 Sep 6 01:20:13.032439 extend-filesystems[1423]: Found usr Sep 6 01:20:13.032439 extend-filesystems[1423]: Found sda4 Sep 6 01:20:13.032439 extend-filesystems[1423]: Found sda6 Sep 6 01:20:13.032439 extend-filesystems[1423]: Found sda7 Sep 6 01:20:13.032439 extend-filesystems[1423]: Found sda9 Sep 6 01:20:13.032439 extend-filesystems[1423]: Checking size of /dev/sda9 Sep 6 01:20:13.105532 jq[1449]: true Sep 6 01:20:13.113669 env[1445]: time="2025-09-06T01:20:13.111112220Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Sep 6 01:20:13.113585 systemd-logind[1436]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 6 01:20:13.143014 extend-filesystems[1423]: Old size kept for /dev/sda9 Sep 6 01:20:13.143014 extend-filesystems[1423]: Found sr0 Sep 6 01:20:13.176046 tar[1443]: linux-arm64/LICENSE Sep 6 01:20:13.176046 tar[1443]: linux-arm64/helm Sep 6 01:20:13.118704 systemd-logind[1436]: New seat seat0. Sep 6 01:20:13.125048 systemd[1]: extend-filesystems.service: Deactivated successfully. Sep 6 01:20:13.125214 systemd[1]: Finished extend-filesystems.service. Sep 6 01:20:13.211449 dbus-daemon[1421]: [system] SELinux support is enabled Sep 6 01:20:13.211615 systemd[1]: Started dbus.service. Sep 6 01:20:13.217355 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Sep 6 01:20:13.217379 systemd[1]: Reached target system-config.target. Sep 6 01:20:13.226860 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Sep 6 01:20:13.226883 systemd[1]: Reached target user-config.target. Sep 6 01:20:13.233660 env[1445]: time="2025-09-06T01:20:13.233540709Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Sep 6 01:20:13.233763 env[1445]: time="2025-09-06T01:20:13.233704936Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Sep 6 01:20:13.233975 systemd[1]: Started systemd-logind.service. Sep 6 01:20:13.238907 env[1445]: time="2025-09-06T01:20:13.235014752Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.190-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Sep 6 01:20:13.238907 env[1445]: time="2025-09-06T01:20:13.235046789Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Sep 6 01:20:13.238907 env[1445]: time="2025-09-06T01:20:13.235272291Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 6 01:20:13.238907 env[1445]: time="2025-09-06T01:20:13.235289090Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Sep 6 01:20:13.238907 env[1445]: time="2025-09-06T01:20:13.235301489Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Sep 6 01:20:13.238907 env[1445]: time="2025-09-06T01:20:13.235311328Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Sep 6 01:20:13.238907 env[1445]: time="2025-09-06T01:20:13.235384402Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Sep 6 01:20:13.238907 env[1445]: time="2025-09-06T01:20:13.235585466Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Sep 6 01:20:13.238907 env[1445]: time="2025-09-06T01:20:13.235697217Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 6 01:20:13.238907 env[1445]: time="2025-09-06T01:20:13.235712216Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Sep 6 01:20:13.239108 env[1445]: time="2025-09-06T01:20:13.235786930Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Sep 6 01:20:13.239108 env[1445]: time="2025-09-06T01:20:13.235800489Z" level=info msg="metadata content store policy set" policy=shared Sep 6 01:20:13.239538 dbus-daemon[1421]: [system] Successfully activated service 'org.freedesktop.systemd1' Sep 6 01:20:13.290004 env[1445]: time="2025-09-06T01:20:13.288953256Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Sep 6 01:20:13.290004 env[1445]: time="2025-09-06T01:20:13.289034409Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Sep 6 01:20:13.290004 env[1445]: time="2025-09-06T01:20:13.289051688Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Sep 6 01:20:13.290004 env[1445]: time="2025-09-06T01:20:13.289099524Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Sep 6 01:20:13.290004 env[1445]: time="2025-09-06T01:20:13.289116923Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Sep 6 01:20:13.290004 env[1445]: time="2025-09-06T01:20:13.289130761Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Sep 6 01:20:13.290004 env[1445]: time="2025-09-06T01:20:13.289189877Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Sep 6 01:20:13.290004 env[1445]: time="2025-09-06T01:20:13.289695517Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Sep 6 01:20:13.290004 env[1445]: time="2025-09-06T01:20:13.289801148Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Sep 6 01:20:13.290004 env[1445]: time="2025-09-06T01:20:13.289815987Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Sep 6 01:20:13.290004 env[1445]: time="2025-09-06T01:20:13.289830826Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Sep 6 01:20:13.290004 env[1445]: time="2025-09-06T01:20:13.289843905Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Sep 6 01:20:13.290295 env[1445]: time="2025-09-06T01:20:13.290276710Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Sep 6 01:20:13.290429 env[1445]: time="2025-09-06T01:20:13.290401340Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Sep 6 01:20:13.290764 env[1445]: time="2025-09-06T01:20:13.290713115Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Sep 6 01:20:13.290794 env[1445]: time="2025-09-06T01:20:13.290774991Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Sep 6 01:20:13.290794 env[1445]: time="2025-09-06T01:20:13.290790189Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Sep 6 01:20:13.290868 env[1445]: time="2025-09-06T01:20:13.290847745Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Sep 6 01:20:13.290905 env[1445]: time="2025-09-06T01:20:13.290867103Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Sep 6 01:20:13.290947 env[1445]: time="2025-09-06T01:20:13.290929098Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Sep 6 01:20:13.290981 env[1445]: time="2025-09-06T01:20:13.290947297Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Sep 6 01:20:13.290981 env[1445]: time="2025-09-06T01:20:13.290968455Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Sep 6 01:20:13.291020 env[1445]: time="2025-09-06T01:20:13.290981054Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Sep 6 01:20:13.291020 env[1445]: time="2025-09-06T01:20:13.290992453Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Sep 6 01:20:13.291020 env[1445]: time="2025-09-06T01:20:13.291005212Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Sep 6 01:20:13.291080 env[1445]: time="2025-09-06T01:20:13.291022371Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Sep 6 01:20:13.291199 env[1445]: time="2025-09-06T01:20:13.291175919Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Sep 6 01:20:13.291229 env[1445]: time="2025-09-06T01:20:13.291209556Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Sep 6 01:20:13.291229 env[1445]: time="2025-09-06T01:20:13.291223115Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Sep 6 01:20:13.291270 env[1445]: time="2025-09-06T01:20:13.291235794Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Sep 6 01:20:13.291270 env[1445]: time="2025-09-06T01:20:13.291250433Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Sep 6 01:20:13.291270 env[1445]: time="2025-09-06T01:20:13.291261552Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Sep 6 01:20:13.291335 env[1445]: time="2025-09-06T01:20:13.291288110Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Sep 6 01:20:13.291335 env[1445]: time="2025-09-06T01:20:13.291323107Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Sep 6 01:20:13.291594 env[1445]: time="2025-09-06T01:20:13.291537610Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Sep 6 01:20:13.312600 env[1445]: time="2025-09-06T01:20:13.291606924Z" level=info msg="Connect containerd service" Sep 6 01:20:13.312600 env[1445]: time="2025-09-06T01:20:13.291638682Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Sep 6 01:20:13.312600 env[1445]: time="2025-09-06T01:20:13.296793271Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 6 01:20:13.312600 env[1445]: time="2025-09-06T01:20:13.296944579Z" level=info msg="Start subscribing containerd event" Sep 6 01:20:13.312600 env[1445]: time="2025-09-06T01:20:13.297000615Z" level=info msg="Start recovering state" Sep 6 01:20:13.312600 env[1445]: time="2025-09-06T01:20:13.297069169Z" level=info msg="Start event monitor" Sep 6 01:20:13.312600 env[1445]: time="2025-09-06T01:20:13.297087928Z" level=info msg="Start snapshots syncer" Sep 6 01:20:13.312600 env[1445]: time="2025-09-06T01:20:13.297097687Z" level=info msg="Start cni network conf syncer for default" Sep 6 01:20:13.312600 env[1445]: time="2025-09-06T01:20:13.297105446Z" level=info msg="Start streaming server" Sep 6 01:20:13.312600 env[1445]: time="2025-09-06T01:20:13.297115166Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Sep 6 01:20:13.312600 env[1445]: time="2025-09-06T01:20:13.297157842Z" level=info msg=serving... address=/run/containerd/containerd.sock Sep 6 01:20:13.312600 env[1445]: time="2025-09-06T01:20:13.297228557Z" level=info msg="containerd successfully booted in 0.187971s" Sep 6 01:20:13.312895 bash[1476]: Updated "/home/core/.ssh/authorized_keys" Sep 6 01:20:13.297314 systemd[1]: Started containerd.service. Sep 6 01:20:13.304004 systemd[1]: Finished update-ssh-keys-after-ignition.service. Sep 6 01:20:13.412558 systemd[1]: nvidia.service: Deactivated successfully. Sep 6 01:20:13.859606 tar[1443]: linux-arm64/README.md Sep 6 01:20:13.865527 systemd[1]: Finished prepare-helm.service. Sep 6 01:20:14.114488 systemd[1]: Started kubelet.service. Sep 6 01:20:14.532344 update_engine[1439]: I0906 01:20:14.518875 1439 main.cc:92] Flatcar Update Engine starting Sep 6 01:20:14.571716 kubelet[1528]: E0906 01:20:14.571660 1528 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 01:20:14.574025 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 01:20:14.574142 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 01:20:14.869879 systemd[1]: Started update-engine.service. Sep 6 01:20:14.881689 update_engine[1439]: I0906 01:20:14.869913 1439 update_check_scheduler.cc:74] Next update check in 11m26s Sep 6 01:20:14.877226 systemd[1]: Started locksmithd.service. Sep 6 01:20:15.326147 sshd_keygen[1438]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Sep 6 01:20:15.344035 systemd[1]: Finished sshd-keygen.service. Sep 6 01:20:15.350070 systemd[1]: Starting issuegen.service... Sep 6 01:20:15.355105 systemd[1]: Started waagent.service. Sep 6 01:20:15.361408 systemd[1]: issuegen.service: Deactivated successfully. Sep 6 01:20:15.361595 systemd[1]: Finished issuegen.service. Sep 6 01:20:15.367377 systemd[1]: Starting systemd-user-sessions.service... Sep 6 01:20:15.421415 systemd[1]: Finished systemd-user-sessions.service. Sep 6 01:20:15.428117 systemd[1]: Started getty@tty1.service. Sep 6 01:20:15.435161 systemd[1]: Started serial-getty@ttyAMA0.service. Sep 6 01:20:15.440281 systemd[1]: Reached target getty.target. Sep 6 01:20:15.444443 systemd[1]: Reached target multi-user.target. Sep 6 01:20:15.450509 systemd[1]: Starting systemd-update-utmp-runlevel.service... Sep 6 01:20:15.463985 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Sep 6 01:20:15.464198 systemd[1]: Finished systemd-update-utmp-runlevel.service. Sep 6 01:20:15.471182 systemd[1]: Startup finished in 755ms (kernel) + 12.684s (initrd) + 20.527s (userspace) = 33.968s. Sep 6 01:20:16.410745 login[1552]: pam_lastlog(login:session): file /var/log/lastlog is locked/write Sep 6 01:20:16.412288 login[1553]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Sep 6 01:20:16.479882 systemd[1]: Created slice user-500.slice. Sep 6 01:20:16.481059 systemd[1]: Starting user-runtime-dir@500.service... Sep 6 01:20:16.483393 systemd-logind[1436]: New session 2 of user core. Sep 6 01:20:16.541883 systemd[1]: Finished user-runtime-dir@500.service. Sep 6 01:20:16.543494 systemd[1]: Starting user@500.service... Sep 6 01:20:16.581203 (systemd)[1556]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:20:16.677398 locksmithd[1534]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Sep 6 01:20:16.785999 systemd[1556]: Queued start job for default target default.target. Sep 6 01:20:16.786502 systemd[1556]: Reached target paths.target. Sep 6 01:20:16.786521 systemd[1556]: Reached target sockets.target. Sep 6 01:20:16.786531 systemd[1556]: Reached target timers.target. Sep 6 01:20:16.786541 systemd[1556]: Reached target basic.target. Sep 6 01:20:16.786641 systemd[1]: Started user@500.service. Sep 6 01:20:16.787509 systemd[1]: Started session-2.scope. Sep 6 01:20:16.787996 systemd[1556]: Reached target default.target. Sep 6 01:20:16.788193 systemd[1556]: Startup finished in 200ms. Sep 6 01:20:17.411082 login[1552]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Sep 6 01:20:17.415441 systemd[1]: Started session-1.scope. Sep 6 01:20:17.415825 systemd-logind[1436]: New session 1 of user core. Sep 6 01:20:24.824884 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Sep 6 01:20:24.825052 systemd[1]: Stopped kubelet.service. Sep 6 01:20:24.826448 systemd[1]: Starting kubelet.service... Sep 6 01:20:29.883146 waagent[1549]: 2025-09-06T01:20:29.883033Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Sep 6 01:20:29.966349 waagent[1549]: 2025-09-06T01:20:29.966250Z INFO Daemon Daemon OS: flatcar 3510.3.8 Sep 6 01:20:29.971077 waagent[1549]: 2025-09-06T01:20:29.971004Z INFO Daemon Daemon Python: 3.9.16 Sep 6 01:20:29.975798 waagent[1549]: 2025-09-06T01:20:29.975702Z INFO Daemon Daemon Run daemon Sep 6 01:20:29.980180 waagent[1549]: 2025-09-06T01:20:29.980114Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.8' Sep 6 01:20:29.998039 waagent[1549]: 2025-09-06T01:20:29.997860Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Sep 6 01:20:30.014859 waagent[1549]: 2025-09-06T01:20:30.014677Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Sep 6 01:20:30.024821 waagent[1549]: 2025-09-06T01:20:30.024731Z INFO Daemon Daemon cloud-init is enabled: False Sep 6 01:20:30.030161 waagent[1549]: 2025-09-06T01:20:30.030079Z INFO Daemon Daemon Using waagent for provisioning Sep 6 01:20:30.036127 waagent[1549]: 2025-09-06T01:20:30.036052Z INFO Daemon Daemon Activate resource disk Sep 6 01:20:30.041096 waagent[1549]: 2025-09-06T01:20:30.041020Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Sep 6 01:20:30.057627 waagent[1549]: 2025-09-06T01:20:30.057533Z INFO Daemon Daemon Found device: None Sep 6 01:20:30.065253 waagent[1549]: 2025-09-06T01:20:30.065154Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Sep 6 01:20:30.074973 waagent[1549]: 2025-09-06T01:20:30.074878Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Sep 6 01:20:30.087963 waagent[1549]: 2025-09-06T01:20:30.087890Z INFO Daemon Daemon Clean protocol and wireserver endpoint Sep 6 01:20:30.094542 waagent[1549]: 2025-09-06T01:20:30.094459Z INFO Daemon Daemon Running default provisioning handler Sep 6 01:20:30.107997 waagent[1549]: 2025-09-06T01:20:30.107798Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Sep 6 01:20:30.124961 waagent[1549]: 2025-09-06T01:20:30.124805Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Sep 6 01:20:30.135084 waagent[1549]: 2025-09-06T01:20:30.134962Z INFO Daemon Daemon cloud-init is enabled: False Sep 6 01:20:30.140464 waagent[1549]: 2025-09-06T01:20:30.140379Z INFO Daemon Daemon Copying ovf-env.xml Sep 6 01:20:31.126262 waagent[1549]: 2025-09-06T01:20:31.125192Z INFO Daemon Daemon Successfully mounted dvd Sep 6 01:20:31.430633 systemd[1]: Started kubelet.service. Sep 6 01:20:31.472224 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Sep 6 01:20:31.479182 kubelet[1592]: E0906 01:20:31.479147 1592 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 01:20:31.482097 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 01:20:31.482219 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 01:20:31.504340 waagent[1549]: 2025-09-06T01:20:31.504196Z INFO Daemon Daemon Detect protocol endpoint Sep 6 01:20:31.509772 waagent[1549]: 2025-09-06T01:20:31.509666Z INFO Daemon Daemon Clean protocol and wireserver endpoint Sep 6 01:20:31.515976 waagent[1549]: 2025-09-06T01:20:31.515885Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Sep 6 01:20:31.522847 waagent[1549]: 2025-09-06T01:20:31.522757Z INFO Daemon Daemon Test for route to 168.63.129.16 Sep 6 01:20:31.528585 waagent[1549]: 2025-09-06T01:20:31.528503Z INFO Daemon Daemon Route to 168.63.129.16 exists Sep 6 01:20:31.534619 waagent[1549]: 2025-09-06T01:20:31.534528Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Sep 6 01:20:31.644696 waagent[1549]: 2025-09-06T01:20:31.644608Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Sep 6 01:20:31.652985 waagent[1549]: 2025-09-06T01:20:31.652930Z INFO Daemon Daemon Wire protocol version:2012-11-30 Sep 6 01:20:31.659657 waagent[1549]: 2025-09-06T01:20:31.659567Z INFO Daemon Daemon Server preferred version:2015-04-05 Sep 6 01:20:32.226681 waagent[1549]: 2025-09-06T01:20:32.226520Z INFO Daemon Daemon Initializing goal state during protocol detection Sep 6 01:20:32.243060 waagent[1549]: 2025-09-06T01:20:32.242970Z INFO Daemon Daemon Forcing an update of the goal state.. Sep 6 01:20:32.249103 waagent[1549]: 2025-09-06T01:20:32.249022Z INFO Daemon Daemon Fetching goal state [incarnation 1] Sep 6 01:20:32.624119 waagent[1549]: 2025-09-06T01:20:32.623918Z INFO Daemon Daemon Found private key matching thumbprint B24E03F20B454BA7FF7C416E45B2141CC635C8B6 Sep 6 01:20:32.632986 waagent[1549]: 2025-09-06T01:20:32.632896Z INFO Daemon Daemon Fetch goal state completed Sep 6 01:20:32.705595 waagent[1549]: 2025-09-06T01:20:32.705533Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: fc5eae86-ce72-4eb9-9fd7-d6ed06fe6f99 New eTag: 5159135135709742609] Sep 6 01:20:32.717371 waagent[1549]: 2025-09-06T01:20:32.717282Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Sep 6 01:20:32.734008 waagent[1549]: 2025-09-06T01:20:32.733947Z INFO Daemon Daemon Starting provisioning Sep 6 01:20:32.739230 waagent[1549]: 2025-09-06T01:20:32.739151Z INFO Daemon Daemon Handle ovf-env.xml. Sep 6 01:20:32.743918 waagent[1549]: 2025-09-06T01:20:32.743849Z INFO Daemon Daemon Set hostname [ci-3510.3.8-n-645ca388a2] Sep 6 01:20:32.781519 waagent[1549]: 2025-09-06T01:20:32.781372Z INFO Daemon Daemon Publish hostname [ci-3510.3.8-n-645ca388a2] Sep 6 01:20:32.788251 waagent[1549]: 2025-09-06T01:20:32.788157Z INFO Daemon Daemon Examine /proc/net/route for primary interface Sep 6 01:20:32.795017 waagent[1549]: 2025-09-06T01:20:32.794939Z INFO Daemon Daemon Primary interface is [eth0] Sep 6 01:20:32.811820 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Sep 6 01:20:32.812006 systemd[1]: Stopped systemd-networkd-wait-online.service. Sep 6 01:20:32.812064 systemd[1]: Stopping systemd-networkd-wait-online.service... Sep 6 01:20:32.812311 systemd[1]: Stopping systemd-networkd.service... Sep 6 01:20:32.815779 systemd-networkd[1217]: eth0: DHCPv6 lease lost Sep 6 01:20:32.817467 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 6 01:20:32.817655 systemd[1]: Stopped systemd-networkd.service. Sep 6 01:20:32.819962 systemd[1]: Starting systemd-networkd.service... Sep 6 01:20:32.849755 systemd-networkd[1608]: enP59283s1: Link UP Sep 6 01:20:32.849764 systemd-networkd[1608]: enP59283s1: Gained carrier Sep 6 01:20:32.851100 systemd-networkd[1608]: eth0: Link UP Sep 6 01:20:32.851110 systemd-networkd[1608]: eth0: Gained carrier Sep 6 01:20:32.851478 systemd-networkd[1608]: lo: Link UP Sep 6 01:20:32.851488 systemd-networkd[1608]: lo: Gained carrier Sep 6 01:20:32.851765 systemd-networkd[1608]: eth0: Gained IPv6LL Sep 6 01:20:32.852013 systemd-networkd[1608]: Enumeration completed Sep 6 01:20:32.852711 systemd[1]: Started systemd-networkd.service. Sep 6 01:20:32.853734 systemd-networkd[1608]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 6 01:20:32.854735 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 6 01:20:32.858073 waagent[1549]: 2025-09-06T01:20:32.857909Z INFO Daemon Daemon Create user account if not exists Sep 6 01:20:32.866150 waagent[1549]: 2025-09-06T01:20:32.866050Z INFO Daemon Daemon User core already exists, skip useradd Sep 6 01:20:32.872829 waagent[1549]: 2025-09-06T01:20:32.872714Z INFO Daemon Daemon Configure sudoer Sep 6 01:20:32.878283 waagent[1549]: 2025-09-06T01:20:32.878160Z INFO Daemon Daemon Configure sshd Sep 6 01:20:32.883077 waagent[1549]: 2025-09-06T01:20:32.882984Z INFO Daemon Daemon Deploy ssh public key. Sep 6 01:20:32.888796 systemd-networkd[1608]: eth0: DHCPv4 address 10.200.20.17/24, gateway 10.200.20.1 acquired from 168.63.129.16 Sep 6 01:20:32.899834 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 6 01:20:34.041030 waagent[1549]: 2025-09-06T01:20:34.040946Z INFO Daemon Daemon Provisioning complete Sep 6 01:20:34.063686 waagent[1549]: 2025-09-06T01:20:34.063614Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Sep 6 01:20:34.070821 waagent[1549]: 2025-09-06T01:20:34.070731Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Sep 6 01:20:34.083199 waagent[1549]: 2025-09-06T01:20:34.083114Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Sep 6 01:20:34.391107 waagent[1614]: 2025-09-06T01:20:34.390957Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Sep 6 01:20:34.392200 waagent[1614]: 2025-09-06T01:20:34.392142Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 01:20:34.392440 waagent[1614]: 2025-09-06T01:20:34.392393Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 01:20:34.406034 waagent[1614]: 2025-09-06T01:20:34.405941Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Sep 6 01:20:34.406379 waagent[1614]: 2025-09-06T01:20:34.406331Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Sep 6 01:20:34.468223 waagent[1614]: 2025-09-06T01:20:34.468076Z INFO ExtHandler ExtHandler Found private key matching thumbprint B24E03F20B454BA7FF7C416E45B2141CC635C8B6 Sep 6 01:20:34.468738 waagent[1614]: 2025-09-06T01:20:34.468666Z INFO ExtHandler ExtHandler Fetch goal state completed Sep 6 01:20:34.483370 waagent[1614]: 2025-09-06T01:20:34.483307Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 8d2fc52c-6d78-4ac1-bd35-30473f41df9d New eTag: 5159135135709742609] Sep 6 01:20:34.484132 waagent[1614]: 2025-09-06T01:20:34.484073Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Sep 6 01:20:34.542924 waagent[1614]: 2025-09-06T01:20:34.542782Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.8; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Sep 6 01:20:34.553618 waagent[1614]: 2025-09-06T01:20:34.553527Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1614 Sep 6 01:20:34.557589 waagent[1614]: 2025-09-06T01:20:34.557510Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.8', '', 'Flatcar Container Linux by Kinvolk'] Sep 6 01:20:34.559106 waagent[1614]: 2025-09-06T01:20:34.559041Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Sep 6 01:20:34.672687 waagent[1614]: 2025-09-06T01:20:34.672573Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Sep 6 01:20:34.673301 waagent[1614]: 2025-09-06T01:20:34.673242Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Sep 6 01:20:34.685271 waagent[1614]: 2025-09-06T01:20:34.685213Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Sep 6 01:20:34.686030 waagent[1614]: 2025-09-06T01:20:34.685969Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Sep 6 01:20:34.687352 waagent[1614]: 2025-09-06T01:20:34.687290Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Sep 6 01:20:34.688931 waagent[1614]: 2025-09-06T01:20:34.688857Z INFO ExtHandler ExtHandler Starting env monitor service. Sep 6 01:20:34.689122 waagent[1614]: 2025-09-06T01:20:34.689052Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 01:20:34.689684 waagent[1614]: 2025-09-06T01:20:34.689608Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 01:20:34.690354 waagent[1614]: 2025-09-06T01:20:34.690288Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Sep 6 01:20:34.690683 waagent[1614]: 2025-09-06T01:20:34.690623Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Sep 6 01:20:34.690683 waagent[1614]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Sep 6 01:20:34.690683 waagent[1614]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Sep 6 01:20:34.690683 waagent[1614]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Sep 6 01:20:34.690683 waagent[1614]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Sep 6 01:20:34.690683 waagent[1614]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 6 01:20:34.690683 waagent[1614]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 6 01:20:34.693399 waagent[1614]: 2025-09-06T01:20:34.693206Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Sep 6 01:20:34.693826 waagent[1614]: 2025-09-06T01:20:34.693746Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 01:20:34.694622 waagent[1614]: 2025-09-06T01:20:34.694546Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 01:20:34.695258 waagent[1614]: 2025-09-06T01:20:34.695187Z INFO EnvHandler ExtHandler Configure routes Sep 6 01:20:34.695420 waagent[1614]: 2025-09-06T01:20:34.695372Z INFO EnvHandler ExtHandler Gateway:None Sep 6 01:20:34.695534 waagent[1614]: 2025-09-06T01:20:34.695491Z INFO EnvHandler ExtHandler Routes:None Sep 6 01:20:34.696483 waagent[1614]: 2025-09-06T01:20:34.696423Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Sep 6 01:20:34.696639 waagent[1614]: 2025-09-06T01:20:34.696571Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Sep 6 01:20:34.697446 waagent[1614]: 2025-09-06T01:20:34.697349Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Sep 6 01:20:34.697627 waagent[1614]: 2025-09-06T01:20:34.697558Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Sep 6 01:20:34.697949 waagent[1614]: 2025-09-06T01:20:34.697879Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Sep 6 01:20:34.710632 waagent[1614]: 2025-09-06T01:20:34.710558Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Sep 6 01:20:34.711462 waagent[1614]: 2025-09-06T01:20:34.711413Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Sep 6 01:20:34.712508 waagent[1614]: 2025-09-06T01:20:34.712455Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Sep 6 01:20:34.737826 waagent[1614]: 2025-09-06T01:20:34.737670Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1608' Sep 6 01:20:34.778285 waagent[1614]: 2025-09-06T01:20:34.778218Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Sep 6 01:20:34.825910 waagent[1614]: 2025-09-06T01:20:34.825760Z INFO MonitorHandler ExtHandler Network interfaces: Sep 6 01:20:34.825910 waagent[1614]: Executing ['ip', '-a', '-o', 'link']: Sep 6 01:20:34.825910 waagent[1614]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Sep 6 01:20:34.825910 waagent[1614]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:fd:70:83 brd ff:ff:ff:ff:ff:ff Sep 6 01:20:34.825910 waagent[1614]: 3: enP59283s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:fd:70:83 brd ff:ff:ff:ff:ff:ff\ altname enP59283p0s2 Sep 6 01:20:34.825910 waagent[1614]: Executing ['ip', '-4', '-a', '-o', 'address']: Sep 6 01:20:34.825910 waagent[1614]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Sep 6 01:20:34.825910 waagent[1614]: 2: eth0 inet 10.200.20.17/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Sep 6 01:20:34.825910 waagent[1614]: Executing ['ip', '-6', '-a', '-o', 'address']: Sep 6 01:20:34.825910 waagent[1614]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Sep 6 01:20:34.825910 waagent[1614]: 2: eth0 inet6 fe80::20d:3aff:fefd:7083/64 scope link \ valid_lft forever preferred_lft forever Sep 6 01:20:35.064772 waagent[1614]: 2025-09-06T01:20:35.064616Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.14.0.1 -- exiting Sep 6 01:20:36.087146 waagent[1549]: 2025-09-06T01:20:36.087025Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Sep 6 01:20:36.092636 waagent[1549]: 2025-09-06T01:20:36.092572Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.14.0.1 to be the latest agent Sep 6 01:20:37.408154 waagent[1650]: 2025-09-06T01:20:37.408057Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.14.0.1) Sep 6 01:20:37.409245 waagent[1650]: 2025-09-06T01:20:37.409184Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.8 Sep 6 01:20:37.409500 waagent[1650]: 2025-09-06T01:20:37.409453Z INFO ExtHandler ExtHandler Python: 3.9.16 Sep 6 01:20:37.409739 waagent[1650]: 2025-09-06T01:20:37.409679Z INFO ExtHandler ExtHandler CPU Arch: aarch64 Sep 6 01:20:37.424244 waagent[1650]: 2025-09-06T01:20:37.424115Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.8; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; Arch: aarch64; systemd: True; systemd_version: systemd 252 (252); LISDrivers: Absent; logrotate: logrotate 3.20.1; Sep 6 01:20:37.424930 waagent[1650]: 2025-09-06T01:20:37.424871Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 01:20:37.425214 waagent[1650]: 2025-09-06T01:20:37.425167Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 01:20:37.425546 waagent[1650]: 2025-09-06T01:20:37.425496Z INFO ExtHandler ExtHandler Initializing the goal state... Sep 6 01:20:37.439779 waagent[1650]: 2025-09-06T01:20:37.439665Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Sep 6 01:20:37.453527 waagent[1650]: 2025-09-06T01:20:37.453464Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.175 Sep 6 01:20:37.454845 waagent[1650]: 2025-09-06T01:20:37.454790Z INFO ExtHandler Sep 6 01:20:37.455125 waagent[1650]: 2025-09-06T01:20:37.455077Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 795006aa-4f9a-430d-bd54-718f7799ea80 eTag: 5159135135709742609 source: Fabric] Sep 6 01:20:37.456013 waagent[1650]: 2025-09-06T01:20:37.455958Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Sep 6 01:20:37.457425 waagent[1650]: 2025-09-06T01:20:37.457367Z INFO ExtHandler Sep 6 01:20:37.457660 waagent[1650]: 2025-09-06T01:20:37.457614Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Sep 6 01:20:37.465281 waagent[1650]: 2025-09-06T01:20:37.465224Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Sep 6 01:20:37.466050 waagent[1650]: 2025-09-06T01:20:37.466001Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Sep 6 01:20:37.489147 waagent[1650]: 2025-09-06T01:20:37.489082Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Sep 6 01:20:37.559835 waagent[1650]: 2025-09-06T01:20:37.559657Z INFO ExtHandler Downloaded certificate {'thumbprint': 'B24E03F20B454BA7FF7C416E45B2141CC635C8B6', 'hasPrivateKey': True} Sep 6 01:20:37.561531 waagent[1650]: 2025-09-06T01:20:37.561412Z INFO ExtHandler Fetch goal state from WireServer completed Sep 6 01:20:37.562688 waagent[1650]: 2025-09-06T01:20:37.562630Z INFO ExtHandler ExtHandler Goal state initialization completed. Sep 6 01:20:37.585052 waagent[1650]: 2025-09-06T01:20:37.584928Z INFO ExtHandler ExtHandler OpenSSL version: OpenSSL 3.0.15 3 Sep 2024 (Library: OpenSSL 3.0.15 3 Sep 2024) Sep 6 01:20:37.593981 waagent[1650]: 2025-09-06T01:20:37.593858Z INFO ExtHandler ExtHandler Using iptables [version 1.8.8] to manage firewall rules Sep 6 01:20:37.598143 waagent[1650]: 2025-09-06T01:20:37.598034Z INFO ExtHandler ExtHandler Did not find a legacy firewall rule: ['iptables', '-w', '-t', 'security', '-C', 'OUTPUT', '-d', '168.63.129.16', '-p', 'tcp', '-m', 'conntrack', '--ctstate', 'INVALID,NEW', '-j', 'ACCEPT'] Sep 6 01:20:37.598545 waagent[1650]: 2025-09-06T01:20:37.598494Z INFO ExtHandler ExtHandler Checking state of the firewall Sep 6 01:20:37.637996 waagent[1650]: 2025-09-06T01:20:37.637853Z WARNING ExtHandler ExtHandler The firewall rules for Azure Fabric are not setup correctly (the environment thread will fix it): The following rules are missing: ['ACCEPT DNS', 'DROP'] due to: ['iptables: Bad rule (does a matching rule exist in that chain?).\n', 'iptables: Bad rule (does a matching rule exist in that chain?).\n']. Current state: Sep 6 01:20:37.637996 waagent[1650]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:20:37.637996 waagent[1650]: pkts bytes target prot opt in out source destination Sep 6 01:20:37.637996 waagent[1650]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:20:37.637996 waagent[1650]: pkts bytes target prot opt in out source destination Sep 6 01:20:37.637996 waagent[1650]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:20:37.637996 waagent[1650]: pkts bytes target prot opt in out source destination Sep 6 01:20:37.637996 waagent[1650]: 55 7855 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Sep 6 01:20:37.639554 waagent[1650]: 2025-09-06T01:20:37.639490Z INFO ExtHandler ExtHandler Setting up persistent firewall rules Sep 6 01:20:37.642811 waagent[1650]: 2025-09-06T01:20:37.642662Z INFO ExtHandler ExtHandler The firewalld service is not present on the system Sep 6 01:20:37.643224 waagent[1650]: 2025-09-06T01:20:37.643174Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Sep 6 01:20:37.643695 waagent[1650]: 2025-09-06T01:20:37.643641Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Sep 6 01:20:37.652414 waagent[1650]: 2025-09-06T01:20:37.652352Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Sep 6 01:20:37.653209 waagent[1650]: 2025-09-06T01:20:37.653151Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Sep 6 01:20:37.662315 waagent[1650]: 2025-09-06T01:20:37.662177Z INFO ExtHandler ExtHandler WALinuxAgent-2.14.0.1 running as process 1650 Sep 6 01:20:37.665993 waagent[1650]: 2025-09-06T01:20:37.665902Z INFO ExtHandler ExtHandler [CGI] Cgroups is not currently supported on ['flatcar', '3510.3.8', '', 'Flatcar Container Linux by Kinvolk'] Sep 6 01:20:37.667071 waagent[1650]: 2025-09-06T01:20:37.667012Z INFO ExtHandler ExtHandler [CGI] Agent will reset the quotas in case cgroup usage went from enabled to disabled Sep 6 01:20:37.668142 waagent[1650]: 2025-09-06T01:20:37.668087Z INFO ExtHandler ExtHandler [CGI] Agent cgroups enabled: False Sep 6 01:20:37.671082 waagent[1650]: 2025-09-06T01:20:37.671022Z INFO ExtHandler ExtHandler Signing certificate written to /var/lib/waagent/microsoft_root_certificate.pem Sep 6 01:20:37.671549 waagent[1650]: 2025-09-06T01:20:37.671498Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: 1. configuration enabled [True], 2. cgroups v1 enabled [False] OR cgroups v2 is in use and v2 resource limiting configuration enabled [False], 3. python supported: [True] Sep 6 01:20:37.673091 waagent[1650]: 2025-09-06T01:20:37.673025Z INFO ExtHandler ExtHandler Starting env monitor service. Sep 6 01:20:37.673380 waagent[1650]: 2025-09-06T01:20:37.673315Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 01:20:37.674240 waagent[1650]: 2025-09-06T01:20:37.674165Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Sep 6 01:20:37.674379 waagent[1650]: 2025-09-06T01:20:37.674313Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 01:20:37.675058 waagent[1650]: 2025-09-06T01:20:37.674991Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Sep 6 01:20:37.675889 waagent[1650]: 2025-09-06T01:20:37.675817Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Sep 6 01:20:37.675889 waagent[1650]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Sep 6 01:20:37.675889 waagent[1650]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Sep 6 01:20:37.675889 waagent[1650]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Sep 6 01:20:37.675889 waagent[1650]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Sep 6 01:20:37.675889 waagent[1650]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 6 01:20:37.675889 waagent[1650]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 6 01:20:37.678361 waagent[1650]: 2025-09-06T01:20:37.677884Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Sep 6 01:20:37.678852 waagent[1650]: 2025-09-06T01:20:37.678806Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 6 01:20:37.679105 waagent[1650]: 2025-09-06T01:20:37.678657Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Sep 6 01:20:37.679354 waagent[1650]: 2025-09-06T01:20:37.679298Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 6 01:20:37.680288 waagent[1650]: 2025-09-06T01:20:37.680226Z INFO EnvHandler ExtHandler Configure routes Sep 6 01:20:37.682504 waagent[1650]: 2025-09-06T01:20:37.682354Z INFO EnvHandler ExtHandler Gateway:None Sep 6 01:20:37.684207 waagent[1650]: 2025-09-06T01:20:37.684149Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Sep 6 01:20:37.684311 waagent[1650]: 2025-09-06T01:20:37.683874Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Sep 6 01:20:37.684781 waagent[1650]: 2025-09-06T01:20:37.684686Z INFO EnvHandler ExtHandler Routes:None Sep 6 01:20:37.689792 waagent[1650]: 2025-09-06T01:20:37.689687Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Sep 6 01:20:37.699693 waagent[1650]: 2025-09-06T01:20:37.699607Z INFO MonitorHandler ExtHandler Network interfaces: Sep 6 01:20:37.699693 waagent[1650]: Executing ['ip', '-a', '-o', 'link']: Sep 6 01:20:37.699693 waagent[1650]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Sep 6 01:20:37.699693 waagent[1650]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:fd:70:83 brd ff:ff:ff:ff:ff:ff Sep 6 01:20:37.699693 waagent[1650]: 3: enP59283s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:fd:70:83 brd ff:ff:ff:ff:ff:ff\ altname enP59283p0s2 Sep 6 01:20:37.699693 waagent[1650]: Executing ['ip', '-4', '-a', '-o', 'address']: Sep 6 01:20:37.699693 waagent[1650]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Sep 6 01:20:37.699693 waagent[1650]: 2: eth0 inet 10.200.20.17/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Sep 6 01:20:37.699693 waagent[1650]: Executing ['ip', '-6', '-a', '-o', 'address']: Sep 6 01:20:37.699693 waagent[1650]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Sep 6 01:20:37.699693 waagent[1650]: 2: eth0 inet6 fe80::20d:3aff:fefd:7083/64 scope link \ valid_lft forever preferred_lft forever Sep 6 01:20:37.710520 waagent[1650]: 2025-09-06T01:20:37.710426Z INFO ExtHandler ExtHandler Downloading agent manifest Sep 6 01:20:37.727157 waagent[1650]: 2025-09-06T01:20:37.727082Z INFO ExtHandler ExtHandler Sep 6 01:20:37.728376 waagent[1650]: 2025-09-06T01:20:37.728314Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: b51aa899-f2a9-49f8-be3c-379ae13f64ff correlation a8dea4a3-a741-40fa-8e25-0387cba6dc84 created: 2025-09-06T01:18:54.181808Z] Sep 6 01:20:37.732409 waagent[1650]: 2025-09-06T01:20:37.732331Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Sep 6 01:20:37.740622 waagent[1650]: 2025-09-06T01:20:37.740532Z INFO EnvHandler ExtHandler Using iptables [version 1.8.8] to manage firewall rules Sep 6 01:20:37.761649 waagent[1650]: 2025-09-06T01:20:37.761509Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 34 ms] Sep 6 01:20:37.781318 waagent[1650]: 2025-09-06T01:20:37.781235Z WARNING EnvHandler ExtHandler The firewall is not configured correctly. The following rules are missing: ['ACCEPT DNS', 'DROP'] due to: ['iptables: Bad rule (does a matching rule exist in that chain?).\n', 'iptables: Bad rule (does a matching rule exist in that chain?).\n']. Will reset it. Current state: Sep 6 01:20:37.781318 waagent[1650]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:20:37.781318 waagent[1650]: pkts bytes target prot opt in out source destination Sep 6 01:20:37.781318 waagent[1650]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:20:37.781318 waagent[1650]: pkts bytes target prot opt in out source destination Sep 6 01:20:37.781318 waagent[1650]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:20:37.781318 waagent[1650]: pkts bytes target prot opt in out source destination Sep 6 01:20:37.781318 waagent[1650]: 95 13514 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Sep 6 01:20:37.795916 waagent[1650]: 2025-09-06T01:20:37.795690Z INFO ExtHandler ExtHandler Looking for existing remote access users. Sep 6 01:20:37.802133 waagent[1650]: 2025-09-06T01:20:37.801956Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.14.0.1 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: C24742BD-A955-4AAC-8495-FA93B04C2A65;UpdateGSErrors: 0;AutoUpdate: 1;UpdateMode: SelfUpdate;] Sep 6 01:20:37.832040 waagent[1650]: 2025-09-06T01:20:37.831909Z INFO EnvHandler ExtHandler The firewall was setup successfully: Sep 6 01:20:37.832040 waagent[1650]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:20:37.832040 waagent[1650]: pkts bytes target prot opt in out source destination Sep 6 01:20:37.832040 waagent[1650]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:20:37.832040 waagent[1650]: pkts bytes target prot opt in out source destination Sep 6 01:20:37.832040 waagent[1650]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Sep 6 01:20:37.832040 waagent[1650]: pkts bytes target prot opt in out source destination Sep 6 01:20:37.832040 waagent[1650]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Sep 6 01:20:37.832040 waagent[1650]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Sep 6 01:20:37.832040 waagent[1650]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Sep 6 01:20:37.833613 waagent[1650]: 2025-09-06T01:20:37.833557Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Sep 6 01:20:41.104984 systemd[1]: Created slice system-sshd.slice. Sep 6 01:20:41.106545 systemd[1]: Started sshd@0-10.200.20.17:22-10.200.16.10:55158.service. Sep 6 01:20:41.512122 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Sep 6 01:20:41.512304 systemd[1]: Stopped kubelet.service. Sep 6 01:20:41.513782 systemd[1]: Starting kubelet.service... Sep 6 01:20:41.698560 sshd[1695]: Accepted publickey for core from 10.200.16.10 port 55158 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:20:41.769297 sshd[1695]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:20:41.773650 systemd[1]: Started session-3.scope. Sep 6 01:20:41.774962 systemd-logind[1436]: New session 3 of user core. Sep 6 01:20:41.847305 systemd[1]: Started kubelet.service. Sep 6 01:20:41.883481 kubelet[1702]: E0906 01:20:41.883409 1702 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 01:20:41.885601 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 01:20:41.885746 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 01:20:42.118568 systemd[1]: Started sshd@1-10.200.20.17:22-10.200.16.10:55164.service. Sep 6 01:20:42.528799 sshd[1709]: Accepted publickey for core from 10.200.16.10 port 55164 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:20:42.530539 sshd[1709]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:20:42.535029 systemd[1]: Started session-4.scope. Sep 6 01:20:42.535612 systemd-logind[1436]: New session 4 of user core. Sep 6 01:20:42.844074 sshd[1709]: pam_unix(sshd:session): session closed for user core Sep 6 01:20:42.847034 systemd[1]: sshd@1-10.200.20.17:22-10.200.16.10:55164.service: Deactivated successfully. Sep 6 01:20:42.847876 systemd[1]: session-4.scope: Deactivated successfully. Sep 6 01:20:42.848475 systemd-logind[1436]: Session 4 logged out. Waiting for processes to exit. Sep 6 01:20:42.849369 systemd-logind[1436]: Removed session 4. Sep 6 01:20:42.914348 systemd[1]: Started sshd@2-10.200.20.17:22-10.200.16.10:55178.service. Sep 6 01:20:43.326506 sshd[1715]: Accepted publickey for core from 10.200.16.10 port 55178 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:20:43.327845 sshd[1715]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:20:43.332379 systemd[1]: Started session-5.scope. Sep 6 01:20:43.332828 systemd-logind[1436]: New session 5 of user core. Sep 6 01:20:43.640846 sshd[1715]: pam_unix(sshd:session): session closed for user core Sep 6 01:20:43.643647 systemd[1]: sshd@2-10.200.20.17:22-10.200.16.10:55178.service: Deactivated successfully. Sep 6 01:20:43.644336 systemd[1]: session-5.scope: Deactivated successfully. Sep 6 01:20:43.644889 systemd-logind[1436]: Session 5 logged out. Waiting for processes to exit. Sep 6 01:20:43.645843 systemd-logind[1436]: Removed session 5. Sep 6 01:20:43.710434 systemd[1]: Started sshd@3-10.200.20.17:22-10.200.16.10:55192.service. Sep 6 01:20:44.123958 sshd[1721]: Accepted publickey for core from 10.200.16.10 port 55192 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:20:44.125208 sshd[1721]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:20:44.128769 systemd-logind[1436]: New session 6 of user core. Sep 6 01:20:44.129428 systemd[1]: Started session-6.scope. Sep 6 01:20:44.450634 sshd[1721]: pam_unix(sshd:session): session closed for user core Sep 6 01:20:44.453476 systemd[1]: sshd@3-10.200.20.17:22-10.200.16.10:55192.service: Deactivated successfully. Sep 6 01:20:44.454177 systemd[1]: session-6.scope: Deactivated successfully. Sep 6 01:20:44.454707 systemd-logind[1436]: Session 6 logged out. Waiting for processes to exit. Sep 6 01:20:44.455593 systemd-logind[1436]: Removed session 6. Sep 6 01:20:44.532958 systemd[1]: Started sshd@4-10.200.20.17:22-10.200.16.10:55196.service. Sep 6 01:20:44.988078 sshd[1727]: Accepted publickey for core from 10.200.16.10 port 55196 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:20:44.989406 sshd[1727]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:20:44.993314 systemd-logind[1436]: New session 7 of user core. Sep 6 01:20:44.993802 systemd[1]: Started session-7.scope. Sep 6 01:20:45.526213 sudo[1730]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Sep 6 01:20:45.526807 sudo[1730]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 01:20:45.580943 dbus-daemon[1421]: avc: received setenforce notice (enforcing=1) Sep 6 01:20:45.582716 sudo[1730]: pam_unix(sudo:session): session closed for user root Sep 6 01:20:45.681975 sshd[1727]: pam_unix(sshd:session): session closed for user core Sep 6 01:20:45.685216 systemd[1]: sshd@4-10.200.20.17:22-10.200.16.10:55196.service: Deactivated successfully. Sep 6 01:20:45.685610 systemd-logind[1436]: Session 7 logged out. Waiting for processes to exit. Sep 6 01:20:45.685966 systemd[1]: session-7.scope: Deactivated successfully. Sep 6 01:20:45.687052 systemd-logind[1436]: Removed session 7. Sep 6 01:20:45.750256 systemd[1]: Started sshd@5-10.200.20.17:22-10.200.16.10:55204.service. Sep 6 01:20:46.202377 sshd[1734]: Accepted publickey for core from 10.200.16.10 port 55204 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:20:46.205354 sshd[1734]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:20:46.209364 systemd-logind[1436]: New session 8 of user core. Sep 6 01:20:46.209848 systemd[1]: Started session-8.scope. Sep 6 01:20:46.458555 sudo[1738]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Sep 6 01:20:46.458805 sudo[1738]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 01:20:46.461391 sudo[1738]: pam_unix(sudo:session): session closed for user root Sep 6 01:20:46.465900 sudo[1737]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Sep 6 01:20:46.466386 sudo[1737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 01:20:46.475349 systemd[1]: Stopping audit-rules.service... Sep 6 01:20:46.474000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 6 01:20:46.480558 kernel: kauditd_printk_skb: 130 callbacks suppressed Sep 6 01:20:46.480633 kernel: audit: type=1305 audit(1757121646.474:212): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 6 01:20:46.480877 auditctl[1741]: No rules Sep 6 01:20:46.481356 systemd[1]: audit-rules.service: Deactivated successfully. Sep 6 01:20:46.481529 systemd[1]: Stopped audit-rules.service. Sep 6 01:20:46.474000 audit[1741]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffffdfea160 a2=420 a3=0 items=0 ppid=1 pid=1741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:46.516109 kernel: audit: type=1300 audit(1757121646.474:212): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffffdfea160 a2=420 a3=0 items=0 ppid=1 pid=1741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:46.492318 systemd[1]: Starting audit-rules.service... Sep 6 01:20:46.474000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Sep 6 01:20:46.523597 kernel: audit: type=1327 audit(1757121646.474:212): proctitle=2F7362696E2F617564697463746C002D44 Sep 6 01:20:46.479000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:46.539605 kernel: audit: type=1131 audit(1757121646.479:213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:46.551533 augenrules[1758]: No rules Sep 6 01:20:46.552474 systemd[1]: Finished audit-rules.service. Sep 6 01:20:46.550000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:46.554512 sudo[1737]: pam_unix(sudo:session): session closed for user root Sep 6 01:20:46.552000 audit[1737]: USER_END pid=1737 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:20:46.568859 kernel: audit: type=1130 audit(1757121646.550:214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:46.552000 audit[1737]: CRED_DISP pid=1737 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:20:46.605541 kernel: audit: type=1106 audit(1757121646.552:215): pid=1737 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:20:46.605592 kernel: audit: type=1104 audit(1757121646.552:216): pid=1737 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:20:46.656323 sshd[1734]: pam_unix(sshd:session): session closed for user core Sep 6 01:20:46.655000 audit[1734]: USER_END pid=1734 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:20:46.659586 systemd-logind[1436]: Session 8 logged out. Waiting for processes to exit. Sep 6 01:20:46.660353 systemd[1]: sshd@5-10.200.20.17:22-10.200.16.10:55204.service: Deactivated successfully. Sep 6 01:20:46.661044 systemd[1]: session-8.scope: Deactivated successfully. Sep 6 01:20:46.662107 systemd-logind[1436]: Removed session 8. Sep 6 01:20:46.655000 audit[1734]: CRED_DISP pid=1734 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:20:46.708318 kernel: audit: type=1106 audit(1757121646.655:217): pid=1734 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:20:46.708378 kernel: audit: type=1104 audit(1757121646.655:218): pid=1734 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:20:46.708405 kernel: audit: type=1131 audit(1757121646.656:219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.17:22-10.200.16.10:55204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:46.656000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.17:22-10.200.16.10:55204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:46.734289 systemd[1]: Started sshd@6-10.200.20.17:22-10.200.16.10:55218.service. Sep 6 01:20:46.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.17:22-10.200.16.10:55218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:47.143000 audit[1764]: USER_ACCT pid=1764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:20:47.145197 sshd[1764]: Accepted publickey for core from 10.200.16.10 port 55218 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:20:47.144000 audit[1764]: CRED_ACQ pid=1764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:20:47.144000 audit[1764]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb0680a0 a2=3 a3=1 items=0 ppid=1 pid=1764 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.144000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:20:47.146902 sshd[1764]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:20:47.151203 systemd[1]: Started session-9.scope. Sep 6 01:20:47.151771 systemd-logind[1436]: New session 9 of user core. Sep 6 01:20:47.154000 audit[1764]: USER_START pid=1764 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:20:47.156000 audit[1766]: CRED_ACQ pid=1766 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:20:47.380000 audit[1767]: USER_ACCT pid=1767 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:20:47.381900 sudo[1767]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Sep 6 01:20:47.380000 audit[1767]: CRED_REFR pid=1767 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:20:47.382118 sudo[1767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 6 01:20:47.381000 audit[1767]: USER_START pid=1767 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:20:47.403261 systemd[1]: Starting docker.service... Sep 6 01:20:47.454517 env[1777]: time="2025-09-06T01:20:47.454464604Z" level=info msg="Starting up" Sep 6 01:20:47.455808 env[1777]: time="2025-09-06T01:20:47.455777472Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 6 01:20:47.455808 env[1777]: time="2025-09-06T01:20:47.455804352Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 6 01:20:47.455908 env[1777]: time="2025-09-06T01:20:47.455827952Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 6 01:20:47.455908 env[1777]: time="2025-09-06T01:20:47.455839112Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 6 01:20:47.457453 env[1777]: time="2025-09-06T01:20:47.457430418Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 6 01:20:47.457559 env[1777]: time="2025-09-06T01:20:47.457546017Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 6 01:20:47.457621 env[1777]: time="2025-09-06T01:20:47.457607016Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 6 01:20:47.457679 env[1777]: time="2025-09-06T01:20:47.457668136Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 6 01:20:47.464432 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport906741389-merged.mount: Deactivated successfully. Sep 6 01:20:47.571822 env[1777]: time="2025-09-06T01:20:47.571352327Z" level=info msg="Loading containers: start." Sep 6 01:20:47.658000 audit[1804]: NETFILTER_CFG table=nat:7 family=2 entries=2 op=nft_register_chain pid=1804 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.658000 audit[1804]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffc19e66b0 a2=0 a3=1 items=0 ppid=1777 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.658000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Sep 6 01:20:47.660000 audit[1806]: NETFILTER_CFG table=filter:8 family=2 entries=2 op=nft_register_chain pid=1806 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.660000 audit[1806]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffc231dc70 a2=0 a3=1 items=0 ppid=1777 pid=1806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.660000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Sep 6 01:20:47.662000 audit[1808]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_chain pid=1808 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.662000 audit[1808]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe6a1db20 a2=0 a3=1 items=0 ppid=1777 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.662000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 6 01:20:47.663000 audit[1810]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_chain pid=1810 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.663000 audit[1810]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffecd316e0 a2=0 a3=1 items=0 ppid=1777 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.663000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 6 01:20:47.665000 audit[1812]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_rule pid=1812 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.665000 audit[1812]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd0233c70 a2=0 a3=1 items=0 ppid=1777 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.665000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Sep 6 01:20:47.667000 audit[1814]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1814 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.667000 audit[1814]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff02e87c0 a2=0 a3=1 items=0 ppid=1777 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.667000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Sep 6 01:20:47.701000 audit[1816]: NETFILTER_CFG table=filter:13 family=2 entries=1 op=nft_register_chain pid=1816 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.701000 audit[1816]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd33f6ac0 a2=0 a3=1 items=0 ppid=1777 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.701000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Sep 6 01:20:47.703000 audit[1818]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_register_rule pid=1818 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.703000 audit[1818]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffe63c7f70 a2=0 a3=1 items=0 ppid=1777 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.703000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Sep 6 01:20:47.705000 audit[1820]: NETFILTER_CFG table=filter:15 family=2 entries=2 op=nft_register_chain pid=1820 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.705000 audit[1820]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=fffff6f6f970 a2=0 a3=1 items=0 ppid=1777 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.705000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 6 01:20:47.741000 audit[1824]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_unregister_rule pid=1824 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.741000 audit[1824]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffd2161e30 a2=0 a3=1 items=0 ppid=1777 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.741000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 6 01:20:47.748000 audit[1825]: NETFILTER_CFG table=filter:17 family=2 entries=1 op=nft_register_rule pid=1825 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.748000 audit[1825]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd9469080 a2=0 a3=1 items=0 ppid=1777 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.748000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 6 01:20:47.791758 kernel: Initializing XFRM netlink socket Sep 6 01:20:47.813743 env[1777]: time="2025-09-06T01:20:47.813684336Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Sep 6 01:20:47.900000 audit[1833]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1833 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.900000 audit[1833]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffd719d3c0 a2=0 a3=1 items=0 ppid=1777 pid=1833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.900000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Sep 6 01:20:47.929000 audit[1836]: NETFILTER_CFG table=nat:19 family=2 entries=1 op=nft_register_rule pid=1836 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.929000 audit[1836]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc97b0df0 a2=0 a3=1 items=0 ppid=1777 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.929000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Sep 6 01:20:47.932000 audit[1839]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1839 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.932000 audit[1839]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffffb973720 a2=0 a3=1 items=0 ppid=1777 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.932000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Sep 6 01:20:47.934000 audit[1841]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1841 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.934000 audit[1841]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc3a354e0 a2=0 a3=1 items=0 ppid=1777 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.934000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Sep 6 01:20:47.935000 audit[1843]: NETFILTER_CFG table=nat:22 family=2 entries=2 op=nft_register_chain pid=1843 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.935000 audit[1843]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffd9a126e0 a2=0 a3=1 items=0 ppid=1777 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.935000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Sep 6 01:20:47.937000 audit[1845]: NETFILTER_CFG table=nat:23 family=2 entries=2 op=nft_register_chain pid=1845 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.937000 audit[1845]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffede1d3a0 a2=0 a3=1 items=0 ppid=1777 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.937000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Sep 6 01:20:47.939000 audit[1847]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1847 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.939000 audit[1847]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffe81b5800 a2=0 a3=1 items=0 ppid=1777 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.939000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Sep 6 01:20:47.941000 audit[1849]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1849 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.941000 audit[1849]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffd1df4510 a2=0 a3=1 items=0 ppid=1777 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.941000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Sep 6 01:20:47.943000 audit[1851]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1851 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.943000 audit[1851]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffeb752d60 a2=0 a3=1 items=0 ppid=1777 pid=1851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.943000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 6 01:20:47.944000 audit[1853]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_rule pid=1853 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.944000 audit[1853]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffd9613e80 a2=0 a3=1 items=0 ppid=1777 pid=1853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.944000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 6 01:20:47.946000 audit[1855]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_rule pid=1855 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.946000 audit[1855]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffef4102e0 a2=0 a3=1 items=0 ppid=1777 pid=1855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.946000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Sep 6 01:20:47.948823 systemd-networkd[1608]: docker0: Link UP Sep 6 01:20:47.975000 audit[1859]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_unregister_rule pid=1859 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.975000 audit[1859]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd90e98a0 a2=0 a3=1 items=0 ppid=1777 pid=1859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.975000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 6 01:20:47.988000 audit[1860]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1860 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:20:47.988000 audit[1860]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffffe242640 a2=0 a3=1 items=0 ppid=1777 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:20:47.988000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 6 01:20:47.991309 env[1777]: time="2025-09-06T01:20:47.991273720Z" level=info msg="Loading containers: done." Sep 6 01:20:48.003069 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck269558526-merged.mount: Deactivated successfully. Sep 6 01:20:48.062556 env[1777]: time="2025-09-06T01:20:48.062514841Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Sep 6 01:20:48.062984 env[1777]: time="2025-09-06T01:20:48.062963438Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Sep 6 01:20:48.063160 env[1777]: time="2025-09-06T01:20:48.063145356Z" level=info msg="Daemon has completed initialization" Sep 6 01:20:48.107840 systemd[1]: Started docker.service. Sep 6 01:20:48.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:48.117538 env[1777]: time="2025-09-06T01:20:48.117474984Z" level=info msg="API listen on /run/docker.sock" Sep 6 01:20:49.131099 env[1445]: time="2025-09-06T01:20:49.131063135Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.4\"" Sep 6 01:20:50.057405 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount780158706.mount: Deactivated successfully. Sep 6 01:20:51.935013 env[1445]: time="2025-09-06T01:20:51.934967914Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:51.947746 env[1445]: time="2025-09-06T01:20:51.947692347Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8dd08b7ae4433dd43482755f08ee0afd6de00c6ece25a8dc5814ebb4b7978e98,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:51.953561 env[1445]: time="2025-09-06T01:20:51.953524587Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:51.961400 env[1445]: time="2025-09-06T01:20:51.961362413Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:0d441d0d347145b3f02f20cb313239cdae86067643d7f70803fab8bac2d28876,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:51.962294 env[1445]: time="2025-09-06T01:20:51.962259647Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.4\" returns image reference \"sha256:8dd08b7ae4433dd43482755f08ee0afd6de00c6ece25a8dc5814ebb4b7978e98\"" Sep 6 01:20:51.964246 env[1445]: time="2025-09-06T01:20:51.964217593Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.4\"" Sep 6 01:20:52.012046 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Sep 6 01:20:52.012225 systemd[1]: Stopped kubelet.service. Sep 6 01:20:52.033009 kernel: kauditd_printk_skb: 84 callbacks suppressed Sep 6 01:20:52.033111 kernel: audit: type=1130 audit(1757121652.010:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:52.010000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:52.013700 systemd[1]: Starting kubelet.service... Sep 6 01:20:52.010000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:52.050021 kernel: audit: type=1131 audit(1757121652.010:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:52.111000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:52.112800 systemd[1]: Started kubelet.service. Sep 6 01:20:52.130827 kernel: audit: type=1130 audit(1757121652.111:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:20:52.203868 kubelet[1897]: E0906 01:20:52.203374 1897 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 01:20:52.204000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 01:20:52.205930 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 01:20:52.206049 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 01:20:52.223756 kernel: audit: type=1131 audit(1757121652.204:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 01:20:53.584157 kernel: hv_balloon: Max. dynamic memory size: 4096 MB Sep 6 01:20:53.995454 env[1445]: time="2025-09-06T01:20:53.995130317Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:54.028464 env[1445]: time="2025-09-06T01:20:54.028415446Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4e90c11ce4b770c38b26b3401b39c25e9871474a71ecb5eaea72082e21ba587d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:54.044986 env[1445]: time="2025-09-06T01:20:54.044925553Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:54.068808 env[1445]: time="2025-09-06T01:20:54.068467180Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:bd22c2af2f30a8f818568b4d5fe131098fdd38267e9e07872cfc33e8f5876bc3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:54.069485 env[1445]: time="2025-09-06T01:20:54.069458615Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.4\" returns image reference \"sha256:4e90c11ce4b770c38b26b3401b39c25e9871474a71ecb5eaea72082e21ba587d\"" Sep 6 01:20:54.070946 env[1445]: time="2025-09-06T01:20:54.070921166Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.4\"" Sep 6 01:20:56.381652 env[1445]: time="2025-09-06T01:20:56.381586246Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:56.391587 env[1445]: time="2025-09-06T01:20:56.391545796Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:10c245abf58045f1a856bebca4ed8e0abfabe4c0256d5a3f0c475fed70c8ce59,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:56.400055 env[1445]: time="2025-09-06T01:20:56.400015554Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:56.408681 env[1445]: time="2025-09-06T01:20:56.408640711Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:71533e5a960e2955a54164905e92dac516ec874a23e0bf31304db82650101a4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:56.409706 env[1445]: time="2025-09-06T01:20:56.409676786Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.4\" returns image reference \"sha256:10c245abf58045f1a856bebca4ed8e0abfabe4c0256d5a3f0c475fed70c8ce59\"" Sep 6 01:20:56.411070 env[1445]: time="2025-09-06T01:20:56.411045099Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.4\"" Sep 6 01:20:57.651246 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3743206687.mount: Deactivated successfully. Sep 6 01:20:58.251832 env[1445]: time="2025-09-06T01:20:58.251785541Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:58.262209 env[1445]: time="2025-09-06T01:20:58.262162776Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e19c0cda155dad39120317830ddb8b2bc22070f2c6a97973e96fb09ef504ee64,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:58.277904 env[1445]: time="2025-09-06T01:20:58.277853827Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:58.285014 env[1445]: time="2025-09-06T01:20:58.284974156Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:bb04e9247da3aaeb96406b4d530a79fc865695b6807353dd1a28871df0d7f837,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:20:58.285739 env[1445]: time="2025-09-06T01:20:58.285694593Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.4\" returns image reference \"sha256:e19c0cda155dad39120317830ddb8b2bc22070f2c6a97973e96fb09ef504ee64\"" Sep 6 01:20:58.286819 env[1445]: time="2025-09-06T01:20:58.286795188Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Sep 6 01:20:58.978915 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4107402588.mount: Deactivated successfully. Sep 6 01:21:00.516155 update_engine[1439]: I0906 01:21:00.515772 1439 update_attempter.cc:509] Updating boot flags... Sep 6 01:21:01.659397 env[1445]: time="2025-09-06T01:21:01.659328898Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:01.714744 env[1445]: time="2025-09-06T01:21:01.714311700Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:01.752415 env[1445]: time="2025-09-06T01:21:01.752344164Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:01.761638 env[1445]: time="2025-09-06T01:21:01.761593610Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:01.765281 env[1445]: time="2025-09-06T01:21:01.765244517Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1\"" Sep 6 01:21:01.766123 env[1445]: time="2025-09-06T01:21:01.766100714Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Sep 6 01:21:02.260000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:02.262025 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Sep 6 01:21:02.262203 systemd[1]: Stopped kubelet.service. Sep 6 01:21:02.263604 systemd[1]: Starting kubelet.service... Sep 6 01:21:02.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:02.297286 kernel: audit: type=1130 audit(1757121662.260:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:02.297399 kernel: audit: type=1131 audit(1757121662.260:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:02.353872 systemd[1]: Started kubelet.service. Sep 6 01:21:02.352000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:02.372773 kernel: audit: type=1130 audit(1757121662.352:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:02.456808 kubelet[1946]: E0906 01:21:02.456759 1946 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 01:21:02.457000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 01:21:02.458875 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 01:21:02.458992 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 01:21:02.477741 kernel: audit: type=1131 audit(1757121662.457:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 01:21:09.871611 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3148549647.mount: Deactivated successfully. Sep 6 01:21:10.060323 env[1445]: time="2025-09-06T01:21:10.060250914Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:10.157955 env[1445]: time="2025-09-06T01:21:10.157832037Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:10.166048 env[1445]: time="2025-09-06T01:21:10.166003621Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:10.210297 env[1445]: time="2025-09-06T01:21:10.210255132Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:10.211098 env[1445]: time="2025-09-06T01:21:10.211064530Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Sep 6 01:21:10.212272 env[1445]: time="2025-09-06T01:21:10.212241608Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Sep 6 01:21:11.772769 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1445481251.mount: Deactivated successfully. Sep 6 01:21:12.512037 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 5. Sep 6 01:21:12.512203 systemd[1]: Stopped kubelet.service. Sep 6 01:21:12.511000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:12.513668 systemd[1]: Starting kubelet.service... Sep 6 01:21:12.511000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:12.549573 kernel: audit: type=1130 audit(1757121672.511:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:12.549666 kernel: audit: type=1131 audit(1757121672.511:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:12.603961 systemd[1]: Started kubelet.service. Sep 6 01:21:12.603000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:12.624761 kernel: audit: type=1130 audit(1757121672.603:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:12.648526 kubelet[1959]: E0906 01:21:12.648486 1959 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 01:21:12.650411 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 01:21:12.650535 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 01:21:12.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 01:21:12.669795 kernel: audit: type=1131 audit(1757121672.650:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 01:21:22.762099 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 6. Sep 6 01:21:22.762274 systemd[1]: Stopped kubelet.service. Sep 6 01:21:22.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:22.763700 systemd[1]: Starting kubelet.service... Sep 6 01:21:22.760000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:22.799704 kernel: audit: type=1130 audit(1757121682.760:266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:22.799833 kernel: audit: type=1131 audit(1757121682.760:267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:22.959575 systemd[1]: Started kubelet.service. Sep 6 01:21:22.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:22.978781 kernel: audit: type=1130 audit(1757121682.958:268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:23.012485 kubelet[1969]: E0906 01:21:23.012376 1969 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 6 01:21:23.012000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 01:21:23.014369 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 6 01:21:23.014483 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 6 01:21:23.032739 kernel: audit: type=1131 audit(1757121683.012:269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 6 01:21:25.050643 env[1445]: time="2025-09-06T01:21:25.050590054Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:25.066225 env[1445]: time="2025-09-06T01:21:25.066174939Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:25.072195 env[1445]: time="2025-09-06T01:21:25.072158757Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:25.087502 env[1445]: time="2025-09-06T01:21:25.087454641Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:25.088343 env[1445]: time="2025-09-06T01:21:25.088311243Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5\"" Sep 6 01:21:30.511225 systemd[1]: Stopped kubelet.service. Sep 6 01:21:30.510000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:30.530998 systemd[1]: Starting kubelet.service... Sep 6 01:21:30.510000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:30.532997 kernel: audit: type=1130 audit(1757121690.510:270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:30.553109 kernel: audit: type=1131 audit(1757121690.510:271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:30.574551 systemd[1]: Reloading. Sep 6 01:21:30.654805 /usr/lib/systemd/system-generators/torcx-generator[2020]: time="2025-09-06T01:21:30Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 01:21:30.654833 /usr/lib/systemd/system-generators/torcx-generator[2020]: time="2025-09-06T01:21:30Z" level=info msg="torcx already run" Sep 6 01:21:30.726293 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 01:21:30.726456 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 01:21:30.742294 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 01:21:30.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.833750 kernel: audit: type=1400 audit(1757121690.813:272): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.867505 kernel: audit: type=1400 audit(1757121690.831:273): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.867559 kernel: audit: type=1400 audit(1757121690.831:274): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.884678 kernel: audit: type=1400 audit(1757121690.831:275): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.884764 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Sep 6 01:21:30.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.907325 kernel: audit: type=1400 audit(1757121690.831:276): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.907387 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Sep 6 01:21:30.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930747 kernel: audit: type=1400 audit(1757121690.831:277): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.831000 audit: BPF prog-id=41 op=LOAD Sep 6 01:21:30.831000 audit: BPF prog-id=38 op=UNLOAD Sep 6 01:21:30.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.831000 audit: BPF prog-id=42 op=LOAD Sep 6 01:21:30.831000 audit: BPF prog-id=33 op=UNLOAD Sep 6 01:21:30.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.848000 audit: BPF prog-id=43 op=LOAD Sep 6 01:21:30.848000 audit: BPF prog-id=40 op=UNLOAD Sep 6 01:21:30.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.865000 audit: BPF prog-id=44 op=LOAD Sep 6 01:21:30.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.865000 audit: BPF prog-id=45 op=LOAD Sep 6 01:21:30.865000 audit: BPF prog-id=25 op=UNLOAD Sep 6 01:21:30.865000 audit: BPF prog-id=26 op=UNLOAD Sep 6 01:21:30.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.882000 audit: BPF prog-id=46 op=LOAD Sep 6 01:21:30.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.929000 audit: BPF prog-id=49 op=LOAD Sep 6 01:21:30.929000 audit: BPF prog-id=30 op=UNLOAD Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit: BPF prog-id=50 op=LOAD Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit: BPF prog-id=31 op=UNLOAD Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit: BPF prog-id=52 op=LOAD Sep 6 01:21:30.930000 audit: BPF prog-id=35 op=UNLOAD Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.931000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.931000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.931000 audit: BPF prog-id=53 op=LOAD Sep 6 01:21:30.931000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.931000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.931000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.931000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.931000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.931000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.931000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.931000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.933000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.933000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.933000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.933000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.933000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.933000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.933000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.933000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.933000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.933000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:30.933000 audit: BPF prog-id=55 op=LOAD Sep 6 01:21:30.933000 audit: BPF prog-id=34 op=UNLOAD Sep 6 01:21:30.952837 systemd[1]: Started kubelet.service. Sep 6 01:21:30.951000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:30.957251 systemd[1]: Stopping kubelet.service... Sep 6 01:21:30.957753 systemd[1]: kubelet.service: Deactivated successfully. Sep 6 01:21:30.957957 systemd[1]: Stopped kubelet.service. Sep 6 01:21:30.956000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:30.959394 systemd[1]: Starting kubelet.service... Sep 6 01:21:40.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:40.160835 systemd[1]: Started kubelet.service. Sep 6 01:21:40.167017 kernel: kauditd_printk_skb: 234 callbacks suppressed Sep 6 01:21:40.167142 kernel: audit: type=1130 audit(1757121700.159:412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:40.225518 kubelet[2092]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 01:21:40.225921 kubelet[2092]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 6 01:21:40.225973 kubelet[2092]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 01:21:40.226098 kubelet[2092]: I0906 01:21:40.226072 2092 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 6 01:21:41.753612 kubelet[2092]: I0906 01:21:41.753569 2092 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Sep 6 01:21:41.753612 kubelet[2092]: I0906 01:21:41.753603 2092 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 6 01:21:41.753967 kubelet[2092]: I0906 01:21:41.753832 2092 server.go:956] "Client rotation is on, will bootstrap in background" Sep 6 01:21:41.776325 kubelet[2092]: I0906 01:21:41.776287 2092 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 6 01:21:41.776866 kubelet[2092]: E0906 01:21:41.776842 2092 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.200.20.17:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.200.20.17:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Sep 6 01:21:41.786513 kubelet[2092]: E0906 01:21:41.786466 2092 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 6 01:21:41.786513 kubelet[2092]: I0906 01:21:41.786513 2092 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 6 01:21:41.789429 kubelet[2092]: I0906 01:21:41.789404 2092 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 6 01:21:41.790579 kubelet[2092]: I0906 01:21:41.790536 2092 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 6 01:21:41.790752 kubelet[2092]: I0906 01:21:41.790582 2092 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-645ca388a2","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 6 01:21:41.790843 kubelet[2092]: I0906 01:21:41.790759 2092 topology_manager.go:138] "Creating topology manager with none policy" Sep 6 01:21:41.790843 kubelet[2092]: I0906 01:21:41.790769 2092 container_manager_linux.go:303] "Creating device plugin manager" Sep 6 01:21:41.790911 kubelet[2092]: I0906 01:21:41.790893 2092 state_mem.go:36] "Initialized new in-memory state store" Sep 6 01:21:41.793699 kubelet[2092]: I0906 01:21:41.793679 2092 kubelet.go:480] "Attempting to sync node with API server" Sep 6 01:21:41.793761 kubelet[2092]: I0906 01:21:41.793703 2092 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 6 01:21:41.793761 kubelet[2092]: I0906 01:21:41.793743 2092 kubelet.go:386] "Adding apiserver pod source" Sep 6 01:21:41.797447 kubelet[2092]: I0906 01:21:41.797420 2092 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 6 01:21:41.800072 kubelet[2092]: I0906 01:21:41.800051 2092 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 6 01:21:41.800766 kubelet[2092]: I0906 01:21:41.800748 2092 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Sep 6 01:21:41.800896 kubelet[2092]: W0906 01:21:41.800886 2092 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Sep 6 01:21:41.802802 kubelet[2092]: I0906 01:21:41.802782 2092 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 6 01:21:41.802938 kubelet[2092]: I0906 01:21:41.802927 2092 server.go:1289] "Started kubelet" Sep 6 01:21:41.803179 kubelet[2092]: E0906 01:21:41.803158 2092 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.200.20.17:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-645ca388a2&limit=500&resourceVersion=0\": dial tcp 10.200.20.17:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Sep 6 01:21:41.804302 kubelet[2092]: I0906 01:21:41.804268 2092 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Sep 6 01:21:41.805180 kubelet[2092]: I0906 01:21:41.805162 2092 server.go:317] "Adding debug handlers to kubelet server" Sep 6 01:21:41.807581 kubelet[2092]: E0906 01:21:41.807540 2092 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.200.20.17:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.20.17:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Sep 6 01:21:41.808369 kubelet[2092]: I0906 01:21:41.808169 2092 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 6 01:21:41.808678 kubelet[2092]: I0906 01:21:41.808650 2092 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 6 01:21:41.808000 audit[2092]: AVC avc: denied { mac_admin } for pid=2092 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:41.810782 kubelet[2092]: I0906 01:21:41.810744 2092 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 6 01:21:41.810914 kubelet[2092]: I0906 01:21:41.810897 2092 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 6 01:21:41.811064 kubelet[2092]: I0906 01:21:41.811049 2092 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 6 01:21:41.824809 kubelet[2092]: I0906 01:21:41.824779 2092 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 6 01:21:41.826329 kubelet[2092]: I0906 01:21:41.826309 2092 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 6 01:21:41.826645 kubelet[2092]: E0906 01:21:41.826623 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:41.827361 kubelet[2092]: I0906 01:21:41.827342 2092 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 6 01:21:41.827496 kubelet[2092]: I0906 01:21:41.827486 2092 reconciler.go:26] "Reconciler: start to sync state" Sep 6 01:21:41.827951 kubelet[2092]: E0906 01:21:41.827934 2092 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 6 01:21:41.808000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 01:21:41.838597 kernel: audit: type=1400 audit(1757121701.808:413): avc: denied { mac_admin } for pid=2092 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:41.838711 kernel: audit: type=1401 audit(1757121701.808:413): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 01:21:41.808000 audit[2092]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000975b60 a1=400099ce10 a2=4000975b30 a3=25 items=0 ppid=1 pid=2092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:41.845686 kubelet[2092]: E0906 01:21:41.845654 2092 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-645ca388a2?timeout=10s\": dial tcp 10.200.20.17:6443: connect: connection refused" interval="200ms" Sep 6 01:21:41.845982 kubelet[2092]: E0906 01:21:41.845961 2092 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.200.20.17:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.20.17:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Sep 6 01:21:41.846301 kubelet[2092]: I0906 01:21:41.846282 2092 factory.go:223] Registration of the systemd container factory successfully Sep 6 01:21:41.846498 kubelet[2092]: I0906 01:21:41.846482 2092 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 6 01:21:41.848166 kubelet[2092]: I0906 01:21:41.848148 2092 factory.go:223] Registration of the containerd container factory successfully Sep 6 01:21:41.865320 kernel: audit: type=1300 audit(1757121701.808:413): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000975b60 a1=400099ce10 a2=4000975b30 a3=25 items=0 ppid=1 pid=2092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:41.808000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 01:21:44.455437 kernel: audit: type=1327 audit(1757121701.808:413): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 01:21:44.455514 kernel: audit: type=1400 audit(1757121701.809:414): avc: denied { mac_admin } for pid=2092 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:44.455541 kernel: audit: type=1401 audit(1757121701.809:414): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 01:21:44.455559 kernel: audit: type=1300 audit(1757121701.809:414): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000890d80 a1=400099ce28 a2=4000975bf0 a3=25 items=0 ppid=1 pid=2092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:44.455575 kernel: audit: type=1327 audit(1757121701.809:414): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 01:21:44.455594 kernel: audit: type=1325 audit(1757121701.821:415): table=mangle:31 family=2 entries=2 op=nft_register_chain pid=2107 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:41.809000 audit[2092]: AVC avc: denied { mac_admin } for pid=2092 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:41.809000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 01:21:41.809000 audit[2092]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000890d80 a1=400099ce28 a2=4000975bf0 a3=25 items=0 ppid=1 pid=2092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:41.809000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 01:21:41.821000 audit[2107]: NETFILTER_CFG table=mangle:31 family=2 entries=2 op=nft_register_chain pid=2107 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:41.821000 audit[2107]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffef853740 a2=0 a3=1 items=0 ppid=2092 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:41.821000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 6 01:21:41.826000 audit[2108]: NETFILTER_CFG table=filter:32 family=2 entries=1 op=nft_register_chain pid=2108 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:41.826000 audit[2108]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffca08a8e0 a2=0 a3=1 items=0 ppid=2092 pid=2108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:41.826000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 6 01:21:41.829000 audit[2110]: NETFILTER_CFG table=filter:33 family=2 entries=2 op=nft_register_chain pid=2110 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:41.829000 audit[2110]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffcc717960 a2=0 a3=1 items=0 ppid=2092 pid=2110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:41.829000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 01:21:41.830000 audit[2112]: NETFILTER_CFG table=filter:34 family=2 entries=2 op=nft_register_chain pid=2112 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:41.830000 audit[2112]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffcd6207b0 a2=0 a3=1 items=0 ppid=2092 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:41.830000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 01:21:44.456261 kubelet[2092]: E0906 01:21:41.936152 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.456261 kubelet[2092]: E0906 01:21:41.922293 2092 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.200.20.17:6443/api/v1/namespaces/default/events\": dial tcp 10.200.20.17:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510.3.8-n-645ca388a2.18628ce0cf175e92 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.8-n-645ca388a2,UID:ci-3510.3.8-n-645ca388a2,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.8-n-645ca388a2,},FirstTimestamp:2025-09-06 01:21:41.802892946 +0000 UTC m=+1.622816959,LastTimestamp:2025-09-06 01:21:41.802892946 +0000 UTC m=+1.622816959,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.8-n-645ca388a2,}" Sep 6 01:21:44.456261 kubelet[2092]: E0906 01:21:42.036623 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.456261 kubelet[2092]: E0906 01:21:42.047157 2092 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-645ca388a2?timeout=10s\": dial tcp 10.200.20.17:6443: connect: connection refused" interval="400ms" Sep 6 01:21:44.456261 kubelet[2092]: I0906 01:21:42.115595 2092 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 6 01:21:44.456261 kubelet[2092]: I0906 01:21:42.115608 2092 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 6 01:21:44.456261 kubelet[2092]: I0906 01:21:42.115655 2092 state_mem.go:36] "Initialized new in-memory state store" Sep 6 01:21:44.456261 kubelet[2092]: E0906 01:21:42.136976 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.456653 kubelet[2092]: E0906 01:21:42.237345 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.456653 kubelet[2092]: E0906 01:21:42.337917 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.456653 kubelet[2092]: E0906 01:21:42.438255 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.456653 kubelet[2092]: E0906 01:21:42.447681 2092 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-645ca388a2?timeout=10s\": dial tcp 10.200.20.17:6443: connect: connection refused" interval="800ms" Sep 6 01:21:44.456653 kubelet[2092]: E0906 01:21:42.539070 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.456653 kubelet[2092]: E0906 01:21:42.639478 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.456653 kubelet[2092]: E0906 01:21:42.739863 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.456653 kubelet[2092]: E0906 01:21:42.840152 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.456653 kubelet[2092]: E0906 01:21:42.940552 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.456653 kubelet[2092]: E0906 01:21:43.040888 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.456653 kubelet[2092]: E0906 01:21:43.057374 2092 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.200.20.17:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.20.17:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Sep 6 01:21:44.456902 kubelet[2092]: E0906 01:21:43.141797 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.456902 kubelet[2092]: E0906 01:21:43.210324 2092 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.200.20.17:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-645ca388a2&limit=500&resourceVersion=0\": dial tcp 10.200.20.17:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Sep 6 01:21:44.456902 kubelet[2092]: E0906 01:21:43.242739 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.456902 kubelet[2092]: E0906 01:21:43.248202 2092 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-645ca388a2?timeout=10s\": dial tcp 10.200.20.17:6443: connect: connection refused" interval="1.6s" Sep 6 01:21:44.456902 kubelet[2092]: E0906 01:21:43.342870 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.456902 kubelet[2092]: E0906 01:21:43.384342 2092 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.200.20.17:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.20.17:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Sep 6 01:21:44.456902 kubelet[2092]: E0906 01:21:43.443793 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.456902 kubelet[2092]: E0906 01:21:43.544112 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.456902 kubelet[2092]: E0906 01:21:43.644493 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.457087 kubelet[2092]: E0906 01:21:43.744865 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.457087 kubelet[2092]: E0906 01:21:43.831926 2092 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.200.20.17:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.200.20.17:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Sep 6 01:21:44.457087 kubelet[2092]: E0906 01:21:43.845157 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.457087 kubelet[2092]: E0906 01:21:43.945545 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.457087 kubelet[2092]: E0906 01:21:44.045867 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.457087 kubelet[2092]: E0906 01:21:44.146238 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.457087 kubelet[2092]: E0906 01:21:44.246617 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.457087 kubelet[2092]: E0906 01:21:44.347303 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.457087 kubelet[2092]: E0906 01:21:44.447656 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.504911 kubelet[2092]: I0906 01:21:44.504875 2092 policy_none.go:49] "None policy: Start" Sep 6 01:21:44.505084 kubelet[2092]: I0906 01:21:44.505072 2092 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 6 01:21:44.505141 kubelet[2092]: I0906 01:21:44.505133 2092 state_mem.go:35] "Initializing new in-memory state store" Sep 6 01:21:44.514713 systemd[1]: Created slice kubepods.slice. Sep 6 01:21:44.519653 systemd[1]: Created slice kubepods-burstable.slice. Sep 6 01:21:44.523150 systemd[1]: Created slice kubepods-besteffort.slice. Sep 6 01:21:44.526000 audit[2092]: AVC avc: denied { mac_admin } for pid=2092 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:44.526000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 01:21:44.526000 audit[2092]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b92d80 a1=400099d500 a2=4000b92d50 a3=25 items=0 ppid=1 pid=2092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:44.526000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 01:21:44.528690 kubelet[2092]: E0906 01:21:44.528253 2092 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Sep 6 01:21:44.528690 kubelet[2092]: E0906 01:21:44.528353 2092 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Sep 6 01:21:44.528690 kubelet[2092]: I0906 01:21:44.528571 2092 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 6 01:21:44.528690 kubelet[2092]: I0906 01:21:44.528586 2092 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 6 01:21:44.529627 kubelet[2092]: I0906 01:21:44.529600 2092 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 6 01:21:44.531099 kubelet[2092]: E0906 01:21:44.531076 2092 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 6 01:21:44.531265 kubelet[2092]: E0906 01:21:44.531236 2092 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:44.540000 audit[2121]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_rule pid=2121 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:44.540000 audit[2121]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffc104d0b0 a2=0 a3=1 items=0 ppid=2092 pid=2121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:44.540000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Sep 6 01:21:44.543247 kubelet[2092]: I0906 01:21:44.543207 2092 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Sep 6 01:21:44.542000 audit[2122]: NETFILTER_CFG table=mangle:36 family=10 entries=2 op=nft_register_chain pid=2122 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:44.542000 audit[2122]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff9d1a250 a2=0 a3=1 items=0 ppid=2092 pid=2122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:44.542000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 6 01:21:44.542000 audit[2123]: NETFILTER_CFG table=mangle:37 family=2 entries=1 op=nft_register_chain pid=2123 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:44.542000 audit[2123]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc201af90 a2=0 a3=1 items=0 ppid=2092 pid=2123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:44.542000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 6 01:21:44.545079 kubelet[2092]: I0906 01:21:44.545044 2092 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Sep 6 01:21:44.545079 kubelet[2092]: I0906 01:21:44.545082 2092 status_manager.go:230] "Starting to sync pod status with apiserver" Sep 6 01:21:44.545174 kubelet[2092]: I0906 01:21:44.545102 2092 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 6 01:21:44.545174 kubelet[2092]: I0906 01:21:44.545109 2092 kubelet.go:2436] "Starting kubelet main sync loop" Sep 6 01:21:44.545174 kubelet[2092]: E0906 01:21:44.545145 2092 kubelet.go:2460] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Sep 6 01:21:44.546691 kubelet[2092]: E0906 01:21:44.546652 2092 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.200.20.17:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.20.17:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Sep 6 01:21:44.545000 audit[2125]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2125 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:44.545000 audit[2125]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffd1c5030 a2=0 a3=1 items=0 ppid=2092 pid=2125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:44.545000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 6 01:21:44.545000 audit[2124]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2124 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:44.545000 audit[2124]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff8aa1a00 a2=0 a3=1 items=0 ppid=2092 pid=2124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:44.545000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 6 01:21:44.547000 audit[2127]: NETFILTER_CFG table=nat:40 family=10 entries=2 op=nft_register_chain pid=2127 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:44.547000 audit[2127]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffd6918f40 a2=0 a3=1 items=0 ppid=2092 pid=2127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:44.547000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 6 01:21:44.547000 audit[2126]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=2126 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:44.547000 audit[2126]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd6388f50 a2=0 a3=1 items=0 ppid=2092 pid=2126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:44.547000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 6 01:21:44.548000 audit[2128]: NETFILTER_CFG table=filter:42 family=10 entries=2 op=nft_register_chain pid=2128 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:44.548000 audit[2128]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe69772e0 a2=0 a3=1 items=0 ppid=2092 pid=2128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:44.548000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 6 01:21:44.630352 kubelet[2092]: I0906 01:21:44.630327 2092 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:44.630976 kubelet[2092]: E0906 01:21:44.630952 2092 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.17:6443/api/v1/nodes\": dial tcp 10.200.20.17:6443: connect: connection refused" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:44.659702 systemd[1]: Created slice kubepods-burstable-pod68f25dab09e66ec207b61fc303d39eb2.slice. Sep 6 01:21:44.668541 kubelet[2092]: E0906 01:21:44.668517 2092 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-645ca388a2\" not found" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:44.676185 systemd[1]: Created slice kubepods-burstable-pod4da48242196942d5ca6c19f38b89beb5.slice. Sep 6 01:21:44.679168 kubelet[2092]: E0906 01:21:44.679148 2092 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-645ca388a2\" not found" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:44.682015 systemd[1]: Created slice kubepods-burstable-pod739dbc3c0bfa65e80a5892e19ad04e0c.slice. Sep 6 01:21:44.683635 kubelet[2092]: E0906 01:21:44.683602 2092 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-645ca388a2\" not found" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:44.750565 kubelet[2092]: I0906 01:21:44.749140 2092 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/68f25dab09e66ec207b61fc303d39eb2-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-645ca388a2\" (UID: \"68f25dab09e66ec207b61fc303d39eb2\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:44.750565 kubelet[2092]: I0906 01:21:44.749186 2092 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/68f25dab09e66ec207b61fc303d39eb2-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-645ca388a2\" (UID: \"68f25dab09e66ec207b61fc303d39eb2\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:44.750565 kubelet[2092]: I0906 01:21:44.749207 2092 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/4da48242196942d5ca6c19f38b89beb5-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-645ca388a2\" (UID: \"4da48242196942d5ca6c19f38b89beb5\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:44.750565 kubelet[2092]: I0906 01:21:44.749224 2092 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/4da48242196942d5ca6c19f38b89beb5-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-645ca388a2\" (UID: \"4da48242196942d5ca6c19f38b89beb5\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:44.750565 kubelet[2092]: I0906 01:21:44.749238 2092 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/4da48242196942d5ca6c19f38b89beb5-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-645ca388a2\" (UID: \"4da48242196942d5ca6c19f38b89beb5\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:44.750814 kubelet[2092]: I0906 01:21:44.749253 2092 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/68f25dab09e66ec207b61fc303d39eb2-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-645ca388a2\" (UID: \"68f25dab09e66ec207b61fc303d39eb2\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:44.750814 kubelet[2092]: I0906 01:21:44.749266 2092 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/4da48242196942d5ca6c19f38b89beb5-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-645ca388a2\" (UID: \"4da48242196942d5ca6c19f38b89beb5\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:44.750814 kubelet[2092]: I0906 01:21:44.749281 2092 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/4da48242196942d5ca6c19f38b89beb5-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-645ca388a2\" (UID: \"4da48242196942d5ca6c19f38b89beb5\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:44.750814 kubelet[2092]: I0906 01:21:44.749306 2092 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/739dbc3c0bfa65e80a5892e19ad04e0c-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-645ca388a2\" (UID: \"739dbc3c0bfa65e80a5892e19ad04e0c\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:44.832490 kubelet[2092]: I0906 01:21:44.832458 2092 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:44.832925 kubelet[2092]: E0906 01:21:44.832901 2092 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.17:6443/api/v1/nodes\": dial tcp 10.200.20.17:6443: connect: connection refused" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:44.849334 kubelet[2092]: E0906 01:21:44.849295 2092 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-645ca388a2?timeout=10s\": dial tcp 10.200.20.17:6443: connect: connection refused" interval="3.2s" Sep 6 01:21:44.973686 env[1445]: time="2025-09-06T01:21:44.973637856Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-645ca388a2,Uid:68f25dab09e66ec207b61fc303d39eb2,Namespace:kube-system,Attempt:0,}" Sep 6 01:21:44.980678 env[1445]: time="2025-09-06T01:21:44.980641588Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-645ca388a2,Uid:4da48242196942d5ca6c19f38b89beb5,Namespace:kube-system,Attempt:0,}" Sep 6 01:21:44.984950 env[1445]: time="2025-09-06T01:21:44.984812156Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-645ca388a2,Uid:739dbc3c0bfa65e80a5892e19ad04e0c,Namespace:kube-system,Attempt:0,}" Sep 6 01:21:45.225309 kubelet[2092]: E0906 01:21:45.225262 2092 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.200.20.17:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.20.17:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Sep 6 01:21:45.234902 kubelet[2092]: I0906 01:21:45.234874 2092 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:45.235282 kubelet[2092]: E0906 01:21:45.235235 2092 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.17:6443/api/v1/nodes\": dial tcp 10.200.20.17:6443: connect: connection refused" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:45.261979 kubelet[2092]: E0906 01:21:45.261876 2092 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.200.20.17:6443/api/v1/namespaces/default/events\": dial tcp 10.200.20.17:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510.3.8-n-645ca388a2.18628ce0cf175e92 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.8-n-645ca388a2,UID:ci-3510.3.8-n-645ca388a2,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.8-n-645ca388a2,},FirstTimestamp:2025-09-06 01:21:41.802892946 +0000 UTC m=+1.622816959,LastTimestamp:2025-09-06 01:21:41.802892946 +0000 UTC m=+1.622816959,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.8-n-645ca388a2,}" Sep 6 01:21:45.681264 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3925020147.mount: Deactivated successfully. Sep 6 01:21:45.744221 env[1445]: time="2025-09-06T01:21:45.744161363Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:45.748059 env[1445]: time="2025-09-06T01:21:45.748023250Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:45.771601 env[1445]: time="2025-09-06T01:21:45.771541371Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:45.776017 env[1445]: time="2025-09-06T01:21:45.775981579Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:45.783237 env[1445]: time="2025-09-06T01:21:45.783186271Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:45.787484 env[1445]: time="2025-09-06T01:21:45.787448119Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:45.793463 env[1445]: time="2025-09-06T01:21:45.793414289Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:45.797535 env[1445]: time="2025-09-06T01:21:45.797500896Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:45.807123 env[1445]: time="2025-09-06T01:21:45.807074753Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:45.812983 env[1445]: time="2025-09-06T01:21:45.812935723Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:45.840235 env[1445]: time="2025-09-06T01:21:45.840191731Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:45.875581 env[1445]: time="2025-09-06T01:21:45.875532153Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:21:45.968922 kubelet[2092]: E0906 01:21:45.968276 2092 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.200.20.17:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.20.17:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Sep 6 01:21:45.979388 env[1445]: time="2025-09-06T01:21:45.979311574Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:21:45.979742 env[1445]: time="2025-09-06T01:21:45.979364614Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:21:45.979742 env[1445]: time="2025-09-06T01:21:45.979387694Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:21:45.979965 env[1445]: time="2025-09-06T01:21:45.979925655Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/171714b1e947bd293e77996e35efbea03065877afc7a7ebae3edbda47edf9979 pid=2136 runtime=io.containerd.runc.v2 Sep 6 01:21:45.996888 systemd[1]: Started cri-containerd-171714b1e947bd293e77996e35efbea03065877afc7a7ebae3edbda47edf9979.scope. Sep 6 01:21:46.015820 kernel: kauditd_printk_skb: 39 callbacks suppressed Sep 6 01:21:46.015935 kernel: audit: type=1400 audit(1757121706.008:428): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.051570 kernel: audit: type=1400 audit(1757121706.008:429): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.072447 kernel: audit: type=1400 audit(1757121706.008:430): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.072927 env[1445]: time="2025-09-06T01:21:46.059168871Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:21:46.072927 env[1445]: time="2025-09-06T01:21:46.059221032Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:21:46.072927 env[1445]: time="2025-09-06T01:21:46.059231912Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:21:46.072927 env[1445]: time="2025-09-06T01:21:46.059354952Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/244b0864fb654f5e3afd0712ec9d40eb05deef085c0b665e4138d9ba5f6af3c4 pid=2171 runtime=io.containerd.runc.v2 Sep 6 01:21:46.074563 kubelet[2092]: I0906 01:21:46.074074 2092 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:46.074563 kubelet[2092]: E0906 01:21:46.074524 2092 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.17:6443/api/v1/nodes\": dial tcp 10.200.20.17:6443: connect: connection refused" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:46.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.096705 kernel: audit: type=1400 audit(1757121706.008:431): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.115680 kernel: audit: type=1400 audit(1757121706.008:432): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.115883 kubelet[2092]: E0906 01:21:46.100254 2092 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.200.20.17:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.20.17:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Sep 6 01:21:46.115941 env[1445]: time="2025-09-06T01:21:46.086007317Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:21:46.115941 env[1445]: time="2025-09-06T01:21:46.086044037Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:21:46.115941 env[1445]: time="2025-09-06T01:21:46.086054117Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:21:46.115941 env[1445]: time="2025-09-06T01:21:46.086233678Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/725bca01110bf7ef9f7a729a153f2f46024b4faf81d97b74152c46deb93cf973 pid=2189 runtime=io.containerd.runc.v2 Sep 6 01:21:46.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.134860 kernel: audit: type=1400 audit(1757121706.008:433): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.172470 kernel: audit: type=1400 audit(1757121706.008:434): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.172563 kernel: audit: type=1400 audit(1757121706.008:435): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.172585 env[1445]: time="2025-09-06T01:21:46.156109037Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-645ca388a2,Uid:68f25dab09e66ec207b61fc303d39eb2,Namespace:kube-system,Attempt:0,} returns sandbox id \"171714b1e947bd293e77996e35efbea03065877afc7a7ebae3edbda47edf9979\"" Sep 6 01:21:46.172650 kubelet[2092]: E0906 01:21:46.167589 2092 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.200.20.17:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-645ca388a2&limit=500&resourceVersion=0\": dial tcp 10.200.20.17:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Sep 6 01:21:46.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.191157 kernel: audit: type=1400 audit(1757121706.008:436): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.176262 systemd[1]: Started cri-containerd-244b0864fb654f5e3afd0712ec9d40eb05deef085c0b665e4138d9ba5f6af3c4.scope. Sep 6 01:21:46.179436 systemd[1]: Started cri-containerd-725bca01110bf7ef9f7a729a153f2f46024b4faf81d97b74152c46deb93cf973.scope. Sep 6 01:21:46.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.212505 kernel: audit: type=1400 audit(1757121706.013:437): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.215239 env[1445]: time="2025-09-06T01:21:46.215172458Z" level=info msg="CreateContainer within sandbox \"171714b1e947bd293e77996e35efbea03065877afc7a7ebae3edbda47edf9979\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Sep 6 01:21:46.013000 audit: BPF prog-id=56 op=LOAD Sep 6 01:21:46.032000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.032000 audit[2146]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2136 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.032000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137313731346231653934376264323933653737393936653335656662 Sep 6 01:21:46.032000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.032000 audit[2146]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2136 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.032000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137313731346231653934376264323933653737393936653335656662 Sep 6 01:21:46.032000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.032000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.032000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.032000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.032000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.032000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.032000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.032000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.032000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.032000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.032000 audit: BPF prog-id=57 op=LOAD Sep 6 01:21:46.032000 audit[2146]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2136 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.032000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137313731346231653934376264323933653737393936653335656662 Sep 6 01:21:46.050000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.050000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.050000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.050000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.050000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.050000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.050000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.050000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.050000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.050000 audit: BPF prog-id=58 op=LOAD Sep 6 01:21:46.050000 audit[2146]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2136 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.050000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137313731346231653934376264323933653737393936653335656662 Sep 6 01:21:46.050000 audit: BPF prog-id=58 op=UNLOAD Sep 6 01:21:46.050000 audit: BPF prog-id=57 op=UNLOAD Sep 6 01:21:46.050000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.050000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.050000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.050000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.050000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.050000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.050000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.050000 audit[2146]: AVC avc: denied { perfmon } for pid=2146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.050000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.050000 audit[2146]: AVC avc: denied { bpf } for pid=2146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.050000 audit: BPF prog-id=59 op=LOAD Sep 6 01:21:46.050000 audit[2146]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2136 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.050000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137313731346231653934376264323933653737393936653335656662 Sep 6 01:21:46.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.215000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.215000 audit: BPF prog-id=60 op=LOAD Sep 6 01:21:46.215000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.215000 audit[2208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2189 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732356263613031313130626637656639663761373239613135336632 Sep 6 01:21:46.217000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.217000 audit[2208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2189 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.217000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732356263613031313130626637656639663761373239613135336632 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit: BPF prog-id=61 op=LOAD Sep 6 01:21:46.218000 audit[2208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2189 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.218000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732356263613031313130626637656639663761373239613135336632 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit: BPF prog-id=62 op=LOAD Sep 6 01:21:46.218000 audit[2208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2189 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.218000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732356263613031313130626637656639663761373239613135336632 Sep 6 01:21:46.218000 audit: BPF prog-id=62 op=UNLOAD Sep 6 01:21:46.218000 audit: BPF prog-id=61 op=UNLOAD Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.218000 audit: BPF prog-id=63 op=LOAD Sep 6 01:21:46.218000 audit[2208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2189 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.218000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732356263613031313130626637656639663761373239613135336632 Sep 6 01:21:46.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.220000 audit: BPF prog-id=64 op=LOAD Sep 6 01:21:46.226000 audit[2188]: AVC avc: denied { bpf } for pid=2188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.226000 audit[2188]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2171 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234346230383634666236353466356533616664303731326563396434 Sep 6 01:21:46.226000 audit[2188]: AVC avc: denied { perfmon } for pid=2188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.226000 audit[2188]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2171 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234346230383634666236353466356533616664303731326563396434 Sep 6 01:21:46.226000 audit[2188]: AVC avc: denied { bpf } for pid=2188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.226000 audit[2188]: AVC avc: denied { bpf } for pid=2188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.226000 audit[2188]: AVC avc: denied { bpf } for pid=2188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.226000 audit[2188]: AVC avc: denied { perfmon } for pid=2188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.226000 audit[2188]: AVC avc: denied { perfmon } for pid=2188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.226000 audit[2188]: AVC avc: denied { perfmon } for pid=2188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.226000 audit[2188]: AVC avc: denied { perfmon } for pid=2188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.226000 audit[2188]: AVC avc: denied { perfmon } for pid=2188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.226000 audit[2188]: AVC avc: denied { bpf } for pid=2188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.226000 audit[2188]: AVC avc: denied { bpf } for pid=2188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.226000 audit: BPF prog-id=65 op=LOAD Sep 6 01:21:46.226000 audit[2188]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2171 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234346230383634666236353466356533616664303731326563396434 Sep 6 01:21:46.227000 audit[2188]: AVC avc: denied { bpf } for pid=2188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.227000 audit[2188]: AVC avc: denied { bpf } for pid=2188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.227000 audit[2188]: AVC avc: denied { perfmon } for pid=2188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.227000 audit[2188]: AVC avc: denied { perfmon } for pid=2188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.227000 audit[2188]: AVC avc: denied { perfmon } for pid=2188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.227000 audit[2188]: AVC avc: denied { perfmon } for pid=2188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.227000 audit[2188]: AVC avc: denied { perfmon } for pid=2188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.227000 audit[2188]: AVC avc: denied { bpf } for pid=2188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.227000 audit[2188]: AVC avc: denied { bpf } for pid=2188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.227000 audit: BPF prog-id=66 op=LOAD Sep 6 01:21:46.227000 audit[2188]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2171 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.227000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234346230383634666236353466356533616664303731326563396434 Sep 6 01:21:46.228000 audit: BPF prog-id=66 op=UNLOAD Sep 6 01:21:46.228000 audit: BPF prog-id=65 op=UNLOAD Sep 6 01:21:46.228000 audit[2188]: AVC avc: denied { bpf } for pid=2188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.228000 audit[2188]: AVC avc: denied { bpf } for pid=2188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.228000 audit[2188]: AVC avc: denied { bpf } for pid=2188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.228000 audit[2188]: AVC avc: denied { perfmon } for pid=2188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.228000 audit[2188]: AVC avc: denied { perfmon } for pid=2188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.228000 audit[2188]: AVC avc: denied { perfmon } for pid=2188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.228000 audit[2188]: AVC avc: denied { perfmon } for pid=2188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.228000 audit[2188]: AVC avc: denied { perfmon } for pid=2188 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.228000 audit[2188]: AVC avc: denied { bpf } for pid=2188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.228000 audit[2188]: AVC avc: denied { bpf } for pid=2188 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.228000 audit: BPF prog-id=67 op=LOAD Sep 6 01:21:46.228000 audit[2188]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2171 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234346230383634666236353466356533616664303731326563396434 Sep 6 01:21:46.249336 env[1445]: time="2025-09-06T01:21:46.249290796Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-645ca388a2,Uid:739dbc3c0bfa65e80a5892e19ad04e0c,Namespace:kube-system,Attempt:0,} returns sandbox id \"725bca01110bf7ef9f7a729a153f2f46024b4faf81d97b74152c46deb93cf973\"" Sep 6 01:21:46.255342 env[1445]: time="2025-09-06T01:21:46.255303166Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-645ca388a2,Uid:4da48242196942d5ca6c19f38b89beb5,Namespace:kube-system,Attempt:0,} returns sandbox id \"244b0864fb654f5e3afd0712ec9d40eb05deef085c0b665e4138d9ba5f6af3c4\"" Sep 6 01:21:46.260379 env[1445]: time="2025-09-06T01:21:46.260338855Z" level=info msg="CreateContainer within sandbox \"725bca01110bf7ef9f7a729a153f2f46024b4faf81d97b74152c46deb93cf973\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Sep 6 01:21:46.266927 env[1445]: time="2025-09-06T01:21:46.266886346Z" level=info msg="CreateContainer within sandbox \"244b0864fb654f5e3afd0712ec9d40eb05deef085c0b665e4138d9ba5f6af3c4\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Sep 6 01:21:46.277924 env[1445]: time="2025-09-06T01:21:46.277867485Z" level=info msg="CreateContainer within sandbox \"171714b1e947bd293e77996e35efbea03065877afc7a7ebae3edbda47edf9979\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"d79fe54fb2eb1a8aa1a167a3bec2ac192ac1470a6ad3508ac5cbcb5b39d0ae2a\"" Sep 6 01:21:46.278627 env[1445]: time="2025-09-06T01:21:46.278590526Z" level=info msg="StartContainer for \"d79fe54fb2eb1a8aa1a167a3bec2ac192ac1470a6ad3508ac5cbcb5b39d0ae2a\"" Sep 6 01:21:46.299518 systemd[1]: Started cri-containerd-d79fe54fb2eb1a8aa1a167a3bec2ac192ac1470a6ad3508ac5cbcb5b39d0ae2a.scope. Sep 6 01:21:46.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit: BPF prog-id=68 op=LOAD Sep 6 01:21:46.313000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[2266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2136 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.313000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437396665353466623265623161386161316131363761336265633261 Sep 6 01:21:46.313000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[2266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2136 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.313000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437396665353466623265623161386161316131363761336265633261 Sep 6 01:21:46.313000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit: BPF prog-id=69 op=LOAD Sep 6 01:21:46.313000 audit[2266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2136 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.313000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437396665353466623265623161386161316131363761336265633261 Sep 6 01:21:46.313000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.313000 audit: BPF prog-id=70 op=LOAD Sep 6 01:21:46.313000 audit[2266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2136 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.313000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437396665353466623265623161386161316131363761336265633261 Sep 6 01:21:46.313000 audit: BPF prog-id=70 op=UNLOAD Sep 6 01:21:46.314000 audit: BPF prog-id=69 op=UNLOAD Sep 6 01:21:46.314000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.314000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.314000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.314000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.314000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.314000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.314000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.314000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.314000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.314000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.314000 audit: BPF prog-id=71 op=LOAD Sep 6 01:21:46.314000 audit[2266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2136 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.314000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437396665353466623265623161386161316131363761336265633261 Sep 6 01:21:46.346629 env[1445]: time="2025-09-06T01:21:46.346570802Z" level=info msg="StartContainer for \"d79fe54fb2eb1a8aa1a167a3bec2ac192ac1470a6ad3508ac5cbcb5b39d0ae2a\" returns successfully" Sep 6 01:21:46.377005 env[1445]: time="2025-09-06T01:21:46.376958254Z" level=info msg="CreateContainer within sandbox \"244b0864fb654f5e3afd0712ec9d40eb05deef085c0b665e4138d9ba5f6af3c4\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"7be4e24e9c311a7b7c6cd4dd514206100a9af722227d25d64fe0b4d4f141f3ac\"" Sep 6 01:21:46.377716 env[1445]: time="2025-09-06T01:21:46.377674895Z" level=info msg="StartContainer for \"7be4e24e9c311a7b7c6cd4dd514206100a9af722227d25d64fe0b4d4f141f3ac\"" Sep 6 01:21:46.383636 env[1445]: time="2025-09-06T01:21:46.383581945Z" level=info msg="CreateContainer within sandbox \"725bca01110bf7ef9f7a729a153f2f46024b4faf81d97b74152c46deb93cf973\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"5bfb818bf38b4c27eb250ae21b46d8a91528a7e49107eab74aff00da170fd844\"" Sep 6 01:21:46.384158 env[1445]: time="2025-09-06T01:21:46.384124506Z" level=info msg="StartContainer for \"5bfb818bf38b4c27eb250ae21b46d8a91528a7e49107eab74aff00da170fd844\"" Sep 6 01:21:46.403186 systemd[1]: Started cri-containerd-7be4e24e9c311a7b7c6cd4dd514206100a9af722227d25d64fe0b4d4f141f3ac.scope. Sep 6 01:21:46.413937 systemd[1]: Started cri-containerd-5bfb818bf38b4c27eb250ae21b46d8a91528a7e49107eab74aff00da170fd844.scope. Sep 6 01:21:46.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit: BPF prog-id=72 op=LOAD Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=2171 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762653465323465396333313161376237633663643464643531343230 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2171 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762653465323465396333313161376237633663643464643531343230 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit: BPF prog-id=73 op=LOAD Sep 6 01:21:46.424000 audit[2301]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2171 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762653465323465396333313161376237633663643464643531343230 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit: BPF prog-id=74 op=LOAD Sep 6 01:21:46.424000 audit[2301]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2171 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762653465323465396333313161376237633663643464643531343230 Sep 6 01:21:46.424000 audit: BPF prog-id=74 op=UNLOAD Sep 6 01:21:46.424000 audit: BPF prog-id=73 op=UNLOAD Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { perfmon } for pid=2301 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit[2301]: AVC avc: denied { bpf } for pid=2301 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.424000 audit: BPF prog-id=75 op=LOAD Sep 6 01:21:46.424000 audit[2301]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2171 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762653465323465396333313161376237633663643464643531343230 Sep 6 01:21:46.459914 env[1445]: time="2025-09-06T01:21:46.459858835Z" level=info msg="StartContainer for \"7be4e24e9c311a7b7c6cd4dd514206100a9af722227d25d64fe0b4d4f141f3ac\" returns successfully" Sep 6 01:21:46.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.461000 audit: BPF prog-id=76 op=LOAD Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { bpf } for pid=2312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2189 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562666238313862663338623463323765623235306165323162343664 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { perfmon } for pid=2312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2189 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562666238313862663338623463323765623235306165323162343664 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { bpf } for pid=2312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { bpf } for pid=2312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { bpf } for pid=2312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { perfmon } for pid=2312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { perfmon } for pid=2312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { perfmon } for pid=2312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { perfmon } for pid=2312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { perfmon } for pid=2312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { bpf } for pid=2312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { bpf } for pid=2312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit: BPF prog-id=77 op=LOAD Sep 6 01:21:46.462000 audit[2312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2189 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562666238313862663338623463323765623235306165323162343664 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { bpf } for pid=2312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { bpf } for pid=2312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { perfmon } for pid=2312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { perfmon } for pid=2312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { perfmon } for pid=2312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { perfmon } for pid=2312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { perfmon } for pid=2312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { bpf } for pid=2312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { bpf } for pid=2312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit: BPF prog-id=78 op=LOAD Sep 6 01:21:46.462000 audit[2312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2189 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562666238313862663338623463323765623235306165323162343664 Sep 6 01:21:46.462000 audit: BPF prog-id=78 op=UNLOAD Sep 6 01:21:46.462000 audit: BPF prog-id=77 op=UNLOAD Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { bpf } for pid=2312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { bpf } for pid=2312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { bpf } for pid=2312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { perfmon } for pid=2312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { perfmon } for pid=2312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { perfmon } for pid=2312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { perfmon } for pid=2312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { perfmon } for pid=2312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { bpf } for pid=2312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit[2312]: AVC avc: denied { bpf } for pid=2312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:46.462000 audit: BPF prog-id=79 op=LOAD Sep 6 01:21:46.462000 audit[2312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2189 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:46.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562666238313862663338623463323765623235306165323162343664 Sep 6 01:21:46.500651 env[1445]: time="2025-09-06T01:21:46.500517625Z" level=info msg="StartContainer for \"5bfb818bf38b4c27eb250ae21b46d8a91528a7e49107eab74aff00da170fd844\" returns successfully" Sep 6 01:21:46.552096 kubelet[2092]: E0906 01:21:46.552062 2092 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-645ca388a2\" not found" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:46.566022 kubelet[2092]: E0906 01:21:46.565991 2092 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-645ca388a2\" not found" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:46.567787 kubelet[2092]: E0906 01:21:46.567754 2092 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-645ca388a2\" not found" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:46.681950 systemd[1]: run-containerd-runc-k8s.io-171714b1e947bd293e77996e35efbea03065877afc7a7ebae3edbda47edf9979-runc.6oLSqT.mount: Deactivated successfully. Sep 6 01:21:47.569353 kubelet[2092]: E0906 01:21:47.569311 2092 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-645ca388a2\" not found" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:47.570026 kubelet[2092]: E0906 01:21:47.570006 2092 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-645ca388a2\" not found" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:47.570403 kubelet[2092]: E0906 01:21:47.570380 2092 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-645ca388a2\" not found" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:47.676761 kubelet[2092]: I0906 01:21:47.676737 2092 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:48.570071 kubelet[2092]: E0906 01:21:48.570044 2092 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-645ca388a2\" not found" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:48.583000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522494 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:48.583000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4007abbc20 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:21:48.583000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:21:48.583000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:48.583000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40038263c0 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:21:48.583000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:21:48.584000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522490 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:48.584000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4007abbe30 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:21:48.584000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:21:48.615000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522496 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:48.615000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=66 a1=40048468d0 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:21:48.615000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:21:48.622000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:48.622000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=68 a1=4003cc1920 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:21:48.622000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:21:48.623000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522494 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:48.623000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=68 a1=40048471a0 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:21:48.623000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:21:48.765978 kubelet[2092]: E0906 01:21:48.765947 2092 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.8-n-645ca388a2\" not found" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:48.780423 kubelet[2092]: I0906 01:21:48.780389 2092 kubelet_node_status.go:78] "Successfully registered node" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:48.780580 kubelet[2092]: E0906 01:21:48.780566 2092 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"ci-3510.3.8-n-645ca388a2\": node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:48.853563 kubelet[2092]: E0906 01:21:48.853449 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:48.953840 kubelet[2092]: E0906 01:21:48.953792 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:49.054758 kubelet[2092]: E0906 01:21:49.054712 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:49.155782 kubelet[2092]: E0906 01:21:49.155669 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:49.256603 kubelet[2092]: E0906 01:21:49.256568 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:49.357714 kubelet[2092]: E0906 01:21:49.357679 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:49.458597 kubelet[2092]: E0906 01:21:49.458498 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:49.559270 kubelet[2092]: E0906 01:21:49.559238 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:49.660150 kubelet[2092]: E0906 01:21:49.660116 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:49.761160 kubelet[2092]: E0906 01:21:49.761062 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:49.861475 kubelet[2092]: E0906 01:21:49.861441 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:49.928000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522494 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:49.928000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000b4e030 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:21:49.928000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:21:49.928000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:49.928000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000488600 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:21:49.928000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:21:49.962242 kubelet[2092]: E0906 01:21:49.962208 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:50.063201 kubelet[2092]: E0906 01:21:50.063168 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:50.080286 kubelet[2092]: E0906 01:21:50.080243 2092 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-645ca388a2\" not found" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:50.164145 kubelet[2092]: E0906 01:21:50.164098 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:50.264675 kubelet[2092]: E0906 01:21:50.264636 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:50.365849 kubelet[2092]: E0906 01:21:50.365742 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:50.466251 kubelet[2092]: E0906 01:21:50.466218 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:50.567214 kubelet[2092]: E0906 01:21:50.567176 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:50.667955 kubelet[2092]: E0906 01:21:50.667856 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:50.768792 kubelet[2092]: E0906 01:21:50.768761 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:50.869863 kubelet[2092]: E0906 01:21:50.869819 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:50.970514 kubelet[2092]: E0906 01:21:50.970402 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:51.071432 kubelet[2092]: E0906 01:21:51.071388 2092 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:51.127466 kubelet[2092]: I0906 01:21:51.127429 2092 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:51.137481 systemd[1]: Reloading. Sep 6 01:21:51.142392 kubelet[2092]: I0906 01:21:51.142367 2092 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Sep 6 01:21:51.142895 kubelet[2092]: I0906 01:21:51.142876 2092 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:51.161764 kubelet[2092]: I0906 01:21:51.161437 2092 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Sep 6 01:21:51.161764 kubelet[2092]: I0906 01:21:51.161555 2092 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:51.171382 kubelet[2092]: I0906 01:21:51.171337 2092 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Sep 6 01:21:51.221940 /usr/lib/systemd/system-generators/torcx-generator[2397]: time="2025-09-06T01:21:51Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 6 01:21:51.222806 /usr/lib/systemd/system-generators/torcx-generator[2397]: time="2025-09-06T01:21:51Z" level=info msg="torcx already run" Sep 6 01:21:51.299330 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 6 01:21:51.299351 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 6 01:21:51.315238 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 6 01:21:51.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.419570 kernel: kauditd_printk_skb: 356 callbacks suppressed Sep 6 01:21:51.419695 kernel: audit: type=1400 audit(1757121711.394:544): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.419737 kernel: audit: type=1400 audit(1757121711.399:545): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.455079 kernel: audit: type=1400 audit(1757121711.399:546): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.473889 kernel: audit: type=1400 audit(1757121711.399:547): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.474002 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Sep 6 01:21:51.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.496896 kernel: audit: type=1400 audit(1757121711.399:548): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.496995 kernel: audit: audit_lost=35 audit_rate_limit=0 audit_backlog_limit=64 Sep 6 01:21:51.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.521319 kernel: audit: type=1400 audit(1757121711.399:549): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.521427 kernel: audit: backlog limit exceeded Sep 6 01:21:51.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.542974 kernel: audit: type=1400 audit(1757121711.399:550): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.399000 audit: BPF prog-id=80 op=LOAD Sep 6 01:21:51.399000 audit: BPF prog-id=41 op=UNLOAD Sep 6 01:21:51.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.418000 audit: BPF prog-id=81 op=LOAD Sep 6 01:21:51.418000 audit: BPF prog-id=64 op=UNLOAD Sep 6 01:21:51.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.436000 audit: BPF prog-id=82 op=LOAD Sep 6 01:21:51.436000 audit: BPF prog-id=42 op=UNLOAD Sep 6 01:21:51.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.454000 audit: BPF prog-id=83 op=LOAD Sep 6 01:21:51.454000 audit: BPF prog-id=43 op=UNLOAD Sep 6 01:21:51.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.473000 audit: BPF prog-id=84 op=LOAD Sep 6 01:21:51.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.473000 audit: BPF prog-id=85 op=LOAD Sep 6 01:21:51.473000 audit: BPF prog-id=44 op=UNLOAD Sep 6 01:21:51.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.542000 audit: BPF prog-id=47 op=UNLOAD Sep 6 01:21:51.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.542000 audit: BPF prog-id=89 op=LOAD Sep 6 01:21:51.542000 audit: BPF prog-id=76 op=UNLOAD Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit: BPF prog-id=90 op=LOAD Sep 6 01:21:51.543000 audit: BPF prog-id=49 op=UNLOAD Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit: BPF prog-id=91 op=LOAD Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit: BPF prog-id=92 op=LOAD Sep 6 01:21:51.543000 audit: BPF prog-id=50 op=UNLOAD Sep 6 01:21:51.543000 audit: BPF prog-id=51 op=UNLOAD Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.544000 audit: BPF prog-id=93 op=LOAD Sep 6 01:21:51.544000 audit: BPF prog-id=52 op=UNLOAD Sep 6 01:21:51.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.544000 audit: BPF prog-id=94 op=LOAD Sep 6 01:21:51.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.544000 audit: BPF prog-id=95 op=LOAD Sep 6 01:21:51.544000 audit: BPF prog-id=53 op=UNLOAD Sep 6 01:21:51.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.545000 audit: BPF prog-id=96 op=LOAD Sep 6 01:21:51.545000 audit: BPF prog-id=68 op=UNLOAD Sep 6 01:21:51.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.547000 audit: BPF prog-id=97 op=LOAD Sep 6 01:21:51.547000 audit: BPF prog-id=55 op=UNLOAD Sep 6 01:21:51.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.547000 audit: BPF prog-id=98 op=LOAD Sep 6 01:21:51.547000 audit: BPF prog-id=56 op=UNLOAD Sep 6 01:21:51.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.548000 audit: BPF prog-id=99 op=LOAD Sep 6 01:21:51.548000 audit: BPF prog-id=72 op=UNLOAD Sep 6 01:21:51.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.548000 audit: BPF prog-id=100 op=LOAD Sep 6 01:21:51.548000 audit: BPF prog-id=60 op=UNLOAD Sep 6 01:21:51.579185 systemd[1]: Stopping kubelet.service... Sep 6 01:21:51.609175 systemd[1]: kubelet.service: Deactivated successfully. Sep 6 01:21:51.609374 systemd[1]: Stopped kubelet.service. Sep 6 01:21:51.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:51.609435 systemd[1]: kubelet.service: Consumed 1.922s CPU time. Sep 6 01:21:51.611192 systemd[1]: Starting kubelet.service... Sep 6 01:21:51.767000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:21:51.768496 systemd[1]: Started kubelet.service. Sep 6 01:21:51.822944 kubelet[2462]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 01:21:51.822944 kubelet[2462]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 6 01:21:51.822944 kubelet[2462]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 6 01:21:51.823285 kubelet[2462]: I0906 01:21:51.822982 2462 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 6 01:21:51.838678 kubelet[2462]: I0906 01:21:51.838632 2462 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Sep 6 01:21:51.838678 kubelet[2462]: I0906 01:21:51.838666 2462 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 6 01:21:51.839052 kubelet[2462]: I0906 01:21:51.839025 2462 server.go:956] "Client rotation is on, will bootstrap in background" Sep 6 01:21:51.840908 kubelet[2462]: I0906 01:21:51.840886 2462 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Sep 6 01:21:51.844253 kubelet[2462]: I0906 01:21:51.844224 2462 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 6 01:21:51.851265 kubelet[2462]: E0906 01:21:51.851213 2462 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 6 01:21:51.851265 kubelet[2462]: I0906 01:21:51.851256 2462 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 6 01:21:51.854437 kubelet[2462]: I0906 01:21:51.854413 2462 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 6 01:21:51.854658 kubelet[2462]: I0906 01:21:51.854632 2462 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 6 01:21:51.854833 kubelet[2462]: I0906 01:21:51.854657 2462 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-645ca388a2","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 6 01:21:51.854910 kubelet[2462]: I0906 01:21:51.854841 2462 topology_manager.go:138] "Creating topology manager with none policy" Sep 6 01:21:51.854910 kubelet[2462]: I0906 01:21:51.854851 2462 container_manager_linux.go:303] "Creating device plugin manager" Sep 6 01:21:51.854910 kubelet[2462]: I0906 01:21:51.854892 2462 state_mem.go:36] "Initialized new in-memory state store" Sep 6 01:21:51.855035 kubelet[2462]: I0906 01:21:51.855021 2462 kubelet.go:480] "Attempting to sync node with API server" Sep 6 01:21:51.855067 kubelet[2462]: I0906 01:21:51.855039 2462 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 6 01:21:51.855067 kubelet[2462]: I0906 01:21:51.855061 2462 kubelet.go:386] "Adding apiserver pod source" Sep 6 01:21:51.855106 kubelet[2462]: I0906 01:21:51.855075 2462 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 6 01:21:51.857114 kubelet[2462]: I0906 01:21:51.857092 2462 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 6 01:21:51.857917 kubelet[2462]: I0906 01:21:51.857898 2462 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Sep 6 01:21:51.859687 kubelet[2462]: I0906 01:21:51.859672 2462 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 6 01:21:51.859824 kubelet[2462]: I0906 01:21:51.859813 2462 server.go:1289] "Started kubelet" Sep 6 01:21:51.859000 audit[2462]: AVC avc: denied { mac_admin } for pid=2462 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.859000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 01:21:51.859000 audit[2462]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b61530 a1=400048f488 a2=4000b61500 a3=25 items=0 ppid=1 pid=2462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:51.859000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 01:21:51.861845 kubelet[2462]: I0906 01:21:51.861820 2462 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 6 01:21:51.860000 audit[2462]: AVC avc: denied { mac_admin } for pid=2462 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.860000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 01:21:51.860000 audit[2462]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000654d80 a1=400048f4a0 a2=4000b615c0 a3=25 items=0 ppid=1 pid=2462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:51.860000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 01:21:51.862118 kubelet[2462]: I0906 01:21:51.862102 2462 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 6 01:21:51.862198 kubelet[2462]: I0906 01:21:51.862189 2462 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 6 01:21:51.869194 kubelet[2462]: I0906 01:21:51.869155 2462 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Sep 6 01:21:51.870559 kubelet[2462]: I0906 01:21:51.870534 2462 server.go:317] "Adding debug handlers to kubelet server" Sep 6 01:21:51.876880 kubelet[2462]: I0906 01:21:51.876827 2462 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 6 01:21:51.877191 kubelet[2462]: I0906 01:21:51.877178 2462 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 6 01:21:51.877491 kubelet[2462]: I0906 01:21:51.877476 2462 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 6 01:21:51.878607 kubelet[2462]: I0906 01:21:51.878576 2462 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 6 01:21:51.884618 kubelet[2462]: E0906 01:21:51.884567 2462 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-645ca388a2\" not found" Sep 6 01:21:51.895513 kubelet[2462]: I0906 01:21:51.895490 2462 factory.go:223] Registration of the systemd container factory successfully Sep 6 01:21:51.895781 kubelet[2462]: I0906 01:21:51.895757 2462 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 6 01:21:51.896130 kubelet[2462]: I0906 01:21:51.896115 2462 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 6 01:21:51.896327 kubelet[2462]: I0906 01:21:51.896317 2462 reconciler.go:26] "Reconciler: start to sync state" Sep 6 01:21:51.905219 kubelet[2462]: I0906 01:21:51.905176 2462 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Sep 6 01:21:51.906570 kubelet[2462]: I0906 01:21:51.906550 2462 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Sep 6 01:21:51.906693 kubelet[2462]: I0906 01:21:51.906682 2462 status_manager.go:230] "Starting to sync pod status with apiserver" Sep 6 01:21:51.906800 kubelet[2462]: I0906 01:21:51.906788 2462 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 6 01:21:51.906863 kubelet[2462]: I0906 01:21:51.906854 2462 kubelet.go:2436] "Starting kubelet main sync loop" Sep 6 01:21:51.906967 kubelet[2462]: E0906 01:21:51.906946 2462 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 6 01:21:51.910785 kubelet[2462]: I0906 01:21:51.910758 2462 factory.go:223] Registration of the containerd container factory successfully Sep 6 01:21:51.918078 kubelet[2462]: E0906 01:21:51.918043 2462 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 6 01:21:51.955254 kubelet[2462]: I0906 01:21:51.955095 2462 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 6 01:21:51.955254 kubelet[2462]: I0906 01:21:51.955115 2462 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 6 01:21:51.955254 kubelet[2462]: I0906 01:21:51.955136 2462 state_mem.go:36] "Initialized new in-memory state store" Sep 6 01:21:51.955254 kubelet[2462]: I0906 01:21:51.955262 2462 state_mem.go:88] "Updated default CPUSet" cpuSet="" Sep 6 01:21:51.955457 kubelet[2462]: I0906 01:21:51.955273 2462 state_mem.go:96] "Updated CPUSet assignments" assignments={} Sep 6 01:21:51.955457 kubelet[2462]: I0906 01:21:51.955290 2462 policy_none.go:49] "None policy: Start" Sep 6 01:21:51.955457 kubelet[2462]: I0906 01:21:51.955299 2462 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 6 01:21:51.955457 kubelet[2462]: I0906 01:21:51.955307 2462 state_mem.go:35] "Initializing new in-memory state store" Sep 6 01:21:51.955457 kubelet[2462]: I0906 01:21:51.955427 2462 state_mem.go:75] "Updated machine memory state" Sep 6 01:21:51.962439 kubelet[2462]: E0906 01:21:51.962414 2462 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Sep 6 01:21:51.963797 kubelet[2462]: E0906 01:21:51.963776 2462 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Sep 6 01:21:51.961000 audit[2462]: AVC avc: denied { mac_admin } for pid=2462 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:51.961000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 6 01:21:51.961000 audit[2462]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40011007b0 a1=40010fca50 a2=4001100780 a3=25 items=0 ppid=1 pid=2462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:51.961000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 6 01:21:51.966751 kubelet[2462]: I0906 01:21:51.966698 2462 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 6 01:21:51.966915 kubelet[2462]: I0906 01:21:51.966879 2462 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 6 01:21:51.967196 kubelet[2462]: I0906 01:21:51.967181 2462 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 6 01:21:51.967852 kubelet[2462]: E0906 01:21:51.967833 2462 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 6 01:21:52.008625 kubelet[2462]: I0906 01:21:52.008583 2462 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:52.008827 kubelet[2462]: I0906 01:21:52.008793 2462 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:52.013261 kubelet[2462]: I0906 01:21:52.010919 2462 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:52.024478 kubelet[2462]: I0906 01:21:52.022237 2462 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Sep 6 01:21:52.024716 kubelet[2462]: I0906 01:21:52.022432 2462 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Sep 6 01:21:52.024780 kubelet[2462]: E0906 01:21:52.024750 2462 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.8-n-645ca388a2\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:52.024804 kubelet[2462]: E0906 01:21:52.024695 2462 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.8-n-645ca388a2\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:52.024847 kubelet[2462]: I0906 01:21:52.022464 2462 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Sep 6 01:21:52.024847 kubelet[2462]: E0906 01:21:52.024837 2462 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ci-3510.3.8-n-645ca388a2\" already exists" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:52.069421 kubelet[2462]: I0906 01:21:52.069389 2462 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:52.083700 kubelet[2462]: I0906 01:21:52.083673 2462 kubelet_node_status.go:124] "Node was previously registered" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:52.083929 kubelet[2462]: I0906 01:21:52.083917 2462 kubelet_node_status.go:78] "Successfully registered node" node="ci-3510.3.8-n-645ca388a2" Sep 6 01:21:52.097020 kubelet[2462]: I0906 01:21:52.096987 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/68f25dab09e66ec207b61fc303d39eb2-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-645ca388a2\" (UID: \"68f25dab09e66ec207b61fc303d39eb2\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:52.097020 kubelet[2462]: I0906 01:21:52.097021 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/68f25dab09e66ec207b61fc303d39eb2-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-645ca388a2\" (UID: \"68f25dab09e66ec207b61fc303d39eb2\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:52.097180 kubelet[2462]: I0906 01:21:52.097039 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/4da48242196942d5ca6c19f38b89beb5-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-645ca388a2\" (UID: \"4da48242196942d5ca6c19f38b89beb5\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:52.097180 kubelet[2462]: I0906 01:21:52.097065 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/4da48242196942d5ca6c19f38b89beb5-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-645ca388a2\" (UID: \"4da48242196942d5ca6c19f38b89beb5\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:52.097180 kubelet[2462]: I0906 01:21:52.097085 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/739dbc3c0bfa65e80a5892e19ad04e0c-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-645ca388a2\" (UID: \"739dbc3c0bfa65e80a5892e19ad04e0c\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:52.097180 kubelet[2462]: I0906 01:21:52.097102 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/68f25dab09e66ec207b61fc303d39eb2-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-645ca388a2\" (UID: \"68f25dab09e66ec207b61fc303d39eb2\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:52.097180 kubelet[2462]: I0906 01:21:52.097116 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/4da48242196942d5ca6c19f38b89beb5-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-645ca388a2\" (UID: \"4da48242196942d5ca6c19f38b89beb5\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:52.097292 kubelet[2462]: I0906 01:21:52.097141 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/4da48242196942d5ca6c19f38b89beb5-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-645ca388a2\" (UID: \"4da48242196942d5ca6c19f38b89beb5\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:52.097292 kubelet[2462]: I0906 01:21:52.097163 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/4da48242196942d5ca6c19f38b89beb5-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-645ca388a2\" (UID: \"4da48242196942d5ca6c19f38b89beb5\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:52.856049 kubelet[2462]: I0906 01:21:52.856015 2462 apiserver.go:52] "Watching apiserver" Sep 6 01:21:52.897328 kubelet[2462]: I0906 01:21:52.897291 2462 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Sep 6 01:21:52.936000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:52.936000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400037a880 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:21:52.936000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:21:52.937000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:52.937000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400037aa40 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:21:52.937000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:21:52.937000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:52.937000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400037ac00 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:21:52.937000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:21:52.940000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:21:52.940000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40004885c0 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:21:52.940000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:21:52.943168 kubelet[2462]: I0906 01:21:52.943146 2462 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:52.951326 kubelet[2462]: I0906 01:21:52.951269 2462 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Sep 6 01:21:52.951442 kubelet[2462]: E0906 01:21:52.951337 2462 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.8-n-645ca388a2\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.8-n-645ca388a2" Sep 6 01:21:52.998579 kubelet[2462]: I0906 01:21:52.998514 2462 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-645ca388a2" podStartSLOduration=1.998487661 podStartE2EDuration="1.998487661s" podCreationTimestamp="2025-09-06 01:21:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 01:21:52.978619032 +0000 UTC m=+1.203006362" watchObservedRunningTime="2025-09-06 01:21:52.998487661 +0000 UTC m=+1.222874991" Sep 6 01:21:52.998793 kubelet[2462]: I0906 01:21:52.998633 2462 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.8-n-645ca388a2" podStartSLOduration=1.9986293819999998 podStartE2EDuration="1.998629382s" podCreationTimestamp="2025-09-06 01:21:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 01:21:52.998236301 +0000 UTC m=+1.222623631" watchObservedRunningTime="2025-09-06 01:21:52.998629382 +0000 UTC m=+1.223016712" Sep 6 01:21:53.647000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=522521 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 6 01:21:53.647000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400039ec40 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:21:53.647000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:21:57.631312 kubelet[2462]: I0906 01:21:57.631279 2462 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Sep 6 01:21:57.632253 env[1445]: time="2025-09-06T01:21:57.632211841Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Sep 6 01:21:57.632531 kubelet[2462]: I0906 01:21:57.632430 2462 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Sep 6 01:21:58.573436 kubelet[2462]: I0906 01:21:58.573362 2462 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.8-n-645ca388a2" podStartSLOduration=7.573343606 podStartE2EDuration="7.573343606s" podCreationTimestamp="2025-09-06 01:21:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 01:21:53.011979201 +0000 UTC m=+1.236366531" watchObservedRunningTime="2025-09-06 01:21:58.573343606 +0000 UTC m=+6.797730936" Sep 6 01:21:58.585816 systemd[1]: Created slice kubepods-besteffort-podb5b852f6_d8bd_4c8c_8bce_3548150b9c7e.slice. Sep 6 01:21:58.633163 kubelet[2462]: I0906 01:21:58.633102 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/b5b852f6-d8bd-4c8c-8bce-3548150b9c7e-kube-proxy\") pod \"kube-proxy-n9wbt\" (UID: \"b5b852f6-d8bd-4c8c-8bce-3548150b9c7e\") " pod="kube-system/kube-proxy-n9wbt" Sep 6 01:21:58.633163 kubelet[2462]: I0906 01:21:58.633157 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b5b852f6-d8bd-4c8c-8bce-3548150b9c7e-xtables-lock\") pod \"kube-proxy-n9wbt\" (UID: \"b5b852f6-d8bd-4c8c-8bce-3548150b9c7e\") " pod="kube-system/kube-proxy-n9wbt" Sep 6 01:21:58.633163 kubelet[2462]: I0906 01:21:58.633173 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b5b852f6-d8bd-4c8c-8bce-3548150b9c7e-lib-modules\") pod \"kube-proxy-n9wbt\" (UID: \"b5b852f6-d8bd-4c8c-8bce-3548150b9c7e\") " pod="kube-system/kube-proxy-n9wbt" Sep 6 01:21:58.633561 kubelet[2462]: I0906 01:21:58.633204 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pkkvm\" (UniqueName: \"kubernetes.io/projected/b5b852f6-d8bd-4c8c-8bce-3548150b9c7e-kube-api-access-pkkvm\") pod \"kube-proxy-n9wbt\" (UID: \"b5b852f6-d8bd-4c8c-8bce-3548150b9c7e\") " pod="kube-system/kube-proxy-n9wbt" Sep 6 01:21:58.742003 kubelet[2462]: I0906 01:21:58.741954 2462 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Sep 6 01:21:58.861244 systemd[1]: Created slice kubepods-besteffort-poda667dda4_f053_45fb_bca9_24d93852ace5.slice. Sep 6 01:21:58.895155 env[1445]: time="2025-09-06T01:21:58.894746747Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-n9wbt,Uid:b5b852f6-d8bd-4c8c-8bce-3548150b9c7e,Namespace:kube-system,Attempt:0,}" Sep 6 01:21:58.935111 kubelet[2462]: I0906 01:21:58.935067 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/a667dda4-f053-45fb-bca9-24d93852ace5-var-lib-calico\") pod \"tigera-operator-755d956888-4f7sd\" (UID: \"a667dda4-f053-45fb-bca9-24d93852ace5\") " pod="tigera-operator/tigera-operator-755d956888-4f7sd" Sep 6 01:21:58.935345 kubelet[2462]: I0906 01:21:58.935329 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-b7vsr\" (UniqueName: \"kubernetes.io/projected/a667dda4-f053-45fb-bca9-24d93852ace5-kube-api-access-b7vsr\") pod \"tigera-operator-755d956888-4f7sd\" (UID: \"a667dda4-f053-45fb-bca9-24d93852ace5\") " pod="tigera-operator/tigera-operator-755d956888-4f7sd" Sep 6 01:21:58.955379 env[1445]: time="2025-09-06T01:21:58.955295067Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:21:58.955581 env[1445]: time="2025-09-06T01:21:58.955361787Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:21:58.955671 env[1445]: time="2025-09-06T01:21:58.955561467Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:21:58.956049 env[1445]: time="2025-09-06T01:21:58.955979548Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9995e0a652e8b4506f3a8366221ca1339f108d8cbfe7cfce124f888d8702642a pid=2516 runtime=io.containerd.runc.v2 Sep 6 01:21:58.975814 systemd[1]: Started cri-containerd-9995e0a652e8b4506f3a8366221ca1339f108d8cbfe7cfce124f888d8702642a.scope. Sep 6 01:21:58.993764 kernel: kauditd_printk_skb: 325 callbacks suppressed Sep 6 01:21:58.993890 kernel: audit: type=1400 audit(1757121718.985:767): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:58.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:58.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.027881 kernel: audit: type=1400 audit(1757121718.985:768): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:58.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.045484 kernel: audit: type=1400 audit(1757121718.985:769): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.045592 kernel: audit: type=1400 audit(1757121718.985:770): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:58.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:58.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.083825 kernel: audit: type=1400 audit(1757121718.985:771): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:58.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.102644 kernel: audit: type=1400 audit(1757121718.985:772): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:58.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.122368 kernel: audit: type=1400 audit(1757121718.985:773): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:58.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.141377 kernel: audit: type=1400 audit(1757121718.985:774): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:58.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.160318 kernel: audit: type=1400 audit(1757121718.985:775): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:58.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.178320 kernel: audit: type=1400 audit(1757121718.991:776): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.179056 env[1445]: time="2025-09-06T01:21:59.179017916Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-4f7sd,Uid:a667dda4-f053-45fb-bca9-24d93852ace5,Namespace:tigera-operator,Attempt:0,}" Sep 6 01:21:58.991000 audit: BPF prog-id=101 op=LOAD Sep 6 01:21:59.009000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.009000 audit[2526]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2516 pid=2526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939393565306136353265386234353036663361383336363232316361 Sep 6 01:21:59.009000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.009000 audit[2526]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2516 pid=2526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939393565306136353265386234353036663361383336363232316361 Sep 6 01:21:59.009000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.009000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.009000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.009000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.009000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.009000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.009000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.009000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.009000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.009000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.009000 audit: BPF prog-id=102 op=LOAD Sep 6 01:21:59.009000 audit[2526]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2516 pid=2526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939393565306136353265386234353036663361383336363232316361 Sep 6 01:21:59.026000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.026000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.026000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.026000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.026000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.026000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.026000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.026000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.026000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.026000 audit: BPF prog-id=103 op=LOAD Sep 6 01:21:59.026000 audit[2526]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2516 pid=2526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.026000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939393565306136353265386234353036663361383336363232316361 Sep 6 01:21:59.044000 audit: BPF prog-id=103 op=UNLOAD Sep 6 01:21:59.044000 audit: BPF prog-id=102 op=UNLOAD Sep 6 01:21:59.044000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.044000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.044000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.044000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.044000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.044000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.044000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.044000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.044000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.044000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.044000 audit: BPF prog-id=104 op=LOAD Sep 6 01:21:59.044000 audit[2526]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2516 pid=2526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939393565306136353265386234353036663361383336363232316361 Sep 6 01:21:59.181420 env[1445]: time="2025-09-06T01:21:59.179388436Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-n9wbt,Uid:b5b852f6-d8bd-4c8c-8bce-3548150b9c7e,Namespace:kube-system,Attempt:0,} returns sandbox id \"9995e0a652e8b4506f3a8366221ca1339f108d8cbfe7cfce124f888d8702642a\"" Sep 6 01:21:59.190882 env[1445]: time="2025-09-06T01:21:59.190835091Z" level=info msg="CreateContainer within sandbox \"9995e0a652e8b4506f3a8366221ca1339f108d8cbfe7cfce124f888d8702642a\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Sep 6 01:21:59.271712 env[1445]: time="2025-09-06T01:21:59.266799508Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:21:59.271712 env[1445]: time="2025-09-06T01:21:59.266850709Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:21:59.271712 env[1445]: time="2025-09-06T01:21:59.266860789Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:21:59.271712 env[1445]: time="2025-09-06T01:21:59.267003549Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/abda6e7f3963df10f3e8e34f598cbc0a4341dc5d3dea18ae88cda0e5ee4a9473 pid=2556 runtime=io.containerd.runc.v2 Sep 6 01:21:59.276347 env[1445]: time="2025-09-06T01:21:59.276292081Z" level=info msg="CreateContainer within sandbox \"9995e0a652e8b4506f3a8366221ca1339f108d8cbfe7cfce124f888d8702642a\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"5ab14c013ccfb0a880cf9353a7f8f90ded43ccd09518edf687efbce9c0583d53\"" Sep 6 01:21:59.278433 env[1445]: time="2025-09-06T01:21:59.278390723Z" level=info msg="StartContainer for \"5ab14c013ccfb0a880cf9353a7f8f90ded43ccd09518edf687efbce9c0583d53\"" Sep 6 01:21:59.290297 systemd[1]: Started cri-containerd-abda6e7f3963df10f3e8e34f598cbc0a4341dc5d3dea18ae88cda0e5ee4a9473.scope. Sep 6 01:21:59.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.304000 audit: BPF prog-id=105 op=LOAD Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2556 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162646136653766333936336466313066336538653334663539386362 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2556 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162646136653766333936336466313066336538653334663539386362 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit: BPF prog-id=106 op=LOAD Sep 6 01:21:59.307000 audit[2568]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2556 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162646136653766333936336466313066336538653334663539386362 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit: BPF prog-id=107 op=LOAD Sep 6 01:21:59.307000 audit[2568]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2556 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162646136653766333936336466313066336538653334663539386362 Sep 6 01:21:59.307000 audit: BPF prog-id=107 op=UNLOAD Sep 6 01:21:59.307000 audit: BPF prog-id=106 op=UNLOAD Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.307000 audit: BPF prog-id=108 op=LOAD Sep 6 01:21:59.307000 audit[2568]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2556 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162646136653766333936336466313066336538653334663539386362 Sep 6 01:21:59.325875 systemd[1]: Started cri-containerd-5ab14c013ccfb0a880cf9353a7f8f90ded43ccd09518edf687efbce9c0583d53.scope. Sep 6 01:21:59.335650 env[1445]: time="2025-09-06T01:21:59.335598077Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-4f7sd,Uid:a667dda4-f053-45fb-bca9-24d93852ace5,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"abda6e7f3963df10f3e8e34f598cbc0a4341dc5d3dea18ae88cda0e5ee4a9473\"" Sep 6 01:21:59.340990 env[1445]: time="2025-09-06T01:21:59.340927324Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\"" Sep 6 01:21:59.348000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.348000 audit[2592]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2516 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561623134633031336363666230613838306366393335336137663866 Sep 6 01:21:59.349000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.349000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.349000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.349000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.349000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.349000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.349000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.349000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.349000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.349000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.349000 audit: BPF prog-id=109 op=LOAD Sep 6 01:21:59.349000 audit[2592]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2516 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.349000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561623134633031336363666230613838306366393335336137663866 Sep 6 01:21:59.350000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.350000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.350000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.350000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.350000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.350000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.350000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.350000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.350000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.350000 audit: BPF prog-id=110 op=LOAD Sep 6 01:21:59.350000 audit[2592]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2516 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.350000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561623134633031336363666230613838306366393335336137663866 Sep 6 01:21:59.350000 audit: BPF prog-id=110 op=UNLOAD Sep 6 01:21:59.350000 audit: BPF prog-id=109 op=UNLOAD Sep 6 01:21:59.350000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.350000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.350000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.350000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.350000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.350000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.350000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.350000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.350000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.350000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:21:59.350000 audit: BPF prog-id=111 op=LOAD Sep 6 01:21:59.350000 audit[2592]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2516 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.350000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561623134633031336363666230613838306366393335336137663866 Sep 6 01:21:59.380779 env[1445]: time="2025-09-06T01:21:59.379941414Z" level=info msg="StartContainer for \"5ab14c013ccfb0a880cf9353a7f8f90ded43ccd09518edf687efbce9c0583d53\" returns successfully" Sep 6 01:21:59.511000 audit[2662]: NETFILTER_CFG table=mangle:43 family=10 entries=1 op=nft_register_chain pid=2662 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.511000 audit[2662]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd9c04a40 a2=0 a3=1 items=0 ppid=2609 pid=2662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.511000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 6 01:21:59.513000 audit[2660]: NETFILTER_CFG table=mangle:44 family=2 entries=1 op=nft_register_chain pid=2660 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.513000 audit[2660]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd6932ef0 a2=0 a3=1 items=0 ppid=2609 pid=2660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.513000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 6 01:21:59.515000 audit[2666]: NETFILTER_CFG table=nat:45 family=2 entries=1 op=nft_register_chain pid=2666 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.515000 audit[2666]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffed87fa40 a2=0 a3=1 items=0 ppid=2609 pid=2666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.515000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 6 01:21:59.516000 audit[2665]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_chain pid=2665 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.516000 audit[2665]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe5dc7450 a2=0 a3=1 items=0 ppid=2609 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.516000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 6 01:21:59.517000 audit[2667]: NETFILTER_CFG table=filter:47 family=10 entries=1 op=nft_register_chain pid=2667 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.517000 audit[2667]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd1523ad0 a2=0 a3=1 items=0 ppid=2609 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.517000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 6 01:21:59.518000 audit[2668]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_chain pid=2668 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.518000 audit[2668]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff3724a70 a2=0 a3=1 items=0 ppid=2609 pid=2668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.518000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 6 01:21:59.616000 audit[2669]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2669 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.616000 audit[2669]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffffd637b80 a2=0 a3=1 items=0 ppid=2609 pid=2669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.616000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 6 01:21:59.620000 audit[2671]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2671 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.620000 audit[2671]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffcf701cd0 a2=0 a3=1 items=0 ppid=2609 pid=2671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.620000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Sep 6 01:21:59.624000 audit[2674]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2674 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.624000 audit[2674]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffee27e7a0 a2=0 a3=1 items=0 ppid=2609 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.624000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Sep 6 01:21:59.626000 audit[2675]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2675 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.626000 audit[2675]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeff35610 a2=0 a3=1 items=0 ppid=2609 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.626000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 6 01:21:59.628000 audit[2677]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2677 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.628000 audit[2677]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff9223620 a2=0 a3=1 items=0 ppid=2609 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.628000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 6 01:21:59.629000 audit[2678]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2678 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.629000 audit[2678]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff1b0ddc0 a2=0 a3=1 items=0 ppid=2609 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.629000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 6 01:21:59.633000 audit[2680]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2680 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.633000 audit[2680]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd08c81e0 a2=0 a3=1 items=0 ppid=2609 pid=2680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.633000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 6 01:21:59.636000 audit[2683]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2683 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.636000 audit[2683]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd737f7b0 a2=0 a3=1 items=0 ppid=2609 pid=2683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.636000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Sep 6 01:21:59.637000 audit[2684]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_chain pid=2684 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.637000 audit[2684]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc3f96fd0 a2=0 a3=1 items=0 ppid=2609 pid=2684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.637000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 6 01:21:59.640000 audit[2686]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_rule pid=2686 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.640000 audit[2686]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd02326b0 a2=0 a3=1 items=0 ppid=2609 pid=2686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.640000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 6 01:21:59.641000 audit[2687]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_chain pid=2687 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.641000 audit[2687]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff6559d80 a2=0 a3=1 items=0 ppid=2609 pid=2687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.641000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 6 01:21:59.643000 audit[2689]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2689 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.643000 audit[2689]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffece5470 a2=0 a3=1 items=0 ppid=2609 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.643000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 6 01:21:59.647000 audit[2692]: NETFILTER_CFG table=filter:61 family=2 entries=1 op=nft_register_rule pid=2692 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.647000 audit[2692]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcd861b70 a2=0 a3=1 items=0 ppid=2609 pid=2692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.647000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 6 01:21:59.651000 audit[2695]: NETFILTER_CFG table=filter:62 family=2 entries=1 op=nft_register_rule pid=2695 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.651000 audit[2695]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdc2aa170 a2=0 a3=1 items=0 ppid=2609 pid=2695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.651000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 6 01:21:59.652000 audit[2696]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_chain pid=2696 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.652000 audit[2696]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc7d00160 a2=0 a3=1 items=0 ppid=2609 pid=2696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.652000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 6 01:21:59.655000 audit[2698]: NETFILTER_CFG table=nat:64 family=2 entries=1 op=nft_register_rule pid=2698 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.655000 audit[2698]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffc9deb4d0 a2=0 a3=1 items=0 ppid=2609 pid=2698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.655000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 01:21:59.658000 audit[2701]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_rule pid=2701 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.658000 audit[2701]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd83e87a0 a2=0 a3=1 items=0 ppid=2609 pid=2701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.658000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 01:21:59.659000 audit[2702]: NETFILTER_CFG table=nat:66 family=2 entries=1 op=nft_register_chain pid=2702 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.659000 audit[2702]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc87610f0 a2=0 a3=1 items=0 ppid=2609 pid=2702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.659000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 6 01:21:59.662000 audit[2704]: NETFILTER_CFG table=nat:67 family=2 entries=1 op=nft_register_rule pid=2704 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 6 01:21:59.662000 audit[2704]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffedfe1b90 a2=0 a3=1 items=0 ppid=2609 pid=2704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.662000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 6 01:21:59.714000 audit[2710]: NETFILTER_CFG table=filter:68 family=2 entries=8 op=nft_register_rule pid=2710 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:21:59.714000 audit[2710]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe1f50ea0 a2=0 a3=1 items=0 ppid=2609 pid=2710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.714000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:21:59.741000 audit[2710]: NETFILTER_CFG table=nat:69 family=2 entries=14 op=nft_register_chain pid=2710 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:21:59.741000 audit[2710]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffe1f50ea0 a2=0 a3=1 items=0 ppid=2609 pid=2710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.741000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:21:59.749000 audit[2715]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2715 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.749000 audit[2715]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff5462580 a2=0 a3=1 items=0 ppid=2609 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.749000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 6 01:21:59.748717 systemd[1]: run-containerd-runc-k8s.io-9995e0a652e8b4506f3a8366221ca1339f108d8cbfe7cfce124f888d8702642a-runc.ijXmFd.mount: Deactivated successfully. Sep 6 01:21:59.759000 audit[2717]: NETFILTER_CFG table=filter:71 family=10 entries=2 op=nft_register_chain pid=2717 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.759000 audit[2717]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc8d51790 a2=0 a3=1 items=0 ppid=2609 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.759000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Sep 6 01:21:59.763000 audit[2720]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2720 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.763000 audit[2720]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc9cc9c80 a2=0 a3=1 items=0 ppid=2609 pid=2720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.763000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Sep 6 01:21:59.765000 audit[2721]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2721 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.765000 audit[2721]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffca6ee6c0 a2=0 a3=1 items=0 ppid=2609 pid=2721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.765000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 6 01:21:59.767000 audit[2723]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2723 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.767000 audit[2723]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffc2900a0 a2=0 a3=1 items=0 ppid=2609 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.767000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 6 01:21:59.768000 audit[2724]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2724 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.768000 audit[2724]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc1185ad0 a2=0 a3=1 items=0 ppid=2609 pid=2724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.768000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 6 01:21:59.772000 audit[2726]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2726 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.772000 audit[2726]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffeeb110a0 a2=0 a3=1 items=0 ppid=2609 pid=2726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.772000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Sep 6 01:21:59.775000 audit[2729]: NETFILTER_CFG table=filter:77 family=10 entries=2 op=nft_register_chain pid=2729 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.775000 audit[2729]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffc012b3d0 a2=0 a3=1 items=0 ppid=2609 pid=2729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.775000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 6 01:21:59.776000 audit[2730]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_chain pid=2730 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.776000 audit[2730]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff7e3eba0 a2=0 a3=1 items=0 ppid=2609 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.776000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 6 01:21:59.778000 audit[2732]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_rule pid=2732 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.778000 audit[2732]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc3b63b00 a2=0 a3=1 items=0 ppid=2609 pid=2732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.778000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 6 01:21:59.779000 audit[2733]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_chain pid=2733 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.779000 audit[2733]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd18d1a00 a2=0 a3=1 items=0 ppid=2609 pid=2733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.779000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 6 01:21:59.781000 audit[2735]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2735 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.781000 audit[2735]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcd28e6f0 a2=0 a3=1 items=0 ppid=2609 pid=2735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.781000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 6 01:21:59.784000 audit[2738]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_rule pid=2738 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.784000 audit[2738]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe63ec870 a2=0 a3=1 items=0 ppid=2609 pid=2738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.784000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 6 01:21:59.788000 audit[2741]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=2741 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.788000 audit[2741]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff26fc7d0 a2=0 a3=1 items=0 ppid=2609 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.788000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Sep 6 01:21:59.790000 audit[2742]: NETFILTER_CFG table=nat:84 family=10 entries=1 op=nft_register_chain pid=2742 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.790000 audit[2742]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffb9008c0 a2=0 a3=1 items=0 ppid=2609 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.790000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 6 01:21:59.792000 audit[2744]: NETFILTER_CFG table=nat:85 family=10 entries=2 op=nft_register_chain pid=2744 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.792000 audit[2744]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffee8589b0 a2=0 a3=1 items=0 ppid=2609 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.792000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 01:21:59.795000 audit[2747]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=2747 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.795000 audit[2747]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffea14f2e0 a2=0 a3=1 items=0 ppid=2609 pid=2747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.795000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 6 01:21:59.797000 audit[2748]: NETFILTER_CFG table=nat:87 family=10 entries=1 op=nft_register_chain pid=2748 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.797000 audit[2748]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd94486d0 a2=0 a3=1 items=0 ppid=2609 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.797000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 6 01:21:59.799000 audit[2750]: NETFILTER_CFG table=nat:88 family=10 entries=2 op=nft_register_chain pid=2750 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.799000 audit[2750]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffc07c9900 a2=0 a3=1 items=0 ppid=2609 pid=2750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.799000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 6 01:21:59.800000 audit[2751]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=2751 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.800000 audit[2751]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc719a140 a2=0 a3=1 items=0 ppid=2609 pid=2751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.800000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 6 01:21:59.802000 audit[2753]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=2753 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.802000 audit[2753]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffeca58480 a2=0 a3=1 items=0 ppid=2609 pid=2753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.802000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 01:21:59.805000 audit[2756]: NETFILTER_CFG table=filter:91 family=10 entries=1 op=nft_register_rule pid=2756 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 6 01:21:59.805000 audit[2756]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff1a6fbe0 a2=0 a3=1 items=0 ppid=2609 pid=2756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.805000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 6 01:21:59.808000 audit[2758]: NETFILTER_CFG table=filter:92 family=10 entries=3 op=nft_register_rule pid=2758 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 6 01:21:59.808000 audit[2758]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffc7525500 a2=0 a3=1 items=0 ppid=2609 pid=2758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.808000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:21:59.808000 audit[2758]: NETFILTER_CFG table=nat:93 family=10 entries=7 op=nft_register_chain pid=2758 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 6 01:21:59.808000 audit[2758]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffc7525500 a2=0 a3=1 items=0 ppid=2609 pid=2758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:21:59.808000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:21:59.975335 kubelet[2462]: I0906 01:21:59.975181 2462 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-n9wbt" podStartSLOduration=1.9751618990000002 podStartE2EDuration="1.975161899s" podCreationTimestamp="2025-09-06 01:21:58 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 01:21:59.974099857 +0000 UTC m=+8.198487187" watchObservedRunningTime="2025-09-06 01:21:59.975161899 +0000 UTC m=+8.199549189" Sep 6 01:22:01.421842 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount973855515.mount: Deactivated successfully. Sep 6 01:22:02.088715 env[1445]: time="2025-09-06T01:22:02.087995011Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:02.101750 env[1445]: time="2025-09-06T01:22:02.101663948Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:02.109776 env[1445]: time="2025-09-06T01:22:02.109717357Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:02.117103 env[1445]: time="2025-09-06T01:22:02.117059686Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:00a7a9b62f9b9a4e0856128b078539783b8352b07f707bff595cb604cc580f6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:02.117857 env[1445]: time="2025-09-06T01:22:02.117822647Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\" returns image reference \"sha256:dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f\"" Sep 6 01:22:02.127790 env[1445]: time="2025-09-06T01:22:02.127702339Z" level=info msg="CreateContainer within sandbox \"abda6e7f3963df10f3e8e34f598cbc0a4341dc5d3dea18ae88cda0e5ee4a9473\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Sep 6 01:22:02.156503 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1968137135.mount: Deactivated successfully. Sep 6 01:22:02.185961 env[1445]: time="2025-09-06T01:22:02.185912730Z" level=info msg="CreateContainer within sandbox \"abda6e7f3963df10f3e8e34f598cbc0a4341dc5d3dea18ae88cda0e5ee4a9473\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"a51a02e967825c885587eec93b160d1a4bbffc7fe852b4b9685380dd47e4b4b0\"" Sep 6 01:22:02.186742 env[1445]: time="2025-09-06T01:22:02.186698930Z" level=info msg="StartContainer for \"a51a02e967825c885587eec93b160d1a4bbffc7fe852b4b9685380dd47e4b4b0\"" Sep 6 01:22:02.207086 systemd[1]: Started cri-containerd-a51a02e967825c885587eec93b160d1a4bbffc7fe852b4b9685380dd47e4b4b0.scope. Sep 6 01:22:02.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.219000 audit: BPF prog-id=112 op=LOAD Sep 6 01:22:02.220000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.220000 audit[2767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2556 pid=2767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:02.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135316130326539363738323563383835353837656563393362313630 Sep 6 01:22:02.220000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.220000 audit[2767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2556 pid=2767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:02.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135316130326539363738323563383835353837656563393362313630 Sep 6 01:22:02.221000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.221000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.221000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.221000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.221000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.221000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.221000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.221000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.221000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.221000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.221000 audit: BPF prog-id=113 op=LOAD Sep 6 01:22:02.221000 audit[2767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2556 pid=2767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:02.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135316130326539363738323563383835353837656563393362313630 Sep 6 01:22:02.221000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.221000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.221000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.221000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.221000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.221000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.221000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.221000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.221000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.221000 audit: BPF prog-id=114 op=LOAD Sep 6 01:22:02.221000 audit[2767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2556 pid=2767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:02.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135316130326539363738323563383835353837656563393362313630 Sep 6 01:22:02.222000 audit: BPF prog-id=114 op=UNLOAD Sep 6 01:22:02.222000 audit: BPF prog-id=113 op=UNLOAD Sep 6 01:22:02.222000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.222000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.222000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.222000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.222000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.222000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.222000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.222000 audit[2767]: AVC avc: denied { perfmon } for pid=2767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.222000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.222000 audit[2767]: AVC avc: denied { bpf } for pid=2767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:02.222000 audit: BPF prog-id=115 op=LOAD Sep 6 01:22:02.222000 audit[2767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2556 pid=2767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:02.222000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135316130326539363738323563383835353837656563393362313630 Sep 6 01:22:02.248014 env[1445]: time="2025-09-06T01:22:02.247966645Z" level=info msg="StartContainer for \"a51a02e967825c885587eec93b160d1a4bbffc7fe852b4b9685380dd47e4b4b0\" returns successfully" Sep 6 01:22:02.382690 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3585681042.mount: Deactivated successfully. Sep 6 01:22:08.173000 audit[1767]: USER_END pid=1767 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:22:08.175104 sudo[1767]: pam_unix(sudo:session): session closed for user root Sep 6 01:22:08.180644 kernel: kauditd_printk_skb: 357 callbacks suppressed Sep 6 01:22:08.180740 kernel: audit: type=1106 audit(1757121728.173:878): pid=1767 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:22:08.173000 audit[1767]: CRED_DISP pid=1767 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:22:08.227700 kernel: audit: type=1104 audit(1757121728.173:879): pid=1767 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 6 01:22:08.261668 sshd[1764]: pam_unix(sshd:session): session closed for user core Sep 6 01:22:08.260000 audit[1764]: USER_END pid=1764 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:08.276110 systemd[1]: sshd@6-10.200.20.17:22-10.200.16.10:55218.service: Deactivated successfully. Sep 6 01:22:08.277872 systemd[1]: session-9.scope: Deactivated successfully. Sep 6 01:22:08.278033 systemd[1]: session-9.scope: Consumed 6.717s CPU time. Sep 6 01:22:08.278920 systemd-logind[1436]: Session 9 logged out. Waiting for processes to exit. Sep 6 01:22:08.280098 systemd-logind[1436]: Removed session 9. Sep 6 01:22:08.260000 audit[1764]: CRED_DISP pid=1764 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:08.317175 kernel: audit: type=1106 audit(1757121728.260:880): pid=1764 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:08.317295 kernel: audit: type=1104 audit(1757121728.260:881): pid=1764 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:22:08.274000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.17:22-10.200.16.10:55218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:08.341873 kernel: audit: type=1131 audit(1757121728.274:882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.17:22-10.200.16.10:55218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:22:10.514000 audit[2838]: NETFILTER_CFG table=filter:94 family=2 entries=15 op=nft_register_rule pid=2838 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:10.514000 audit[2838]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffff742fca0 a2=0 a3=1 items=0 ppid=2609 pid=2838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:10.570940 kernel: audit: type=1325 audit(1757121730.514:883): table=filter:94 family=2 entries=15 op=nft_register_rule pid=2838 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:10.571078 kernel: audit: type=1300 audit(1757121730.514:883): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffff742fca0 a2=0 a3=1 items=0 ppid=2609 pid=2838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:10.514000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:10.586921 kernel: audit: type=1327 audit(1757121730.514:883): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:10.534000 audit[2838]: NETFILTER_CFG table=nat:95 family=2 entries=12 op=nft_register_rule pid=2838 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:10.608134 kernel: audit: type=1325 audit(1757121730.534:884): table=nat:95 family=2 entries=12 op=nft_register_rule pid=2838 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:10.534000 audit[2838]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff742fca0 a2=0 a3=1 items=0 ppid=2609 pid=2838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:10.646986 kernel: audit: type=1300 audit(1757121730.534:884): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff742fca0 a2=0 a3=1 items=0 ppid=2609 pid=2838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:10.534000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:10.679000 audit[2840]: NETFILTER_CFG table=filter:96 family=2 entries=16 op=nft_register_rule pid=2840 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:10.679000 audit[2840]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffcae2e0d0 a2=0 a3=1 items=0 ppid=2609 pid=2840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:10.679000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:10.683000 audit[2840]: NETFILTER_CFG table=nat:97 family=2 entries=12 op=nft_register_rule pid=2840 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:10.683000 audit[2840]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcae2e0d0 a2=0 a3=1 items=0 ppid=2609 pid=2840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:10.683000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:15.044000 audit[2842]: NETFILTER_CFG table=filter:98 family=2 entries=17 op=nft_register_rule pid=2842 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:15.051270 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 6 01:22:15.051377 kernel: audit: type=1325 audit(1757121735.044:887): table=filter:98 family=2 entries=17 op=nft_register_rule pid=2842 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:15.044000 audit[2842]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff7b283d0 a2=0 a3=1 items=0 ppid=2609 pid=2842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:15.103010 kernel: audit: type=1300 audit(1757121735.044:887): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff7b283d0 a2=0 a3=1 items=0 ppid=2609 pid=2842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:15.044000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:15.120175 kernel: audit: type=1327 audit(1757121735.044:887): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:15.070000 audit[2842]: NETFILTER_CFG table=nat:99 family=2 entries=12 op=nft_register_rule pid=2842 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:15.136554 kernel: audit: type=1325 audit(1757121735.070:888): table=nat:99 family=2 entries=12 op=nft_register_rule pid=2842 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:15.070000 audit[2842]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff7b283d0 a2=0 a3=1 items=0 ppid=2609 pid=2842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:15.164184 kernel: audit: type=1300 audit(1757121735.070:888): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff7b283d0 a2=0 a3=1 items=0 ppid=2609 pid=2842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:15.070000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:15.180116 kernel: audit: type=1327 audit(1757121735.070:888): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:15.184000 audit[2844]: NETFILTER_CFG table=filter:100 family=2 entries=18 op=nft_register_rule pid=2844 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:15.204758 kernel: audit: type=1325 audit(1757121735.184:889): table=filter:100 family=2 entries=18 op=nft_register_rule pid=2844 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:15.184000 audit[2844]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffeddacb30 a2=0 a3=1 items=0 ppid=2609 pid=2844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:15.184000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:15.249501 kernel: audit: type=1300 audit(1757121735.184:889): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffeddacb30 a2=0 a3=1 items=0 ppid=2609 pid=2844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:15.249634 kernel: audit: type=1327 audit(1757121735.184:889): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:15.207000 audit[2844]: NETFILTER_CFG table=nat:101 family=2 entries=12 op=nft_register_rule pid=2844 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:15.265008 kernel: audit: type=1325 audit(1757121735.207:890): table=nat:101 family=2 entries=12 op=nft_register_rule pid=2844 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:15.207000 audit[2844]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffeddacb30 a2=0 a3=1 items=0 ppid=2609 pid=2844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:15.207000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:15.289150 kubelet[2462]: I0906 01:22:15.289064 2462 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-755d956888-4f7sd" podStartSLOduration=14.508432548 podStartE2EDuration="17.289049476s" podCreationTimestamp="2025-09-06 01:21:58 +0000 UTC" firstStartedPulling="2025-09-06 01:21:59.33822128 +0000 UTC m=+7.562608610" lastFinishedPulling="2025-09-06 01:22:02.118838208 +0000 UTC m=+10.343225538" observedRunningTime="2025-09-06 01:22:02.981854613 +0000 UTC m=+11.206241943" watchObservedRunningTime="2025-09-06 01:22:15.289049476 +0000 UTC m=+23.513436806" Sep 6 01:22:15.303922 systemd[1]: Created slice kubepods-besteffort-pod7fcdd97b_ca23_4155_8b38_803c7a052690.slice. Sep 6 01:22:15.350934 kubelet[2462]: I0906 01:22:15.350888 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7fcdd97b-ca23-4155-8b38-803c7a052690-tigera-ca-bundle\") pod \"calico-typha-565888d556-xq6r7\" (UID: \"7fcdd97b-ca23-4155-8b38-803c7a052690\") " pod="calico-system/calico-typha-565888d556-xq6r7" Sep 6 01:22:15.350934 kubelet[2462]: I0906 01:22:15.350935 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9dw8w\" (UniqueName: \"kubernetes.io/projected/7fcdd97b-ca23-4155-8b38-803c7a052690-kube-api-access-9dw8w\") pod \"calico-typha-565888d556-xq6r7\" (UID: \"7fcdd97b-ca23-4155-8b38-803c7a052690\") " pod="calico-system/calico-typha-565888d556-xq6r7" Sep 6 01:22:15.351117 kubelet[2462]: I0906 01:22:15.350953 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/7fcdd97b-ca23-4155-8b38-803c7a052690-typha-certs\") pod \"calico-typha-565888d556-xq6r7\" (UID: \"7fcdd97b-ca23-4155-8b38-803c7a052690\") " pod="calico-system/calico-typha-565888d556-xq6r7" Sep 6 01:22:15.468026 systemd[1]: Created slice kubepods-besteffort-pod9296eecb_eb2e_48ab_8a67_ac2396eafb1a.slice. Sep 6 01:22:15.553149 kubelet[2462]: I0906 01:22:15.553102 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/9296eecb-eb2e-48ab-8a67-ac2396eafb1a-cni-bin-dir\") pod \"calico-node-2g66b\" (UID: \"9296eecb-eb2e-48ab-8a67-ac2396eafb1a\") " pod="calico-system/calico-node-2g66b" Sep 6 01:22:15.553333 kubelet[2462]: I0906 01:22:15.553317 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/9296eecb-eb2e-48ab-8a67-ac2396eafb1a-cni-net-dir\") pod \"calico-node-2g66b\" (UID: \"9296eecb-eb2e-48ab-8a67-ac2396eafb1a\") " pod="calico-system/calico-node-2g66b" Sep 6 01:22:15.553458 kubelet[2462]: I0906 01:22:15.553445 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/9296eecb-eb2e-48ab-8a67-ac2396eafb1a-policysync\") pod \"calico-node-2g66b\" (UID: \"9296eecb-eb2e-48ab-8a67-ac2396eafb1a\") " pod="calico-system/calico-node-2g66b" Sep 6 01:22:15.553569 kubelet[2462]: I0906 01:22:15.553551 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pkbls\" (UniqueName: \"kubernetes.io/projected/9296eecb-eb2e-48ab-8a67-ac2396eafb1a-kube-api-access-pkbls\") pod \"calico-node-2g66b\" (UID: \"9296eecb-eb2e-48ab-8a67-ac2396eafb1a\") " pod="calico-system/calico-node-2g66b" Sep 6 01:22:15.553661 kubelet[2462]: I0906 01:22:15.553648 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/9296eecb-eb2e-48ab-8a67-ac2396eafb1a-cni-log-dir\") pod \"calico-node-2g66b\" (UID: \"9296eecb-eb2e-48ab-8a67-ac2396eafb1a\") " pod="calico-system/calico-node-2g66b" Sep 6 01:22:15.553767 kubelet[2462]: I0906 01:22:15.553753 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/9296eecb-eb2e-48ab-8a67-ac2396eafb1a-flexvol-driver-host\") pod \"calico-node-2g66b\" (UID: \"9296eecb-eb2e-48ab-8a67-ac2396eafb1a\") " pod="calico-system/calico-node-2g66b" Sep 6 01:22:15.553873 kubelet[2462]: I0906 01:22:15.553857 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9296eecb-eb2e-48ab-8a67-ac2396eafb1a-lib-modules\") pod \"calico-node-2g66b\" (UID: \"9296eecb-eb2e-48ab-8a67-ac2396eafb1a\") " pod="calico-system/calico-node-2g66b" Sep 6 01:22:15.553971 kubelet[2462]: I0906 01:22:15.553959 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/9296eecb-eb2e-48ab-8a67-ac2396eafb1a-node-certs\") pod \"calico-node-2g66b\" (UID: \"9296eecb-eb2e-48ab-8a67-ac2396eafb1a\") " pod="calico-system/calico-node-2g66b" Sep 6 01:22:15.554059 kubelet[2462]: I0906 01:22:15.554047 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/9296eecb-eb2e-48ab-8a67-ac2396eafb1a-var-lib-calico\") pod \"calico-node-2g66b\" (UID: \"9296eecb-eb2e-48ab-8a67-ac2396eafb1a\") " pod="calico-system/calico-node-2g66b" Sep 6 01:22:15.554241 kubelet[2462]: I0906 01:22:15.554147 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/9296eecb-eb2e-48ab-8a67-ac2396eafb1a-var-run-calico\") pod \"calico-node-2g66b\" (UID: \"9296eecb-eb2e-48ab-8a67-ac2396eafb1a\") " pod="calico-system/calico-node-2g66b" Sep 6 01:22:15.554374 kubelet[2462]: I0906 01:22:15.554328 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/9296eecb-eb2e-48ab-8a67-ac2396eafb1a-tigera-ca-bundle\") pod \"calico-node-2g66b\" (UID: \"9296eecb-eb2e-48ab-8a67-ac2396eafb1a\") " pod="calico-system/calico-node-2g66b" Sep 6 01:22:15.554517 kubelet[2462]: I0906 01:22:15.554493 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9296eecb-eb2e-48ab-8a67-ac2396eafb1a-xtables-lock\") pod \"calico-node-2g66b\" (UID: \"9296eecb-eb2e-48ab-8a67-ac2396eafb1a\") " pod="calico-system/calico-node-2g66b" Sep 6 01:22:15.577899 kubelet[2462]: E0906 01:22:15.577848 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-cjzts" podUID="8a374bc2-d94e-4f60-8980-ac3f72dfea23" Sep 6 01:22:15.612441 env[1445]: time="2025-09-06T01:22:15.612390746Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-565888d556-xq6r7,Uid:7fcdd97b-ca23-4155-8b38-803c7a052690,Namespace:calico-system,Attempt:0,}" Sep 6 01:22:15.655911 kubelet[2462]: I0906 01:22:15.655861 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/8a374bc2-d94e-4f60-8980-ac3f72dfea23-kubelet-dir\") pod \"csi-node-driver-cjzts\" (UID: \"8a374bc2-d94e-4f60-8980-ac3f72dfea23\") " pod="calico-system/csi-node-driver-cjzts" Sep 6 01:22:15.656078 kubelet[2462]: I0906 01:22:15.655930 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/8a374bc2-d94e-4f60-8980-ac3f72dfea23-registration-dir\") pod \"csi-node-driver-cjzts\" (UID: \"8a374bc2-d94e-4f60-8980-ac3f72dfea23\") " pod="calico-system/csi-node-driver-cjzts" Sep 6 01:22:15.656078 kubelet[2462]: I0906 01:22:15.655985 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/8a374bc2-d94e-4f60-8980-ac3f72dfea23-socket-dir\") pod \"csi-node-driver-cjzts\" (UID: \"8a374bc2-d94e-4f60-8980-ac3f72dfea23\") " pod="calico-system/csi-node-driver-cjzts" Sep 6 01:22:15.656078 kubelet[2462]: I0906 01:22:15.656002 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/8a374bc2-d94e-4f60-8980-ac3f72dfea23-varrun\") pod \"csi-node-driver-cjzts\" (UID: \"8a374bc2-d94e-4f60-8980-ac3f72dfea23\") " pod="calico-system/csi-node-driver-cjzts" Sep 6 01:22:15.656078 kubelet[2462]: I0906 01:22:15.656032 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-86wcs\" (UniqueName: \"kubernetes.io/projected/8a374bc2-d94e-4f60-8980-ac3f72dfea23-kube-api-access-86wcs\") pod \"csi-node-driver-cjzts\" (UID: \"8a374bc2-d94e-4f60-8980-ac3f72dfea23\") " pod="calico-system/csi-node-driver-cjzts" Sep 6 01:22:15.664039 kubelet[2462]: E0906 01:22:15.664002 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.665055 kubelet[2462]: W0906 01:22:15.664994 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.665113 kubelet[2462]: E0906 01:22:15.665088 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.704132 env[1445]: time="2025-09-06T01:22:15.704041193Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:15.704132 env[1445]: time="2025-09-06T01:22:15.704083993Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:15.704132 env[1445]: time="2025-09-06T01:22:15.704093993Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:15.704558 env[1445]: time="2025-09-06T01:22:15.704512954Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cd3f0e90ae987283b0f295a77838aa39a5e60e05005e714418706bdd1e90cc02 pid=2857 runtime=io.containerd.runc.v2 Sep 6 01:22:15.707511 kubelet[2462]: E0906 01:22:15.707473 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.707511 kubelet[2462]: W0906 01:22:15.707503 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.707632 kubelet[2462]: E0906 01:22:15.707524 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.720631 systemd[1]: Started cri-containerd-cd3f0e90ae987283b0f295a77838aa39a5e60e05005e714418706bdd1e90cc02.scope. Sep 6 01:22:15.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit: BPF prog-id=116 op=LOAD Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { bpf } for pid=2866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2857 pid=2866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:15.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364336630653930616539383732383362306632393561373738333861 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { perfmon } for pid=2866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2857 pid=2866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:15.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364336630653930616539383732383362306632393561373738333861 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { bpf } for pid=2866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { bpf } for pid=2866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { bpf } for pid=2866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { perfmon } for pid=2866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { perfmon } for pid=2866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { perfmon } for pid=2866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { perfmon } for pid=2866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { perfmon } for pid=2866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { bpf } for pid=2866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { bpf } for pid=2866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit: BPF prog-id=117 op=LOAD Sep 6 01:22:15.736000 audit[2866]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2857 pid=2866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:15.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364336630653930616539383732383362306632393561373738333861 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { bpf } for pid=2866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { bpf } for pid=2866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { perfmon } for pid=2866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { perfmon } for pid=2866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { perfmon } for pid=2866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { perfmon } for pid=2866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { perfmon } for pid=2866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { bpf } for pid=2866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { bpf } for pid=2866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit: BPF prog-id=118 op=LOAD Sep 6 01:22:15.736000 audit[2866]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2857 pid=2866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:15.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364336630653930616539383732383362306632393561373738333861 Sep 6 01:22:15.736000 audit: BPF prog-id=118 op=UNLOAD Sep 6 01:22:15.736000 audit: BPF prog-id=117 op=UNLOAD Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { bpf } for pid=2866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { bpf } for pid=2866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { bpf } for pid=2866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { perfmon } for pid=2866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { perfmon } for pid=2866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { perfmon } for pid=2866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { perfmon } for pid=2866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { perfmon } for pid=2866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { bpf } for pid=2866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit[2866]: AVC avc: denied { bpf } for pid=2866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.736000 audit: BPF prog-id=119 op=LOAD Sep 6 01:22:15.736000 audit[2866]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2857 pid=2866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:15.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364336630653930616539383732383362306632393561373738333861 Sep 6 01:22:15.756913 kubelet[2462]: E0906 01:22:15.756879 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.756913 kubelet[2462]: W0906 01:22:15.756913 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.757087 kubelet[2462]: E0906 01:22:15.756933 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.757229 kubelet[2462]: E0906 01:22:15.757206 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.757229 kubelet[2462]: W0906 01:22:15.757228 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.757296 kubelet[2462]: E0906 01:22:15.757239 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.757444 kubelet[2462]: E0906 01:22:15.757423 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.757444 kubelet[2462]: W0906 01:22:15.757439 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.757512 kubelet[2462]: E0906 01:22:15.757448 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.757632 kubelet[2462]: E0906 01:22:15.757612 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.757632 kubelet[2462]: W0906 01:22:15.757625 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.757695 kubelet[2462]: E0906 01:22:15.757635 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.757937 kubelet[2462]: E0906 01:22:15.757919 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.757937 kubelet[2462]: W0906 01:22:15.757934 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.758026 kubelet[2462]: E0906 01:22:15.757944 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.758164 kubelet[2462]: E0906 01:22:15.758126 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.758164 kubelet[2462]: W0906 01:22:15.758140 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.758164 kubelet[2462]: E0906 01:22:15.758149 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.758377 kubelet[2462]: E0906 01:22:15.758357 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.758377 kubelet[2462]: W0906 01:22:15.758372 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.758455 kubelet[2462]: E0906 01:22:15.758381 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.758565 kubelet[2462]: E0906 01:22:15.758548 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.758565 kubelet[2462]: W0906 01:22:15.758562 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.758620 kubelet[2462]: E0906 01:22:15.758571 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.758794 kubelet[2462]: E0906 01:22:15.758778 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.758794 kubelet[2462]: W0906 01:22:15.758791 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.758873 kubelet[2462]: E0906 01:22:15.758800 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.759108 kubelet[2462]: E0906 01:22:15.759007 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.759108 kubelet[2462]: W0906 01:22:15.759021 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.759108 kubelet[2462]: E0906 01:22:15.759029 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.759331 kubelet[2462]: E0906 01:22:15.759315 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.759331 kubelet[2462]: W0906 01:22:15.759328 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.759406 kubelet[2462]: E0906 01:22:15.759337 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.759608 kubelet[2462]: E0906 01:22:15.759506 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.759608 kubelet[2462]: W0906 01:22:15.759519 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.759608 kubelet[2462]: E0906 01:22:15.759537 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.759866 kubelet[2462]: E0906 01:22:15.759849 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.759866 kubelet[2462]: W0906 01:22:15.759863 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.759947 kubelet[2462]: E0906 01:22:15.759874 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.760512 kubelet[2462]: E0906 01:22:15.760042 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.760512 kubelet[2462]: W0906 01:22:15.760054 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.760512 kubelet[2462]: E0906 01:22:15.760063 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.760692 kubelet[2462]: E0906 01:22:15.760671 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.760692 kubelet[2462]: W0906 01:22:15.760688 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.760764 kubelet[2462]: E0906 01:22:15.760700 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.761402 kubelet[2462]: E0906 01:22:15.761061 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.761402 kubelet[2462]: W0906 01:22:15.761079 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.761402 kubelet[2462]: E0906 01:22:15.761089 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.762199 kubelet[2462]: E0906 01:22:15.762171 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.762280 kubelet[2462]: W0906 01:22:15.762191 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.762280 kubelet[2462]: E0906 01:22:15.762216 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.762854 kubelet[2462]: E0906 01:22:15.762412 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.762854 kubelet[2462]: W0906 01:22:15.762431 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.762854 kubelet[2462]: E0906 01:22:15.762440 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.763044 kubelet[2462]: E0906 01:22:15.763016 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.763044 kubelet[2462]: W0906 01:22:15.763033 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.763118 kubelet[2462]: E0906 01:22:15.763045 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.763377 kubelet[2462]: E0906 01:22:15.763225 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.763377 kubelet[2462]: W0906 01:22:15.763237 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.763377 kubelet[2462]: E0906 01:22:15.763247 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.763973 kubelet[2462]: E0906 01:22:15.763928 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.763973 kubelet[2462]: W0906 01:22:15.763953 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.763973 kubelet[2462]: E0906 01:22:15.763965 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.767761 kubelet[2462]: E0906 01:22:15.764135 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.767761 kubelet[2462]: W0906 01:22:15.764149 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.767761 kubelet[2462]: E0906 01:22:15.764158 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.768301 kubelet[2462]: E0906 01:22:15.768119 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.768301 kubelet[2462]: W0906 01:22:15.768137 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.768301 kubelet[2462]: E0906 01:22:15.768165 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.768647 kubelet[2462]: E0906 01:22:15.768489 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.768647 kubelet[2462]: W0906 01:22:15.768501 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.768647 kubelet[2462]: E0906 01:22:15.768511 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.768873 kubelet[2462]: E0906 01:22:15.768822 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.768873 kubelet[2462]: W0906 01:22:15.768833 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.768873 kubelet[2462]: E0906 01:22:15.768843 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.771543 env[1445]: time="2025-09-06T01:22:15.771505058Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-2g66b,Uid:9296eecb-eb2e-48ab-8a67-ac2396eafb1a,Namespace:calico-system,Attempt:0,}" Sep 6 01:22:15.772420 env[1445]: time="2025-09-06T01:22:15.772183098Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-565888d556-xq6r7,Uid:7fcdd97b-ca23-4155-8b38-803c7a052690,Namespace:calico-system,Attempt:0,} returns sandbox id \"cd3f0e90ae987283b0f295a77838aa39a5e60e05005e714418706bdd1e90cc02\"" Sep 6 01:22:15.779681 env[1445]: time="2025-09-06T01:22:15.779647586Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\"" Sep 6 01:22:15.785930 kubelet[2462]: E0906 01:22:15.785903 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:15.786103 kubelet[2462]: W0906 01:22:15.786087 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:15.786198 kubelet[2462]: E0906 01:22:15.786182 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:15.867866 env[1445]: time="2025-09-06T01:22:15.866897429Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:15.867866 env[1445]: time="2025-09-06T01:22:15.866938109Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:15.867866 env[1445]: time="2025-09-06T01:22:15.866948349Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:15.867866 env[1445]: time="2025-09-06T01:22:15.867045949Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6f1afeee853f92af5bd0de9fa4fe4fd1cb648eeae1fe5805b673d4ff229d6413 pid=2924 runtime=io.containerd.runc.v2 Sep 6 01:22:15.884807 systemd[1]: Started cri-containerd-6f1afeee853f92af5bd0de9fa4fe4fd1cb648eeae1fe5805b673d4ff229d6413.scope. Sep 6 01:22:15.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.899000 audit: BPF prog-id=120 op=LOAD Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=2924 pid=2931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:15.900000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666316166656565383533663932616635626430646539666134666534 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2924 pid=2931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:15.900000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666316166656565383533663932616635626430646539666134666534 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit: BPF prog-id=121 op=LOAD Sep 6 01:22:15.900000 audit[2931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2924 pid=2931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:15.900000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666316166656565383533663932616635626430646539666134666534 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit: BPF prog-id=122 op=LOAD Sep 6 01:22:15.900000 audit[2931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2924 pid=2931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:15.900000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666316166656565383533663932616635626430646539666134666534 Sep 6 01:22:15.900000 audit: BPF prog-id=122 op=UNLOAD Sep 6 01:22:15.900000 audit: BPF prog-id=121 op=UNLOAD Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { perfmon } for pid=2931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit[2931]: AVC avc: denied { bpf } for pid=2931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:15.900000 audit: BPF prog-id=123 op=LOAD Sep 6 01:22:15.900000 audit[2931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2924 pid=2931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:15.900000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666316166656565383533663932616635626430646539666134666534 Sep 6 01:22:15.922021 env[1445]: time="2025-09-06T01:22:15.921958202Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-2g66b,Uid:9296eecb-eb2e-48ab-8a67-ac2396eafb1a,Namespace:calico-system,Attempt:0,} returns sandbox id \"6f1afeee853f92af5bd0de9fa4fe4fd1cb648eeae1fe5805b673d4ff229d6413\"" Sep 6 01:22:16.262000 audit[2961]: NETFILTER_CFG table=filter:102 family=2 entries=20 op=nft_register_rule pid=2961 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:16.262000 audit[2961]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffeb523570 a2=0 a3=1 items=0 ppid=2609 pid=2961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:16.262000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:16.267000 audit[2961]: NETFILTER_CFG table=nat:103 family=2 entries=12 op=nft_register_rule pid=2961 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:16.267000 audit[2961]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffeb523570 a2=0 a3=1 items=0 ppid=2609 pid=2961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:16.267000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:16.907334 kubelet[2462]: E0906 01:22:16.907284 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-cjzts" podUID="8a374bc2-d94e-4f60-8980-ac3f72dfea23" Sep 6 01:22:17.090592 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount762599202.mount: Deactivated successfully. Sep 6 01:22:18.416833 env[1445]: time="2025-09-06T01:22:18.416170242Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:18.429584 env[1445]: time="2025-09-06T01:22:18.429538214Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6a1496fdc48cc0b9ab3c10aef777497484efac5df9efbfbbdf9775e9583645cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:18.436980 env[1445]: time="2025-09-06T01:22:18.436928901Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:18.446974 env[1445]: time="2025-09-06T01:22:18.446933950Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:f4a3d61ffda9c98a53adeb412c5af404ca3727a3cc2d0b4ef28d197bdd47ecaa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:18.447357 env[1445]: time="2025-09-06T01:22:18.447325790Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\" returns image reference \"sha256:6a1496fdc48cc0b9ab3c10aef777497484efac5df9efbfbbdf9775e9583645cb\"" Sep 6 01:22:18.449099 env[1445]: time="2025-09-06T01:22:18.449055472Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\"" Sep 6 01:22:18.473196 env[1445]: time="2025-09-06T01:22:18.473152894Z" level=info msg="CreateContainer within sandbox \"cd3f0e90ae987283b0f295a77838aa39a5e60e05005e714418706bdd1e90cc02\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Sep 6 01:22:18.558433 env[1445]: time="2025-09-06T01:22:18.558384451Z" level=info msg="CreateContainer within sandbox \"cd3f0e90ae987283b0f295a77838aa39a5e60e05005e714418706bdd1e90cc02\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"5e852d5856665f20864582287458024a892cb7b3e8538dc1cd53db4773a61557\"" Sep 6 01:22:18.558908 env[1445]: time="2025-09-06T01:22:18.558870212Z" level=info msg="StartContainer for \"5e852d5856665f20864582287458024a892cb7b3e8538dc1cd53db4773a61557\"" Sep 6 01:22:18.589699 systemd[1]: Started cri-containerd-5e852d5856665f20864582287458024a892cb7b3e8538dc1cd53db4773a61557.scope. Sep 6 01:22:18.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit: BPF prog-id=124 op=LOAD Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { bpf } for pid=2973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2857 pid=2973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:18.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565383532643538353636363566323038363435383232383734353830 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { perfmon } for pid=2973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2857 pid=2973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:18.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565383532643538353636363566323038363435383232383734353830 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { bpf } for pid=2973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { bpf } for pid=2973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { bpf } for pid=2973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { perfmon } for pid=2973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { perfmon } for pid=2973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { perfmon } for pid=2973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { perfmon } for pid=2973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { perfmon } for pid=2973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { bpf } for pid=2973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { bpf } for pid=2973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit: BPF prog-id=125 op=LOAD Sep 6 01:22:18.601000 audit[2973]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2857 pid=2973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:18.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565383532643538353636363566323038363435383232383734353830 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { bpf } for pid=2973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { bpf } for pid=2973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { perfmon } for pid=2973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { perfmon } for pid=2973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { perfmon } for pid=2973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { perfmon } for pid=2973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { perfmon } for pid=2973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { bpf } for pid=2973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { bpf } for pid=2973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit: BPF prog-id=126 op=LOAD Sep 6 01:22:18.601000 audit[2973]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2857 pid=2973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:18.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565383532643538353636363566323038363435383232383734353830 Sep 6 01:22:18.601000 audit: BPF prog-id=126 op=UNLOAD Sep 6 01:22:18.601000 audit: BPF prog-id=125 op=UNLOAD Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { bpf } for pid=2973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { bpf } for pid=2973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { bpf } for pid=2973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { perfmon } for pid=2973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { perfmon } for pid=2973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { perfmon } for pid=2973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { perfmon } for pid=2973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { perfmon } for pid=2973 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { bpf } for pid=2973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit[2973]: AVC avc: denied { bpf } for pid=2973 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:18.601000 audit: BPF prog-id=127 op=LOAD Sep 6 01:22:18.601000 audit[2973]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2857 pid=2973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:18.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565383532643538353636363566323038363435383232383734353830 Sep 6 01:22:18.638484 env[1445]: time="2025-09-06T01:22:18.638440604Z" level=info msg="StartContainer for \"5e852d5856665f20864582287458024a892cb7b3e8538dc1cd53db4773a61557\" returns successfully" Sep 6 01:22:18.907671 kubelet[2462]: E0906 01:22:18.907602 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-cjzts" podUID="8a374bc2-d94e-4f60-8980-ac3f72dfea23" Sep 6 01:22:19.061312 kubelet[2462]: E0906 01:22:19.061276 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.061312 kubelet[2462]: W0906 01:22:19.061304 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.061312 kubelet[2462]: E0906 01:22:19.061324 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.061514 kubelet[2462]: E0906 01:22:19.061478 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.061514 kubelet[2462]: W0906 01:22:19.061485 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.061563 kubelet[2462]: E0906 01:22:19.061518 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.061714 kubelet[2462]: E0906 01:22:19.061696 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.061714 kubelet[2462]: W0906 01:22:19.061710 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.061807 kubelet[2462]: E0906 01:22:19.061735 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.061904 kubelet[2462]: E0906 01:22:19.061883 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.061904 kubelet[2462]: W0906 01:22:19.061898 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.061972 kubelet[2462]: E0906 01:22:19.061907 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.062110 kubelet[2462]: E0906 01:22:19.062093 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.062110 kubelet[2462]: W0906 01:22:19.062106 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.062189 kubelet[2462]: E0906 01:22:19.062115 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.062265 kubelet[2462]: E0906 01:22:19.062247 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.062265 kubelet[2462]: W0906 01:22:19.062260 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.062334 kubelet[2462]: E0906 01:22:19.062268 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.062475 kubelet[2462]: E0906 01:22:19.062458 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.062475 kubelet[2462]: W0906 01:22:19.062471 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.062556 kubelet[2462]: E0906 01:22:19.062479 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.062629 kubelet[2462]: E0906 01:22:19.062610 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.062629 kubelet[2462]: W0906 01:22:19.062624 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.062697 kubelet[2462]: E0906 01:22:19.062633 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.062835 kubelet[2462]: E0906 01:22:19.062818 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.062835 kubelet[2462]: W0906 01:22:19.062832 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.062910 kubelet[2462]: E0906 01:22:19.062841 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.063046 kubelet[2462]: E0906 01:22:19.063031 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.063046 kubelet[2462]: W0906 01:22:19.063043 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.063125 kubelet[2462]: E0906 01:22:19.063050 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.063187 kubelet[2462]: E0906 01:22:19.063169 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.063187 kubelet[2462]: W0906 01:22:19.063181 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.063261 kubelet[2462]: E0906 01:22:19.063189 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.063400 kubelet[2462]: E0906 01:22:19.063384 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.063400 kubelet[2462]: W0906 01:22:19.063397 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.063478 kubelet[2462]: E0906 01:22:19.063405 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.063559 kubelet[2462]: E0906 01:22:19.063541 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.063559 kubelet[2462]: W0906 01:22:19.063554 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.063627 kubelet[2462]: E0906 01:22:19.063562 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.063784 kubelet[2462]: E0906 01:22:19.063767 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.063784 kubelet[2462]: W0906 01:22:19.063779 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.063864 kubelet[2462]: E0906 01:22:19.063788 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.063929 kubelet[2462]: E0906 01:22:19.063911 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.063929 kubelet[2462]: W0906 01:22:19.063925 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.064000 kubelet[2462]: E0906 01:22:19.063933 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.080444 kubelet[2462]: E0906 01:22:19.080411 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.080444 kubelet[2462]: W0906 01:22:19.080437 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.080625 kubelet[2462]: E0906 01:22:19.080455 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.080801 kubelet[2462]: E0906 01:22:19.080783 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.080801 kubelet[2462]: W0906 01:22:19.080799 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.084464 kubelet[2462]: E0906 01:22:19.080810 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.084464 kubelet[2462]: E0906 01:22:19.081051 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.084464 kubelet[2462]: W0906 01:22:19.081061 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.084464 kubelet[2462]: E0906 01:22:19.081072 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.084464 kubelet[2462]: E0906 01:22:19.081298 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.084464 kubelet[2462]: W0906 01:22:19.081312 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.084464 kubelet[2462]: E0906 01:22:19.081324 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.084464 kubelet[2462]: E0906 01:22:19.081498 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.084464 kubelet[2462]: W0906 01:22:19.081506 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.084464 kubelet[2462]: E0906 01:22:19.081515 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.084691 kubelet[2462]: E0906 01:22:19.081670 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.084691 kubelet[2462]: W0906 01:22:19.081679 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.084691 kubelet[2462]: E0906 01:22:19.081687 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.084691 kubelet[2462]: E0906 01:22:19.081884 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.084691 kubelet[2462]: W0906 01:22:19.081893 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.084691 kubelet[2462]: E0906 01:22:19.081906 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.084691 kubelet[2462]: E0906 01:22:19.082146 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.084691 kubelet[2462]: W0906 01:22:19.082160 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.084691 kubelet[2462]: E0906 01:22:19.082172 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.084691 kubelet[2462]: E0906 01:22:19.082374 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.084953 kubelet[2462]: W0906 01:22:19.082384 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.084953 kubelet[2462]: E0906 01:22:19.082395 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.084953 kubelet[2462]: E0906 01:22:19.082555 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.084953 kubelet[2462]: W0906 01:22:19.082569 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.084953 kubelet[2462]: E0906 01:22:19.082580 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.084953 kubelet[2462]: E0906 01:22:19.082773 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.084953 kubelet[2462]: W0906 01:22:19.082782 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.084953 kubelet[2462]: E0906 01:22:19.082792 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.084953 kubelet[2462]: E0906 01:22:19.083017 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.084953 kubelet[2462]: W0906 01:22:19.083028 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.085164 kubelet[2462]: E0906 01:22:19.083038 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.085164 kubelet[2462]: E0906 01:22:19.083229 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.085164 kubelet[2462]: W0906 01:22:19.083238 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.085164 kubelet[2462]: E0906 01:22:19.083247 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.085164 kubelet[2462]: E0906 01:22:19.083392 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.085164 kubelet[2462]: W0906 01:22:19.083400 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.085164 kubelet[2462]: E0906 01:22:19.083409 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.085164 kubelet[2462]: E0906 01:22:19.083545 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.085164 kubelet[2462]: W0906 01:22:19.083554 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.085164 kubelet[2462]: E0906 01:22:19.083562 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.085371 kubelet[2462]: E0906 01:22:19.083751 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.085371 kubelet[2462]: W0906 01:22:19.083759 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.085371 kubelet[2462]: E0906 01:22:19.083768 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.085371 kubelet[2462]: E0906 01:22:19.084074 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.085371 kubelet[2462]: W0906 01:22:19.084084 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.085371 kubelet[2462]: E0906 01:22:19.084094 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.085371 kubelet[2462]: E0906 01:22:19.084230 2462 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 6 01:22:19.085371 kubelet[2462]: W0906 01:22:19.084237 2462 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 6 01:22:19.085371 kubelet[2462]: E0906 01:22:19.084245 2462 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 6 01:22:19.827428 env[1445]: time="2025-09-06T01:22:19.827351436Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:19.837178 env[1445]: time="2025-09-06T01:22:19.837116564Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:29e6f31ad72882b1b817dd257df6b7981e4d7d31d872b7fe2cf102c6e2af27a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:19.843896 env[1445]: time="2025-09-06T01:22:19.843857410Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:19.850053 env[1445]: time="2025-09-06T01:22:19.850010056Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:81bdfcd9dbd36624dc35354e8c181c75631ba40e6c7df5820f5f56cea36f0ef9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:19.850846 env[1445]: time="2025-09-06T01:22:19.850817137Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\" returns image reference \"sha256:29e6f31ad72882b1b817dd257df6b7981e4d7d31d872b7fe2cf102c6e2af27a5\"" Sep 6 01:22:19.861523 env[1445]: time="2025-09-06T01:22:19.861481306Z" level=info msg="CreateContainer within sandbox \"6f1afeee853f92af5bd0de9fa4fe4fd1cb648eeae1fe5805b673d4ff229d6413\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Sep 6 01:22:19.913917 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount596979133.mount: Deactivated successfully. Sep 6 01:22:19.936754 env[1445]: time="2025-09-06T01:22:19.936687934Z" level=info msg="CreateContainer within sandbox \"6f1afeee853f92af5bd0de9fa4fe4fd1cb648eeae1fe5805b673d4ff229d6413\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"0b0f8f81e6f266d0e3613a7d115c073294d45efe1bbe41caa8a70d989ee29b37\"" Sep 6 01:22:19.938376 env[1445]: time="2025-09-06T01:22:19.938327935Z" level=info msg="StartContainer for \"0b0f8f81e6f266d0e3613a7d115c073294d45efe1bbe41caa8a70d989ee29b37\"" Sep 6 01:22:19.966508 systemd[1]: Started cri-containerd-0b0f8f81e6f266d0e3613a7d115c073294d45efe1bbe41caa8a70d989ee29b37.scope. Sep 6 01:22:19.983000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.983000 audit[3045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2924 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:19.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062306638663831653666323636643065333631336137643131356330 Sep 6 01:22:19.983000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.983000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.983000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.983000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.983000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.983000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.983000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.983000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.983000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.983000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.983000 audit: BPF prog-id=128 op=LOAD Sep 6 01:22:19.983000 audit[3045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2924 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:19.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062306638663831653666323636643065333631336137643131356330 Sep 6 01:22:19.984000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.984000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.984000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.984000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.984000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.984000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.984000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.984000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.984000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.984000 audit: BPF prog-id=129 op=LOAD Sep 6 01:22:19.984000 audit[3045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2924 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:19.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062306638663831653666323636643065333631336137643131356330 Sep 6 01:22:19.984000 audit: BPF prog-id=129 op=UNLOAD Sep 6 01:22:19.984000 audit: BPF prog-id=128 op=UNLOAD Sep 6 01:22:19.984000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.984000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.984000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.984000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.984000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.984000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.984000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.984000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.984000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.984000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:19.984000 audit: BPF prog-id=130 op=LOAD Sep 6 01:22:19.984000 audit[3045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2924 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:19.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062306638663831653666323636643065333631336137643131356330 Sep 6 01:22:20.006326 env[1445]: time="2025-09-06T01:22:20.006247636Z" level=info msg="StartContainer for \"0b0f8f81e6f266d0e3613a7d115c073294d45efe1bbe41caa8a70d989ee29b37\" returns successfully" Sep 6 01:22:20.011006 kubelet[2462]: I0906 01:22:20.010153 2462 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 01:22:20.010338 systemd[1]: cri-containerd-0b0f8f81e6f266d0e3613a7d115c073294d45efe1bbe41caa8a70d989ee29b37.scope: Deactivated successfully. Sep 6 01:22:20.013000 audit: BPF prog-id=130 op=UNLOAD Sep 6 01:22:20.040754 kubelet[2462]: I0906 01:22:20.040537 2462 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-565888d556-xq6r7" podStartSLOduration=2.3709907 podStartE2EDuration="5.040522666s" podCreationTimestamp="2025-09-06 01:22:15 +0000 UTC" firstStartedPulling="2025-09-06 01:22:15.779122145 +0000 UTC m=+24.003509475" lastFinishedPulling="2025-09-06 01:22:18.448654111 +0000 UTC m=+26.673041441" observedRunningTime="2025-09-06 01:22:19.012927985 +0000 UTC m=+27.237315315" watchObservedRunningTime="2025-09-06 01:22:20.040522666 +0000 UTC m=+28.264909956" Sep 6 01:22:20.454388 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0b0f8f81e6f266d0e3613a7d115c073294d45efe1bbe41caa8a70d989ee29b37-rootfs.mount: Deactivated successfully. Sep 6 01:22:20.907855 kubelet[2462]: E0906 01:22:20.907810 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-cjzts" podUID="8a374bc2-d94e-4f60-8980-ac3f72dfea23" Sep 6 01:22:21.072159 env[1445]: time="2025-09-06T01:22:21.072004736Z" level=info msg="shim disconnected" id=0b0f8f81e6f266d0e3613a7d115c073294d45efe1bbe41caa8a70d989ee29b37 Sep 6 01:22:21.072159 env[1445]: time="2025-09-06T01:22:21.072050496Z" level=warning msg="cleaning up after shim disconnected" id=0b0f8f81e6f266d0e3613a7d115c073294d45efe1bbe41caa8a70d989ee29b37 namespace=k8s.io Sep 6 01:22:21.072159 env[1445]: time="2025-09-06T01:22:21.072059976Z" level=info msg="cleaning up dead shim" Sep 6 01:22:21.079298 env[1445]: time="2025-09-06T01:22:21.079235703Z" level=warning msg="cleanup warnings time=\"2025-09-06T01:22:21Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3087 runtime=io.containerd.runc.v2\n" Sep 6 01:22:22.017123 env[1445]: time="2025-09-06T01:22:22.017050838Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\"" Sep 6 01:22:22.908186 kubelet[2462]: E0906 01:22:22.907806 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-cjzts" podUID="8a374bc2-d94e-4f60-8980-ac3f72dfea23" Sep 6 01:22:24.776521 env[1445]: time="2025-09-06T01:22:24.776467892Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:24.788916 env[1445]: time="2025-09-06T01:22:24.788881382Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7077a1dc632ee598cbfa626f9e3c9bca5b20c0d1e1e557995890125b2e8d2e23,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:24.792741 env[1445]: time="2025-09-06T01:22:24.792661065Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:24.798008 env[1445]: time="2025-09-06T01:22:24.797976990Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:73d1e391050490d54e5bee8ff2b1a50a8be1746c98dc530361b00e8c0ab63f87,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:24.798635 env[1445]: time="2025-09-06T01:22:24.798606790Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\" returns image reference \"sha256:7077a1dc632ee598cbfa626f9e3c9bca5b20c0d1e1e557995890125b2e8d2e23\"" Sep 6 01:22:24.812177 env[1445]: time="2025-09-06T01:22:24.812144202Z" level=info msg="CreateContainer within sandbox \"6f1afeee853f92af5bd0de9fa4fe4fd1cb648eeae1fe5805b673d4ff229d6413\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Sep 6 01:22:24.850628 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3730441260.mount: Deactivated successfully. Sep 6 01:22:24.875753 env[1445]: time="2025-09-06T01:22:24.875696215Z" level=info msg="CreateContainer within sandbox \"6f1afeee853f92af5bd0de9fa4fe4fd1cb648eeae1fe5805b673d4ff229d6413\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"ce1fec38e82e77ffbfbea077a5faed3a30a6980ef0463ed7f720522609867ea8\"" Sep 6 01:22:24.876566 env[1445]: time="2025-09-06T01:22:24.876429695Z" level=info msg="StartContainer for \"ce1fec38e82e77ffbfbea077a5faed3a30a6980ef0463ed7f720522609867ea8\"" Sep 6 01:22:24.901953 systemd[1]: run-containerd-runc-k8s.io-ce1fec38e82e77ffbfbea077a5faed3a30a6980ef0463ed7f720522609867ea8-runc.2ufQap.mount: Deactivated successfully. Sep 6 01:22:24.906093 systemd[1]: Started cri-containerd-ce1fec38e82e77ffbfbea077a5faed3a30a6980ef0463ed7f720522609867ea8.scope. Sep 6 01:22:24.908310 kubelet[2462]: E0906 01:22:24.907203 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-cjzts" podUID="8a374bc2-d94e-4f60-8980-ac3f72dfea23" Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.930923 kernel: kauditd_printk_skb: 223 callbacks suppressed Sep 6 01:22:24.931071 kernel: audit: type=1400 audit(1757121744.923:954): avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2924 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:24.976441 kernel: audit: type=1300 audit(1757121744.923:954): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2924 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:24.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365316665633338653832653737666662666265613037376135666165 Sep 6 01:22:25.001544 kernel: audit: type=1327 audit(1757121744.923:954): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365316665633338653832653737666662666265613037376135666165 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { bpf } for pid=3108 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:25.021668 kernel: audit: type=1400 audit(1757121744.923:955): avc: denied { bpf } for pid=3108 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:25.022631 kernel: audit: type=1400 audit(1757121744.923:955): avc: denied { bpf } for pid=3108 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { bpf } for pid=3108 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { bpf } for pid=3108 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:25.060875 kernel: audit: type=1400 audit(1757121744.923:955): avc: denied { bpf } for pid=3108 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:25.079187 kernel: audit: type=1400 audit(1757121744.923:955): avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:25.097550 kernel: audit: type=1400 audit(1757121744.923:955): avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:25.116568 kernel: audit: type=1400 audit(1757121744.923:955): avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:25.134549 kernel: audit: type=1400 audit(1757121744.923:955): avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { bpf } for pid=3108 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { bpf } for pid=3108 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit: BPF prog-id=131 op=LOAD Sep 6 01:22:24.923000 audit[3108]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2924 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:24.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365316665633338653832653737666662666265613037376135666165 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { bpf } for pid=3108 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { bpf } for pid=3108 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { bpf } for pid=3108 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { bpf } for pid=3108 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit: BPF prog-id=132 op=LOAD Sep 6 01:22:24.923000 audit[3108]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2924 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:24.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365316665633338653832653737666662666265613037376135666165 Sep 6 01:22:24.923000 audit: BPF prog-id=132 op=UNLOAD Sep 6 01:22:24.923000 audit: BPF prog-id=131 op=UNLOAD Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { bpf } for pid=3108 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { bpf } for pid=3108 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { bpf } for pid=3108 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { bpf } for pid=3108 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit[3108]: AVC avc: denied { bpf } for pid=3108 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:24.923000 audit: BPF prog-id=133 op=LOAD Sep 6 01:22:24.923000 audit[3108]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2924 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:24.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365316665633338653832653737666662666265613037376135666165 Sep 6 01:22:25.136511 env[1445]: time="2025-09-06T01:22:25.136468550Z" level=info msg="StartContainer for \"ce1fec38e82e77ffbfbea077a5faed3a30a6980ef0463ed7f720522609867ea8\" returns successfully" Sep 6 01:22:26.357366 env[1445]: time="2025-09-06T01:22:26.357301588Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 6 01:22:26.359874 systemd[1]: cri-containerd-ce1fec38e82e77ffbfbea077a5faed3a30a6980ef0463ed7f720522609867ea8.scope: Deactivated successfully. Sep 6 01:22:26.362000 audit: BPF prog-id=133 op=UNLOAD Sep 6 01:22:26.378893 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ce1fec38e82e77ffbfbea077a5faed3a30a6980ef0463ed7f720522609867ea8-rootfs.mount: Deactivated successfully. Sep 6 01:22:26.396595 kubelet[2462]: I0906 01:22:26.396560 2462 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Sep 6 01:22:27.225813 kubelet[2462]: I0906 01:22:27.225757 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fd6bb\" (UniqueName: \"kubernetes.io/projected/bd32de34-d0d2-42a3-9930-aa9a894cc0ac-kube-api-access-fd6bb\") pod \"coredns-674b8bbfcf-wd2qh\" (UID: \"bd32de34-d0d2-42a3-9930-aa9a894cc0ac\") " pod="kube-system/coredns-674b8bbfcf-wd2qh" Sep 6 01:22:27.225970 kubelet[2462]: I0906 01:22:27.225828 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/bd32de34-d0d2-42a3-9930-aa9a894cc0ac-config-volume\") pod \"coredns-674b8bbfcf-wd2qh\" (UID: \"bd32de34-d0d2-42a3-9930-aa9a894cc0ac\") " pod="kube-system/coredns-674b8bbfcf-wd2qh" Sep 6 01:22:27.231439 env[1445]: time="2025-09-06T01:22:27.231391814Z" level=info msg="shim disconnected" id=ce1fec38e82e77ffbfbea077a5faed3a30a6980ef0463ed7f720522609867ea8 Sep 6 01:22:27.231439 env[1445]: time="2025-09-06T01:22:27.231436974Z" level=warning msg="cleaning up after shim disconnected" id=ce1fec38e82e77ffbfbea077a5faed3a30a6980ef0463ed7f720522609867ea8 namespace=k8s.io Sep 6 01:22:27.231604 env[1445]: time="2025-09-06T01:22:27.231446174Z" level=info msg="cleaning up dead shim" Sep 6 01:22:27.242322 systemd[1]: Created slice kubepods-burstable-podbd32de34_d0d2_42a3_9930_aa9a894cc0ac.slice. Sep 6 01:22:27.245670 systemd[1]: Created slice kubepods-besteffort-podcefa4131_48b4_4105_8378_5bb83a604ba5.slice. Sep 6 01:22:27.253495 env[1445]: time="2025-09-06T01:22:27.253451791Z" level=warning msg="cleanup warnings time=\"2025-09-06T01:22:27Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3146 runtime=io.containerd.runc.v2\n" Sep 6 01:22:27.254533 systemd[1]: Created slice kubepods-besteffort-pod533f82ff_384e_4ac4_84e9_26949125ddc1.slice. Sep 6 01:22:27.266017 systemd[1]: Created slice kubepods-besteffort-pod8a374bc2_d94e_4f60_8980_ac3f72dfea23.slice. Sep 6 01:22:27.268877 env[1445]: time="2025-09-06T01:22:27.268834884Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-cjzts,Uid:8a374bc2-d94e-4f60-8980-ac3f72dfea23,Namespace:calico-system,Attempt:0,}" Sep 6 01:22:27.283081 systemd[1]: Created slice kubepods-besteffort-pod18882596_6b47_476c_bb54_87518393b7f7.slice. Sep 6 01:22:27.291015 systemd[1]: Created slice kubepods-besteffort-pod725278b0_288e_4867_b1d7_b68092c23fb6.slice. Sep 6 01:22:27.295577 systemd[1]: Created slice kubepods-burstable-pod8dcacbd0_09d2_49ca_b5ed_c0ea362399e9.slice. Sep 6 01:22:27.304977 systemd[1]: Created slice kubepods-besteffort-podf863d5f1_b40a_437f_845c_0824d6d70053.slice. Sep 6 01:22:27.331473 kubelet[2462]: I0906 01:22:27.331437 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/533f82ff-384e-4ac4-84e9-26949125ddc1-goldmane-ca-bundle\") pod \"goldmane-54d579b49d-ptp7b\" (UID: \"533f82ff-384e-4ac4-84e9-26949125ddc1\") " pod="calico-system/goldmane-54d579b49d-ptp7b" Sep 6 01:22:27.331682 kubelet[2462]: I0906 01:22:27.331666 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9mldq\" (UniqueName: \"kubernetes.io/projected/8dcacbd0-09d2-49ca-b5ed-c0ea362399e9-kube-api-access-9mldq\") pod \"coredns-674b8bbfcf-zjjms\" (UID: \"8dcacbd0-09d2-49ca-b5ed-c0ea362399e9\") " pod="kube-system/coredns-674b8bbfcf-zjjms" Sep 6 01:22:27.331810 kubelet[2462]: I0906 01:22:27.331794 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-drlm8\" (UniqueName: \"kubernetes.io/projected/cefa4131-48b4-4105-8378-5bb83a604ba5-kube-api-access-drlm8\") pod \"calico-kube-controllers-7bdc9c645-jw4z2\" (UID: \"cefa4131-48b4-4105-8378-5bb83a604ba5\") " pod="calico-system/calico-kube-controllers-7bdc9c645-jw4z2" Sep 6 01:22:27.331927 kubelet[2462]: I0906 01:22:27.331913 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/725278b0-288e-4867-b1d7-b68092c23fb6-whisker-ca-bundle\") pod \"whisker-6cb794cd7f-jqbrr\" (UID: \"725278b0-288e-4867-b1d7-b68092c23fb6\") " pod="calico-system/whisker-6cb794cd7f-jqbrr" Sep 6 01:22:27.332022 kubelet[2462]: I0906 01:22:27.332009 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/f863d5f1-b40a-437f-845c-0824d6d70053-calico-apiserver-certs\") pod \"calico-apiserver-84c8dc6bc5-4q7cp\" (UID: \"f863d5f1-b40a-437f-845c-0824d6d70053\") " pod="calico-apiserver/calico-apiserver-84c8dc6bc5-4q7cp" Sep 6 01:22:27.332102 kubelet[2462]: I0906 01:22:27.332088 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nr95z\" (UniqueName: \"kubernetes.io/projected/18882596-6b47-476c-bb54-87518393b7f7-kube-api-access-nr95z\") pod \"calico-apiserver-84c8dc6bc5-l6cl4\" (UID: \"18882596-6b47-476c-bb54-87518393b7f7\") " pod="calico-apiserver/calico-apiserver-84c8dc6bc5-l6cl4" Sep 6 01:22:27.332250 kubelet[2462]: I0906 01:22:27.332235 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/725278b0-288e-4867-b1d7-b68092c23fb6-whisker-backend-key-pair\") pod \"whisker-6cb794cd7f-jqbrr\" (UID: \"725278b0-288e-4867-b1d7-b68092c23fb6\") " pod="calico-system/whisker-6cb794cd7f-jqbrr" Sep 6 01:22:27.332333 kubelet[2462]: I0906 01:22:27.332319 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/533f82ff-384e-4ac4-84e9-26949125ddc1-goldmane-key-pair\") pod \"goldmane-54d579b49d-ptp7b\" (UID: \"533f82ff-384e-4ac4-84e9-26949125ddc1\") " pod="calico-system/goldmane-54d579b49d-ptp7b" Sep 6 01:22:27.332428 kubelet[2462]: I0906 01:22:27.332415 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-htwmb\" (UniqueName: \"kubernetes.io/projected/725278b0-288e-4867-b1d7-b68092c23fb6-kube-api-access-htwmb\") pod \"whisker-6cb794cd7f-jqbrr\" (UID: \"725278b0-288e-4867-b1d7-b68092c23fb6\") " pod="calico-system/whisker-6cb794cd7f-jqbrr" Sep 6 01:22:27.332509 kubelet[2462]: I0906 01:22:27.332492 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/18882596-6b47-476c-bb54-87518393b7f7-calico-apiserver-certs\") pod \"calico-apiserver-84c8dc6bc5-l6cl4\" (UID: \"18882596-6b47-476c-bb54-87518393b7f7\") " pod="calico-apiserver/calico-apiserver-84c8dc6bc5-l6cl4" Sep 6 01:22:27.332619 kubelet[2462]: I0906 01:22:27.332588 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-p4cvp\" (UniqueName: \"kubernetes.io/projected/f863d5f1-b40a-437f-845c-0824d6d70053-kube-api-access-p4cvp\") pod \"calico-apiserver-84c8dc6bc5-4q7cp\" (UID: \"f863d5f1-b40a-437f-845c-0824d6d70053\") " pod="calico-apiserver/calico-apiserver-84c8dc6bc5-4q7cp" Sep 6 01:22:27.332712 kubelet[2462]: I0906 01:22:27.332694 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/8dcacbd0-09d2-49ca-b5ed-c0ea362399e9-config-volume\") pod \"coredns-674b8bbfcf-zjjms\" (UID: \"8dcacbd0-09d2-49ca-b5ed-c0ea362399e9\") " pod="kube-system/coredns-674b8bbfcf-zjjms" Sep 6 01:22:27.332826 kubelet[2462]: I0906 01:22:27.332807 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/533f82ff-384e-4ac4-84e9-26949125ddc1-config\") pod \"goldmane-54d579b49d-ptp7b\" (UID: \"533f82ff-384e-4ac4-84e9-26949125ddc1\") " pod="calico-system/goldmane-54d579b49d-ptp7b" Sep 6 01:22:27.332905 kubelet[2462]: I0906 01:22:27.332892 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/cefa4131-48b4-4105-8378-5bb83a604ba5-tigera-ca-bundle\") pod \"calico-kube-controllers-7bdc9c645-jw4z2\" (UID: \"cefa4131-48b4-4105-8378-5bb83a604ba5\") " pod="calico-system/calico-kube-controllers-7bdc9c645-jw4z2" Sep 6 01:22:27.332994 kubelet[2462]: I0906 01:22:27.332980 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pb5ph\" (UniqueName: \"kubernetes.io/projected/533f82ff-384e-4ac4-84e9-26949125ddc1-kube-api-access-pb5ph\") pod \"goldmane-54d579b49d-ptp7b\" (UID: \"533f82ff-384e-4ac4-84e9-26949125ddc1\") " pod="calico-system/goldmane-54d579b49d-ptp7b" Sep 6 01:22:27.407198 env[1445]: time="2025-09-06T01:22:27.407122114Z" level=error msg="Failed to destroy network for sandbox \"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:27.411505 env[1445]: time="2025-09-06T01:22:27.409404916Z" level=error msg="encountered an error cleaning up failed sandbox \"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:27.411505 env[1445]: time="2025-09-06T01:22:27.409473676Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-cjzts,Uid:8a374bc2-d94e-4f60-8980-ac3f72dfea23,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:27.410870 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4-shm.mount: Deactivated successfully. Sep 6 01:22:27.411920 kubelet[2462]: E0906 01:22:27.409673 2462 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:27.411920 kubelet[2462]: E0906 01:22:27.409765 2462 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-cjzts" Sep 6 01:22:27.411920 kubelet[2462]: E0906 01:22:27.409786 2462 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-cjzts" Sep 6 01:22:27.412141 kubelet[2462]: E0906 01:22:27.409832 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-cjzts_calico-system(8a374bc2-d94e-4f60-8980-ac3f72dfea23)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-cjzts_calico-system(8a374bc2-d94e-4f60-8980-ac3f72dfea23)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-cjzts" podUID="8a374bc2-d94e-4f60-8980-ac3f72dfea23" Sep 6 01:22:27.548347 env[1445]: time="2025-09-06T01:22:27.548266307Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-wd2qh,Uid:bd32de34-d0d2-42a3-9930-aa9a894cc0ac,Namespace:kube-system,Attempt:0,}" Sep 6 01:22:27.550043 env[1445]: time="2025-09-06T01:22:27.549848548Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7bdc9c645-jw4z2,Uid:cefa4131-48b4-4105-8378-5bb83a604ba5,Namespace:calico-system,Attempt:0,}" Sep 6 01:22:27.563034 env[1445]: time="2025-09-06T01:22:27.562987558Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-ptp7b,Uid:533f82ff-384e-4ac4-84e9-26949125ddc1,Namespace:calico-system,Attempt:0,}" Sep 6 01:22:27.588407 env[1445]: time="2025-09-06T01:22:27.588153299Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84c8dc6bc5-l6cl4,Uid:18882596-6b47-476c-bb54-87518393b7f7,Namespace:calico-apiserver,Attempt:0,}" Sep 6 01:22:27.595459 env[1445]: time="2025-09-06T01:22:27.595403224Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6cb794cd7f-jqbrr,Uid:725278b0-288e-4867-b1d7-b68092c23fb6,Namespace:calico-system,Attempt:0,}" Sep 6 01:22:27.598749 env[1445]: time="2025-09-06T01:22:27.598502867Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-zjjms,Uid:8dcacbd0-09d2-49ca-b5ed-c0ea362399e9,Namespace:kube-system,Attempt:0,}" Sep 6 01:22:27.612751 env[1445]: time="2025-09-06T01:22:27.612681998Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84c8dc6bc5-4q7cp,Uid:f863d5f1-b40a-437f-845c-0824d6d70053,Namespace:calico-apiserver,Attempt:0,}" Sep 6 01:22:27.808320 env[1445]: time="2025-09-06T01:22:27.808207314Z" level=error msg="Failed to destroy network for sandbox \"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:27.808788 env[1445]: time="2025-09-06T01:22:27.808757395Z" level=error msg="encountered an error cleaning up failed sandbox \"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:27.808973 env[1445]: time="2025-09-06T01:22:27.808944875Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-wd2qh,Uid:bd32de34-d0d2-42a3-9930-aa9a894cc0ac,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:27.809505 kubelet[2462]: E0906 01:22:27.809464 2462 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:27.809604 kubelet[2462]: E0906 01:22:27.809536 2462 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-wd2qh" Sep 6 01:22:27.809604 kubelet[2462]: E0906 01:22:27.809558 2462 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-wd2qh" Sep 6 01:22:27.809670 kubelet[2462]: E0906 01:22:27.809647 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-wd2qh_kube-system(bd32de34-d0d2-42a3-9930-aa9a894cc0ac)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-wd2qh_kube-system(bd32de34-d0d2-42a3-9930-aa9a894cc0ac)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-wd2qh" podUID="bd32de34-d0d2-42a3-9930-aa9a894cc0ac" Sep 6 01:22:27.880261 env[1445]: time="2025-09-06T01:22:27.880209572Z" level=error msg="Failed to destroy network for sandbox \"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:27.880689 env[1445]: time="2025-09-06T01:22:27.880660932Z" level=error msg="encountered an error cleaning up failed sandbox \"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:27.880844 env[1445]: time="2025-09-06T01:22:27.880815332Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7bdc9c645-jw4z2,Uid:cefa4131-48b4-4105-8378-5bb83a604ba5,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:27.881551 kubelet[2462]: E0906 01:22:27.881126 2462 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:27.881551 kubelet[2462]: E0906 01:22:27.881183 2462 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7bdc9c645-jw4z2" Sep 6 01:22:27.881551 kubelet[2462]: E0906 01:22:27.881203 2462 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7bdc9c645-jw4z2" Sep 6 01:22:27.881685 kubelet[2462]: E0906 01:22:27.881250 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-7bdc9c645-jw4z2_calico-system(cefa4131-48b4-4105-8378-5bb83a604ba5)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-7bdc9c645-jw4z2_calico-system(cefa4131-48b4-4105-8378-5bb83a604ba5)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7bdc9c645-jw4z2" podUID="cefa4131-48b4-4105-8378-5bb83a604ba5" Sep 6 01:22:27.911090 kubelet[2462]: I0906 01:22:27.905037 2462 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 01:22:27.974000 audit[3330]: NETFILTER_CFG table=filter:104 family=2 entries=21 op=nft_register_rule pid=3330 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:27.974000 audit[3330]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffe1076b50 a2=0 a3=1 items=0 ppid=2609 pid=3330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:27.974000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:27.976000 audit[3330]: NETFILTER_CFG table=nat:105 family=2 entries=19 op=nft_register_chain pid=3330 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:27.976000 audit[3330]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffe1076b50 a2=0 a3=1 items=0 ppid=2609 pid=3330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:27.976000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:27.979052 env[1445]: time="2025-09-06T01:22:27.978994891Z" level=error msg="Failed to destroy network for sandbox \"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:27.979405 env[1445]: time="2025-09-06T01:22:27.979369251Z" level=error msg="encountered an error cleaning up failed sandbox \"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:27.979452 env[1445]: time="2025-09-06T01:22:27.979424051Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-ptp7b,Uid:533f82ff-384e-4ac4-84e9-26949125ddc1,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:27.980010 kubelet[2462]: E0906 01:22:27.979632 2462 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:27.980010 kubelet[2462]: E0906 01:22:27.979686 2462 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-ptp7b" Sep 6 01:22:27.980010 kubelet[2462]: E0906 01:22:27.979705 2462 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-ptp7b" Sep 6 01:22:27.980187 kubelet[2462]: E0906 01:22:27.979778 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-54d579b49d-ptp7b_calico-system(533f82ff-384e-4ac4-84e9-26949125ddc1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-54d579b49d-ptp7b_calico-system(533f82ff-384e-4ac4-84e9-26949125ddc1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-ptp7b" podUID="533f82ff-384e-4ac4-84e9-26949125ddc1" Sep 6 01:22:28.033454 env[1445]: time="2025-09-06T01:22:28.033391094Z" level=error msg="Failed to destroy network for sandbox \"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.033842 env[1445]: time="2025-09-06T01:22:28.033804094Z" level=error msg="encountered an error cleaning up failed sandbox \"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.033906 env[1445]: time="2025-09-06T01:22:28.033860294Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84c8dc6bc5-l6cl4,Uid:18882596-6b47-476c-bb54-87518393b7f7,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.035131 kubelet[2462]: E0906 01:22:28.034110 2462 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.035131 kubelet[2462]: E0906 01:22:28.034169 2462 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-84c8dc6bc5-l6cl4" Sep 6 01:22:28.035131 kubelet[2462]: E0906 01:22:28.034194 2462 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-84c8dc6bc5-l6cl4" Sep 6 01:22:28.035300 kubelet[2462]: E0906 01:22:28.034237 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-84c8dc6bc5-l6cl4_calico-apiserver(18882596-6b47-476c-bb54-87518393b7f7)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-84c8dc6bc5-l6cl4_calico-apiserver(18882596-6b47-476c-bb54-87518393b7f7)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-84c8dc6bc5-l6cl4" podUID="18882596-6b47-476c-bb54-87518393b7f7" Sep 6 01:22:28.047822 env[1445]: time="2025-09-06T01:22:28.047770065Z" level=error msg="Failed to destroy network for sandbox \"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.048292 env[1445]: time="2025-09-06T01:22:28.048226746Z" level=error msg="encountered an error cleaning up failed sandbox \"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.048410 env[1445]: time="2025-09-06T01:22:28.048385066Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-zjjms,Uid:8dcacbd0-09d2-49ca-b5ed-c0ea362399e9,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.048712 kubelet[2462]: E0906 01:22:28.048643 2462 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.048797 kubelet[2462]: E0906 01:22:28.048743 2462 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-zjjms" Sep 6 01:22:28.048797 kubelet[2462]: E0906 01:22:28.048766 2462 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-zjjms" Sep 6 01:22:28.048946 kubelet[2462]: E0906 01:22:28.048834 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-zjjms_kube-system(8dcacbd0-09d2-49ca-b5ed-c0ea362399e9)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-zjjms_kube-system(8dcacbd0-09d2-49ca-b5ed-c0ea362399e9)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-zjjms" podUID="8dcacbd0-09d2-49ca-b5ed-c0ea362399e9" Sep 6 01:22:28.057769 env[1445]: time="2025-09-06T01:22:28.057698873Z" level=error msg="Failed to destroy network for sandbox \"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.058104 env[1445]: time="2025-09-06T01:22:28.058068553Z" level=error msg="encountered an error cleaning up failed sandbox \"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.058163 env[1445]: time="2025-09-06T01:22:28.058132593Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6cb794cd7f-jqbrr,Uid:725278b0-288e-4867-b1d7-b68092c23fb6,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.058671 kubelet[2462]: E0906 01:22:28.058351 2462 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.058671 kubelet[2462]: E0906 01:22:28.058405 2462 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6cb794cd7f-jqbrr" Sep 6 01:22:28.058671 kubelet[2462]: E0906 01:22:28.058424 2462 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6cb794cd7f-jqbrr" Sep 6 01:22:28.058887 kubelet[2462]: E0906 01:22:28.058492 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-6cb794cd7f-jqbrr_calico-system(725278b0-288e-4867-b1d7-b68092c23fb6)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-6cb794cd7f-jqbrr_calico-system(725278b0-288e-4867-b1d7-b68092c23fb6)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6cb794cd7f-jqbrr" podUID="725278b0-288e-4867-b1d7-b68092c23fb6" Sep 6 01:22:28.066518 env[1445]: time="2025-09-06T01:22:28.066460960Z" level=error msg="Failed to destroy network for sandbox \"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.066868 env[1445]: time="2025-09-06T01:22:28.066835040Z" level=error msg="encountered an error cleaning up failed sandbox \"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.066911 env[1445]: time="2025-09-06T01:22:28.066888280Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84c8dc6bc5-4q7cp,Uid:f863d5f1-b40a-437f-845c-0824d6d70053,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.067174 kubelet[2462]: E0906 01:22:28.067120 2462 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.067242 kubelet[2462]: E0906 01:22:28.067197 2462 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-84c8dc6bc5-4q7cp" Sep 6 01:22:28.067242 kubelet[2462]: E0906 01:22:28.067217 2462 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-84c8dc6bc5-4q7cp" Sep 6 01:22:28.067326 kubelet[2462]: E0906 01:22:28.067284 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-84c8dc6bc5-4q7cp_calico-apiserver(f863d5f1-b40a-437f-845c-0824d6d70053)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-84c8dc6bc5-4q7cp_calico-apiserver(f863d5f1-b40a-437f-845c-0824d6d70053)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-84c8dc6bc5-4q7cp" podUID="f863d5f1-b40a-437f-845c-0824d6d70053" Sep 6 01:22:28.071514 kubelet[2462]: I0906 01:22:28.071100 2462 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Sep 6 01:22:28.072063 env[1445]: time="2025-09-06T01:22:28.072033564Z" level=info msg="StopPodSandbox for \"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\"" Sep 6 01:22:28.072791 kubelet[2462]: I0906 01:22:28.072497 2462 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Sep 6 01:22:28.073100 env[1445]: time="2025-09-06T01:22:28.073067045Z" level=info msg="StopPodSandbox for \"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\"" Sep 6 01:22:28.074558 kubelet[2462]: I0906 01:22:28.074261 2462 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Sep 6 01:22:28.074712 env[1445]: time="2025-09-06T01:22:28.074675046Z" level=info msg="StopPodSandbox for \"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\"" Sep 6 01:22:28.076668 kubelet[2462]: I0906 01:22:28.076404 2462 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Sep 6 01:22:28.077555 env[1445]: time="2025-09-06T01:22:28.076895048Z" level=info msg="StopPodSandbox for \"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\"" Sep 6 01:22:28.079145 kubelet[2462]: I0906 01:22:28.078786 2462 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Sep 6 01:22:28.079449 env[1445]: time="2025-09-06T01:22:28.079413290Z" level=info msg="StopPodSandbox for \"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\"" Sep 6 01:22:28.080958 kubelet[2462]: I0906 01:22:28.080882 2462 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Sep 6 01:22:28.081826 env[1445]: time="2025-09-06T01:22:28.081371732Z" level=info msg="StopPodSandbox for \"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\"" Sep 6 01:22:28.082661 kubelet[2462]: I0906 01:22:28.082630 2462 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Sep 6 01:22:28.083308 env[1445]: time="2025-09-06T01:22:28.083258733Z" level=info msg="StopPodSandbox for \"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\"" Sep 6 01:22:28.094773 kubelet[2462]: I0906 01:22:28.092712 2462 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Sep 6 01:22:28.094898 env[1445]: time="2025-09-06T01:22:28.093277781Z" level=info msg="StopPodSandbox for \"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\"" Sep 6 01:22:28.096755 env[1445]: time="2025-09-06T01:22:28.096034663Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\"" Sep 6 01:22:28.216714 env[1445]: time="2025-09-06T01:22:28.216649638Z" level=error msg="StopPodSandbox for \"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\" failed" error="failed to destroy network for sandbox \"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.217232 kubelet[2462]: E0906 01:22:28.217169 2462 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Sep 6 01:22:28.217317 kubelet[2462]: E0906 01:22:28.217248 2462 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf"} Sep 6 01:22:28.217370 kubelet[2462]: E0906 01:22:28.217327 2462 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"bd32de34-d0d2-42a3-9930-aa9a894cc0ac\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:22:28.217435 kubelet[2462]: E0906 01:22:28.217377 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"bd32de34-d0d2-42a3-9930-aa9a894cc0ac\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-wd2qh" podUID="bd32de34-d0d2-42a3-9930-aa9a894cc0ac" Sep 6 01:22:28.218781 env[1445]: time="2025-09-06T01:22:28.218694160Z" level=error msg="StopPodSandbox for \"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\" failed" error="failed to destroy network for sandbox \"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.219095 kubelet[2462]: E0906 01:22:28.219055 2462 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Sep 6 01:22:28.219176 kubelet[2462]: E0906 01:22:28.219113 2462 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2"} Sep 6 01:22:28.219176 kubelet[2462]: E0906 01:22:28.219144 2462 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"cefa4131-48b4-4105-8378-5bb83a604ba5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:22:28.219259 kubelet[2462]: E0906 01:22:28.219177 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"cefa4131-48b4-4105-8378-5bb83a604ba5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7bdc9c645-jw4z2" podUID="cefa4131-48b4-4105-8378-5bb83a604ba5" Sep 6 01:22:28.222103 env[1445]: time="2025-09-06T01:22:28.222042843Z" level=error msg="StopPodSandbox for \"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\" failed" error="failed to destroy network for sandbox \"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.222328 kubelet[2462]: E0906 01:22:28.222292 2462 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Sep 6 01:22:28.222405 kubelet[2462]: E0906 01:22:28.222350 2462 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371"} Sep 6 01:22:28.222405 kubelet[2462]: E0906 01:22:28.222386 2462 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"18882596-6b47-476c-bb54-87518393b7f7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:22:28.222485 kubelet[2462]: E0906 01:22:28.222409 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"18882596-6b47-476c-bb54-87518393b7f7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-84c8dc6bc5-l6cl4" podUID="18882596-6b47-476c-bb54-87518393b7f7" Sep 6 01:22:28.222968 env[1445]: time="2025-09-06T01:22:28.222916363Z" level=error msg="StopPodSandbox for \"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\" failed" error="failed to destroy network for sandbox \"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.223135 kubelet[2462]: E0906 01:22:28.223085 2462 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Sep 6 01:22:28.223190 kubelet[2462]: E0906 01:22:28.223136 2462 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b"} Sep 6 01:22:28.223190 kubelet[2462]: E0906 01:22:28.223163 2462 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f863d5f1-b40a-437f-845c-0824d6d70053\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:22:28.223262 kubelet[2462]: E0906 01:22:28.223193 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f863d5f1-b40a-437f-845c-0824d6d70053\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-84c8dc6bc5-4q7cp" podUID="f863d5f1-b40a-437f-845c-0824d6d70053" Sep 6 01:22:28.226872 env[1445]: time="2025-09-06T01:22:28.226822286Z" level=error msg="StopPodSandbox for \"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\" failed" error="failed to destroy network for sandbox \"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.227044 kubelet[2462]: E0906 01:22:28.226995 2462 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Sep 6 01:22:28.227116 kubelet[2462]: E0906 01:22:28.227050 2462 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67"} Sep 6 01:22:28.227116 kubelet[2462]: E0906 01:22:28.227074 2462 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8dcacbd0-09d2-49ca-b5ed-c0ea362399e9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:22:28.227116 kubelet[2462]: E0906 01:22:28.227106 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8dcacbd0-09d2-49ca-b5ed-c0ea362399e9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-zjjms" podUID="8dcacbd0-09d2-49ca-b5ed-c0ea362399e9" Sep 6 01:22:28.228494 env[1445]: time="2025-09-06T01:22:28.228450528Z" level=error msg="StopPodSandbox for \"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\" failed" error="failed to destroy network for sandbox \"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.228671 kubelet[2462]: E0906 01:22:28.228625 2462 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Sep 6 01:22:28.228739 kubelet[2462]: E0906 01:22:28.228680 2462 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4"} Sep 6 01:22:28.228739 kubelet[2462]: E0906 01:22:28.228707 2462 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8a374bc2-d94e-4f60-8980-ac3f72dfea23\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:22:28.228815 kubelet[2462]: E0906 01:22:28.228741 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8a374bc2-d94e-4f60-8980-ac3f72dfea23\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-cjzts" podUID="8a374bc2-d94e-4f60-8980-ac3f72dfea23" Sep 6 01:22:28.232542 env[1445]: time="2025-09-06T01:22:28.232494411Z" level=error msg="StopPodSandbox for \"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\" failed" error="failed to destroy network for sandbox \"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.232734 kubelet[2462]: E0906 01:22:28.232691 2462 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Sep 6 01:22:28.232791 kubelet[2462]: E0906 01:22:28.232743 2462 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50"} Sep 6 01:22:28.232791 kubelet[2462]: E0906 01:22:28.232771 2462 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"725278b0-288e-4867-b1d7-b68092c23fb6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:22:28.232880 kubelet[2462]: E0906 01:22:28.232789 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"725278b0-288e-4867-b1d7-b68092c23fb6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6cb794cd7f-jqbrr" podUID="725278b0-288e-4867-b1d7-b68092c23fb6" Sep 6 01:22:28.236777 env[1445]: time="2025-09-06T01:22:28.236685254Z" level=error msg="StopPodSandbox for \"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\" failed" error="failed to destroy network for sandbox \"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 6 01:22:28.236936 kubelet[2462]: E0906 01:22:28.236877 2462 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Sep 6 01:22:28.237005 kubelet[2462]: E0906 01:22:28.236939 2462 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561"} Sep 6 01:22:28.237005 kubelet[2462]: E0906 01:22:28.236964 2462 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"533f82ff-384e-4ac4-84e9-26949125ddc1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 6 01:22:28.237005 kubelet[2462]: E0906 01:22:28.236995 2462 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"533f82ff-384e-4ac4-84e9-26949125ddc1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-ptp7b" podUID="533f82ff-384e-4ac4-84e9-26949125ddc1" Sep 6 01:22:33.197553 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount725351326.mount: Deactivated successfully. Sep 6 01:22:33.254689 env[1445]: time="2025-09-06T01:22:33.254641017Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:33.268830 env[1445]: time="2025-09-06T01:22:33.268787267Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2b8abd2140fc4464ed664d225fe38e5b90bbfcf62996b484b0fc0e0537b6a4a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:33.281410 env[1445]: time="2025-09-06T01:22:33.281368477Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:33.287758 env[1445]: time="2025-09-06T01:22:33.287698921Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:bcb8146fcaeced1e1c88fad3eaa697f1680746bd23c3e7e8d4535bc484c6f2a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:33.288492 env[1445]: time="2025-09-06T01:22:33.288465242Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\" returns image reference \"sha256:2b8abd2140fc4464ed664d225fe38e5b90bbfcf62996b484b0fc0e0537b6a4a9\"" Sep 6 01:22:33.313199 env[1445]: time="2025-09-06T01:22:33.313158940Z" level=info msg="CreateContainer within sandbox \"6f1afeee853f92af5bd0de9fa4fe4fd1cb648eeae1fe5805b673d4ff229d6413\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Sep 6 01:22:33.392891 env[1445]: time="2025-09-06T01:22:33.392818199Z" level=info msg="CreateContainer within sandbox \"6f1afeee853f92af5bd0de9fa4fe4fd1cb648eeae1fe5805b673d4ff229d6413\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"c43e88fbd7dabb13c3d6d9508cc2ae3e97ae4faba7a9b60dc07bcf98766bd75f\"" Sep 6 01:22:33.394174 env[1445]: time="2025-09-06T01:22:33.394140360Z" level=info msg="StartContainer for \"c43e88fbd7dabb13c3d6d9508cc2ae3e97ae4faba7a9b60dc07bcf98766bd75f\"" Sep 6 01:22:33.411174 systemd[1]: Started cri-containerd-c43e88fbd7dabb13c3d6d9508cc2ae3e97ae4faba7a9b60dc07bcf98766bd75f.scope. Sep 6 01:22:33.443747 kernel: kauditd_printk_skb: 40 callbacks suppressed Sep 6 01:22:33.443893 kernel: audit: type=1400 audit(1757121753.433:963): avc: denied { perfmon } for pid=3525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { perfmon } for pid=3525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2924 pid=3525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:33.461081 kernel: audit: type=1300 audit(1757121753.433:963): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2924 pid=3525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:33.433000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334336538386662643764616262313363336436643935303863633261 Sep 6 01:22:33.516092 kernel: audit: type=1327 audit(1757121753.433:963): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334336538386662643764616262313363336436643935303863633261 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { bpf } for pid=3525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.536520 kernel: audit: type=1400 audit(1757121753.433:964): avc: denied { bpf } for pid=3525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.541288 kernel: audit: type=1400 audit(1757121753.433:964): avc: denied { bpf } for pid=3525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { bpf } for pid=3525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { bpf } for pid=3525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.573377 kernel: audit: type=1400 audit(1757121753.433:964): avc: denied { bpf } for pid=3525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { perfmon } for pid=3525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.593415 kernel: audit: type=1400 audit(1757121753.433:964): avc: denied { perfmon } for pid=3525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.593508 kernel: audit: type=1400 audit(1757121753.433:964): avc: denied { perfmon } for pid=3525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { perfmon } for pid=3525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { perfmon } for pid=3525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.611495 env[1445]: time="2025-09-06T01:22:33.611451321Z" level=info msg="StartContainer for \"c43e88fbd7dabb13c3d6d9508cc2ae3e97ae4faba7a9b60dc07bcf98766bd75f\" returns successfully" Sep 6 01:22:33.628926 kernel: audit: type=1400 audit(1757121753.433:964): avc: denied { perfmon } for pid=3525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.629076 kernel: audit: type=1400 audit(1757121753.433:964): avc: denied { perfmon } for pid=3525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { perfmon } for pid=3525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { perfmon } for pid=3525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { bpf } for pid=3525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { bpf } for pid=3525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit: BPF prog-id=134 op=LOAD Sep 6 01:22:33.433000 audit[3525]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2924 pid=3525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:33.433000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334336538386662643764616262313363336436643935303863633261 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { bpf } for pid=3525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { bpf } for pid=3525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { perfmon } for pid=3525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { perfmon } for pid=3525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { perfmon } for pid=3525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { perfmon } for pid=3525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { perfmon } for pid=3525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { bpf } for pid=3525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { bpf } for pid=3525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit: BPF prog-id=135 op=LOAD Sep 6 01:22:33.433000 audit[3525]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2924 pid=3525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:33.433000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334336538386662643764616262313363336436643935303863633261 Sep 6 01:22:33.433000 audit: BPF prog-id=135 op=UNLOAD Sep 6 01:22:33.433000 audit: BPF prog-id=134 op=UNLOAD Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { bpf } for pid=3525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { bpf } for pid=3525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { bpf } for pid=3525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { perfmon } for pid=3525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { perfmon } for pid=3525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { perfmon } for pid=3525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { perfmon } for pid=3525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { perfmon } for pid=3525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { bpf } for pid=3525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit[3525]: AVC avc: denied { bpf } for pid=3525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:33.433000 audit: BPF prog-id=136 op=LOAD Sep 6 01:22:33.433000 audit[3525]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2924 pid=3525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:33.433000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334336538386662643764616262313363336436643935303863633261 Sep 6 01:22:33.997871 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Sep 6 01:22:33.998039 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Sep 6 01:22:34.138736 env[1445]: time="2025-09-06T01:22:34.138676070Z" level=info msg="StopPodSandbox for \"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\"" Sep 6 01:22:34.153007 kubelet[2462]: I0906 01:22:34.152466 2462 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-2g66b" podStartSLOduration=1.7880951619999998 podStartE2EDuration="19.15244904s" podCreationTimestamp="2025-09-06 01:22:15 +0000 UTC" firstStartedPulling="2025-09-06 01:22:15.925222885 +0000 UTC m=+24.149610175" lastFinishedPulling="2025-09-06 01:22:33.289576723 +0000 UTC m=+41.513964053" observedRunningTime="2025-09-06 01:22:34.151998399 +0000 UTC m=+42.376385729" watchObservedRunningTime="2025-09-06 01:22:34.15244904 +0000 UTC m=+42.376836370" Sep 6 01:22:34.325578 env[1445]: 2025-09-06 01:22:34.251 [INFO][3577] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Sep 6 01:22:34.325578 env[1445]: 2025-09-06 01:22:34.251 [INFO][3577] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" iface="eth0" netns="/var/run/netns/cni-38e1519c-4561-8933-9447-54ac11cf1db0" Sep 6 01:22:34.325578 env[1445]: 2025-09-06 01:22:34.251 [INFO][3577] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" iface="eth0" netns="/var/run/netns/cni-38e1519c-4561-8933-9447-54ac11cf1db0" Sep 6 01:22:34.325578 env[1445]: 2025-09-06 01:22:34.252 [INFO][3577] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" iface="eth0" netns="/var/run/netns/cni-38e1519c-4561-8933-9447-54ac11cf1db0" Sep 6 01:22:34.325578 env[1445]: 2025-09-06 01:22:34.252 [INFO][3577] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Sep 6 01:22:34.325578 env[1445]: 2025-09-06 01:22:34.252 [INFO][3577] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Sep 6 01:22:34.325578 env[1445]: 2025-09-06 01:22:34.306 [INFO][3584] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" HandleID="k8s-pod-network.da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Workload="ci--3510.3.8--n--645ca388a2-k8s-whisker--6cb794cd7f--jqbrr-eth0" Sep 6 01:22:34.325578 env[1445]: 2025-09-06 01:22:34.307 [INFO][3584] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:34.325578 env[1445]: 2025-09-06 01:22:34.307 [INFO][3584] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:34.325578 env[1445]: 2025-09-06 01:22:34.319 [WARNING][3584] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" HandleID="k8s-pod-network.da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Workload="ci--3510.3.8--n--645ca388a2-k8s-whisker--6cb794cd7f--jqbrr-eth0" Sep 6 01:22:34.325578 env[1445]: 2025-09-06 01:22:34.319 [INFO][3584] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" HandleID="k8s-pod-network.da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Workload="ci--3510.3.8--n--645ca388a2-k8s-whisker--6cb794cd7f--jqbrr-eth0" Sep 6 01:22:34.325578 env[1445]: 2025-09-06 01:22:34.322 [INFO][3584] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:34.325578 env[1445]: 2025-09-06 01:22:34.323 [INFO][3577] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Sep 6 01:22:34.357798 env[1445]: time="2025-09-06T01:22:34.329125369Z" level=info msg="TearDown network for sandbox \"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\" successfully" Sep 6 01:22:34.357798 env[1445]: time="2025-09-06T01:22:34.329172649Z" level=info msg="StopPodSandbox for \"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\" returns successfully" Sep 6 01:22:34.328361 systemd[1]: run-netns-cni\x2d38e1519c\x2d4561\x2d8933\x2d9447\x2d54ac11cf1db0.mount: Deactivated successfully. Sep 6 01:22:34.402785 kubelet[2462]: I0906 01:22:34.402250 2462 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/725278b0-288e-4867-b1d7-b68092c23fb6-whisker-ca-bundle\") pod \"725278b0-288e-4867-b1d7-b68092c23fb6\" (UID: \"725278b0-288e-4867-b1d7-b68092c23fb6\") " Sep 6 01:22:34.402785 kubelet[2462]: I0906 01:22:34.402300 2462 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/725278b0-288e-4867-b1d7-b68092c23fb6-whisker-backend-key-pair\") pod \"725278b0-288e-4867-b1d7-b68092c23fb6\" (UID: \"725278b0-288e-4867-b1d7-b68092c23fb6\") " Sep 6 01:22:34.402785 kubelet[2462]: I0906 01:22:34.402338 2462 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-htwmb\" (UniqueName: \"kubernetes.io/projected/725278b0-288e-4867-b1d7-b68092c23fb6-kube-api-access-htwmb\") pod \"725278b0-288e-4867-b1d7-b68092c23fb6\" (UID: \"725278b0-288e-4867-b1d7-b68092c23fb6\") " Sep 6 01:22:34.402785 kubelet[2462]: I0906 01:22:34.402657 2462 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/725278b0-288e-4867-b1d7-b68092c23fb6-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "725278b0-288e-4867-b1d7-b68092c23fb6" (UID: "725278b0-288e-4867-b1d7-b68092c23fb6"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Sep 6 01:22:34.454061 kubelet[2462]: I0906 01:22:34.410454 2462 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/725278b0-288e-4867-b1d7-b68092c23fb6-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "725278b0-288e-4867-b1d7-b68092c23fb6" (UID: "725278b0-288e-4867-b1d7-b68092c23fb6"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Sep 6 01:22:34.454061 kubelet[2462]: I0906 01:22:34.419418 2462 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/725278b0-288e-4867-b1d7-b68092c23fb6-kube-api-access-htwmb" (OuterVolumeSpecName: "kube-api-access-htwmb") pod "725278b0-288e-4867-b1d7-b68092c23fb6" (UID: "725278b0-288e-4867-b1d7-b68092c23fb6"). InnerVolumeSpecName "kube-api-access-htwmb". PluginName "kubernetes.io/projected", VolumeGIDValue "" Sep 6 01:22:34.412708 systemd[1]: var-lib-kubelet-pods-725278b0\x2d288e\x2d4867\x2db1d7\x2db68092c23fb6-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dhtwmb.mount: Deactivated successfully. Sep 6 01:22:34.413399 systemd[1]: var-lib-kubelet-pods-725278b0\x2d288e\x2d4867\x2db1d7\x2db68092c23fb6-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Sep 6 01:22:34.503760 kubelet[2462]: I0906 01:22:34.503694 2462 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-htwmb\" (UniqueName: \"kubernetes.io/projected/725278b0-288e-4867-b1d7-b68092c23fb6-kube-api-access-htwmb\") on node \"ci-3510.3.8-n-645ca388a2\" DevicePath \"\"" Sep 6 01:22:34.503958 kubelet[2462]: I0906 01:22:34.503941 2462 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/725278b0-288e-4867-b1d7-b68092c23fb6-whisker-ca-bundle\") on node \"ci-3510.3.8-n-645ca388a2\" DevicePath \"\"" Sep 6 01:22:34.504038 kubelet[2462]: I0906 01:22:34.504028 2462 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/725278b0-288e-4867-b1d7-b68092c23fb6-whisker-backend-key-pair\") on node \"ci-3510.3.8-n-645ca388a2\" DevicePath \"\"" Sep 6 01:22:35.110493 systemd[1]: Removed slice kubepods-besteffort-pod725278b0_288e_4867_b1d7_b68092c23fb6.slice. Sep 6 01:22:35.187241 systemd[1]: Created slice kubepods-besteffort-pod1b7d63d9_4f3e_44d1_8447_e2d80fa7932c.slice. Sep 6 01:22:35.307921 kubelet[2462]: I0906 01:22:35.307868 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-l5497\" (UniqueName: \"kubernetes.io/projected/1b7d63d9-4f3e-44d1-8447-e2d80fa7932c-kube-api-access-l5497\") pod \"whisker-54667fdd86-lgvqq\" (UID: \"1b7d63d9-4f3e-44d1-8447-e2d80fa7932c\") " pod="calico-system/whisker-54667fdd86-lgvqq" Sep 6 01:22:35.307921 kubelet[2462]: I0906 01:22:35.307927 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/1b7d63d9-4f3e-44d1-8447-e2d80fa7932c-whisker-backend-key-pair\") pod \"whisker-54667fdd86-lgvqq\" (UID: \"1b7d63d9-4f3e-44d1-8447-e2d80fa7932c\") " pod="calico-system/whisker-54667fdd86-lgvqq" Sep 6 01:22:35.308318 kubelet[2462]: I0906 01:22:35.307944 2462 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1b7d63d9-4f3e-44d1-8447-e2d80fa7932c-whisker-ca-bundle\") pod \"whisker-54667fdd86-lgvqq\" (UID: \"1b7d63d9-4f3e-44d1-8447-e2d80fa7932c\") " pod="calico-system/whisker-54667fdd86-lgvqq" Sep 6 01:22:35.490983 env[1445]: time="2025-09-06T01:22:35.490486254Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-54667fdd86-lgvqq,Uid:1b7d63d9-4f3e-44d1-8447-e2d80fa7932c,Namespace:calico-system,Attempt:0,}" Sep 6 01:22:35.509000 audit[3641]: AVC avc: denied { write } for pid=3641 comm="tee" name="fd" dev="proc" ino=24870 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 01:22:35.509000 audit[3641]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcfa7d7cb a2=241 a3=1b6 items=1 ppid=3621 pid=3641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:35.509000 audit: CWD cwd="/etc/service/enabled/confd/log" Sep 6 01:22:35.509000 audit: PATH item=0 name="/dev/fd/63" inode=24856 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:22:35.509000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 01:22:35.543000 audit[3671]: AVC avc: denied { write } for pid=3671 comm="tee" name="fd" dev="proc" ino=24898 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 01:22:35.545000 audit[3668]: AVC avc: denied { write } for pid=3668 comm="tee" name="fd" dev="proc" ino=24371 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 01:22:35.545000 audit[3668]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff627a7cd a2=241 a3=1b6 items=1 ppid=3617 pid=3668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:35.545000 audit: CWD cwd="/etc/service/enabled/cni/log" Sep 6 01:22:35.545000 audit: PATH item=0 name="/dev/fd/63" inode=24886 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:22:35.545000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 01:22:35.543000 audit[3671]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcc4667cc a2=241 a3=1b6 items=1 ppid=3624 pid=3671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:35.543000 audit: CWD cwd="/etc/service/enabled/bird/log" Sep 6 01:22:35.543000 audit: PATH item=0 name="/dev/fd/63" inode=24364 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:22:35.543000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 01:22:35.557000 audit[3675]: AVC avc: denied { write } for pid=3675 comm="tee" name="fd" dev="proc" ino=24902 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 01:22:35.557000 audit[3675]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd55307bb a2=241 a3=1b6 items=1 ppid=3620 pid=3675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:35.557000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Sep 6 01:22:35.557000 audit: PATH item=0 name="/dev/fd/63" inode=24889 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:22:35.557000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 01:22:35.596000 audit[3696]: AVC avc: denied { write } for pid=3696 comm="tee" name="fd" dev="proc" ino=24408 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 01:22:35.596000 audit[3696]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc2e377cb a2=241 a3=1b6 items=1 ppid=3618 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:35.596000 audit: CWD cwd="/etc/service/enabled/felix/log" Sep 6 01:22:35.596000 audit: PATH item=0 name="/dev/fd/63" inode=24402 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:22:35.596000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 01:22:35.632000 audit[3682]: AVC avc: denied { write } for pid=3682 comm="tee" name="fd" dev="proc" ino=24418 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 01:22:35.632000 audit[3682]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffe1ae7bc a2=241 a3=1b6 items=1 ppid=3614 pid=3682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:35.632000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Sep 6 01:22:35.632000 audit: PATH item=0 name="/dev/fd/63" inode=24374 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:22:35.632000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 01:22:35.636000 audit[3683]: AVC avc: denied { write } for pid=3683 comm="tee" name="fd" dev="proc" ino=24422 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 6 01:22:35.636000 audit[3683]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff306f7cb a2=241 a3=1b6 items=1 ppid=3613 pid=3683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:35.636000 audit: CWD cwd="/etc/service/enabled/bird6/log" Sep 6 01:22:35.636000 audit: PATH item=0 name="/dev/fd/63" inode=24373 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 6 01:22:35.636000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit: BPF prog-id=137 op=LOAD Sep 6 01:22:35.848000 audit[3730]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffffe66438 a2=98 a3=ffffffe66428 items=0 ppid=3619 pid=3730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:35.848000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 01:22:35.848000 audit: BPF prog-id=137 op=UNLOAD Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit: BPF prog-id=138 op=LOAD Sep 6 01:22:35.848000 audit[3730]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffffe662e8 a2=74 a3=95 items=0 ppid=3619 pid=3730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:35.848000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 01:22:35.848000 audit: BPF prog-id=138 op=UNLOAD Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit: BPF prog-id=139 op=LOAD Sep 6 01:22:35.848000 audit[3730]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffffe66318 a2=40 a3=ffffffe66348 items=0 ppid=3619 pid=3730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:35.848000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 01:22:35.848000 audit: BPF prog-id=139 op=UNLOAD Sep 6 01:22:35.848000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.848000 audit[3730]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffffe66430 a2=50 a3=0 items=0 ppid=3619 pid=3730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:35.848000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 6 01:22:35.849000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.849000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.849000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.849000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.849000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.849000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.849000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.849000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.849000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.849000 audit: BPF prog-id=140 op=LOAD Sep 6 01:22:35.849000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff513cfe8 a2=98 a3=fffff513cfd8 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:35.849000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:35.849000 audit: BPF prog-id=140 op=UNLOAD Sep 6 01:22:35.850000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.850000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.850000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.850000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.850000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.850000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.850000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.850000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.850000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.850000 audit: BPF prog-id=141 op=LOAD Sep 6 01:22:35.850000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff513cc78 a2=74 a3=95 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:35.850000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:35.850000 audit: BPF prog-id=141 op=UNLOAD Sep 6 01:22:35.850000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.850000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.850000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.850000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.850000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.850000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.850000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.850000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.850000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.850000 audit: BPF prog-id=142 op=LOAD Sep 6 01:22:35.850000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff513ccd8 a2=94 a3=2 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:35.850000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:35.850000 audit: BPF prog-id=142 op=UNLOAD Sep 6 01:22:35.890455 systemd-networkd[1608]: cali25dc73ae275: Link UP Sep 6 01:22:35.903814 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 01:22:35.903981 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali25dc73ae275: link becomes ready Sep 6 01:22:35.910968 kubelet[2462]: I0906 01:22:35.910927 2462 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="725278b0-288e-4867-b1d7-b68092c23fb6" path="/var/lib/kubelet/pods/725278b0-288e-4867-b1d7-b68092c23fb6/volumes" Sep 6 01:22:35.918214 systemd-networkd[1608]: cali25dc73ae275: Gained carrier Sep 6 01:22:35.936651 env[1445]: 2025-09-06 01:22:35.603 [INFO][3685] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 6 01:22:35.936651 env[1445]: 2025-09-06 01:22:35.625 [INFO][3685] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--645ca388a2-k8s-whisker--54667fdd86--lgvqq-eth0 whisker-54667fdd86- calico-system 1b7d63d9-4f3e-44d1-8447-e2d80fa7932c 901 0 2025-09-06 01:22:35 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:54667fdd86 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ci-3510.3.8-n-645ca388a2 whisker-54667fdd86-lgvqq eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali25dc73ae275 [] [] }} ContainerID="4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2" Namespace="calico-system" Pod="whisker-54667fdd86-lgvqq" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-whisker--54667fdd86--lgvqq-" Sep 6 01:22:35.936651 env[1445]: 2025-09-06 01:22:35.625 [INFO][3685] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2" Namespace="calico-system" Pod="whisker-54667fdd86-lgvqq" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-whisker--54667fdd86--lgvqq-eth0" Sep 6 01:22:35.936651 env[1445]: 2025-09-06 01:22:35.662 [INFO][3703] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2" HandleID="k8s-pod-network.4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2" Workload="ci--3510.3.8--n--645ca388a2-k8s-whisker--54667fdd86--lgvqq-eth0" Sep 6 01:22:35.936651 env[1445]: 2025-09-06 01:22:35.664 [INFO][3703] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2" HandleID="k8s-pod-network.4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2" Workload="ci--3510.3.8--n--645ca388a2-k8s-whisker--54667fdd86--lgvqq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002caff0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-645ca388a2", "pod":"whisker-54667fdd86-lgvqq", "timestamp":"2025-09-06 01:22:35.662522218 +0000 UTC"}, Hostname:"ci-3510.3.8-n-645ca388a2", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:22:35.936651 env[1445]: 2025-09-06 01:22:35.664 [INFO][3703] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:35.936651 env[1445]: 2025-09-06 01:22:35.664 [INFO][3703] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:35.936651 env[1445]: 2025-09-06 01:22:35.664 [INFO][3703] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-645ca388a2' Sep 6 01:22:35.936651 env[1445]: 2025-09-06 01:22:35.675 [INFO][3703] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:35.936651 env[1445]: 2025-09-06 01:22:35.681 [INFO][3703] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:35.936651 env[1445]: 2025-09-06 01:22:35.688 [INFO][3703] ipam/ipam.go 511: Trying affinity for 192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:35.936651 env[1445]: 2025-09-06 01:22:35.690 [INFO][3703] ipam/ipam.go 158: Attempting to load block cidr=192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:35.936651 env[1445]: 2025-09-06 01:22:35.692 [INFO][3703] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:35.936651 env[1445]: 2025-09-06 01:22:35.699 [INFO][3703] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.80.64/26 handle="k8s-pod-network.4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:35.936651 env[1445]: 2025-09-06 01:22:35.701 [INFO][3703] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2 Sep 6 01:22:35.936651 env[1445]: 2025-09-06 01:22:35.709 [INFO][3703] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.80.64/26 handle="k8s-pod-network.4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:35.936651 env[1445]: 2025-09-06 01:22:35.720 [INFO][3703] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.80.65/26] block=192.168.80.64/26 handle="k8s-pod-network.4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:35.936651 env[1445]: 2025-09-06 01:22:35.720 [INFO][3703] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.80.65/26] handle="k8s-pod-network.4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:35.936651 env[1445]: 2025-09-06 01:22:35.720 [INFO][3703] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:35.936651 env[1445]: 2025-09-06 01:22:35.720 [INFO][3703] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.80.65/26] IPv6=[] ContainerID="4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2" HandleID="k8s-pod-network.4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2" Workload="ci--3510.3.8--n--645ca388a2-k8s-whisker--54667fdd86--lgvqq-eth0" Sep 6 01:22:35.937269 env[1445]: 2025-09-06 01:22:35.722 [INFO][3685] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2" Namespace="calico-system" Pod="whisker-54667fdd86-lgvqq" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-whisker--54667fdd86--lgvqq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-whisker--54667fdd86--lgvqq-eth0", GenerateName:"whisker-54667fdd86-", Namespace:"calico-system", SelfLink:"", UID:"1b7d63d9-4f3e-44d1-8447-e2d80fa7932c", ResourceVersion:"901", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"54667fdd86", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"", Pod:"whisker-54667fdd86-lgvqq", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.80.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali25dc73ae275", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:35.937269 env[1445]: 2025-09-06 01:22:35.722 [INFO][3685] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.80.65/32] ContainerID="4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2" Namespace="calico-system" Pod="whisker-54667fdd86-lgvqq" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-whisker--54667fdd86--lgvqq-eth0" Sep 6 01:22:35.937269 env[1445]: 2025-09-06 01:22:35.722 [INFO][3685] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali25dc73ae275 ContainerID="4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2" Namespace="calico-system" Pod="whisker-54667fdd86-lgvqq" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-whisker--54667fdd86--lgvqq-eth0" Sep 6 01:22:35.937269 env[1445]: 2025-09-06 01:22:35.919 [INFO][3685] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2" Namespace="calico-system" Pod="whisker-54667fdd86-lgvqq" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-whisker--54667fdd86--lgvqq-eth0" Sep 6 01:22:35.937269 env[1445]: 2025-09-06 01:22:35.919 [INFO][3685] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2" Namespace="calico-system" Pod="whisker-54667fdd86-lgvqq" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-whisker--54667fdd86--lgvqq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-whisker--54667fdd86--lgvqq-eth0", GenerateName:"whisker-54667fdd86-", Namespace:"calico-system", SelfLink:"", UID:"1b7d63d9-4f3e-44d1-8447-e2d80fa7932c", ResourceVersion:"901", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"54667fdd86", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2", Pod:"whisker-54667fdd86-lgvqq", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.80.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali25dc73ae275", MAC:"7e:d6:c1:b6:54:a6", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:35.937269 env[1445]: 2025-09-06 01:22:35.934 [INFO][3685] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2" Namespace="calico-system" Pod="whisker-54667fdd86-lgvqq" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-whisker--54667fdd86--lgvqq-eth0" Sep 6 01:22:35.955716 env[1445]: time="2025-09-06T01:22:35.955627190Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:35.955972 env[1445]: time="2025-09-06T01:22:35.955945470Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:35.956077 env[1445]: time="2025-09-06T01:22:35.956055150Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:35.956392 env[1445]: time="2025-09-06T01:22:35.956360510Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2 pid=3759 runtime=io.containerd.runc.v2 Sep 6 01:22:35.982368 systemd[1]: Started cri-containerd-4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2.scope. Sep 6 01:22:35.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:35.999000 audit: BPF prog-id=143 op=LOAD Sep 6 01:22:36.000000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.000000 audit[3768]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3759 pid=3768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466643762613866613164316264313138636136383563386562333764 Sep 6 01:22:36.000000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.000000 audit[3768]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3759 pid=3768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466643762613866613164316264313138636136383563386562333764 Sep 6 01:22:36.001000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.001000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.001000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.001000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.001000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.001000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.001000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.001000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.001000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.001000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.001000 audit: BPF prog-id=144 op=LOAD Sep 6 01:22:36.001000 audit[3768]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3759 pid=3768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466643762613866613164316264313138636136383563386562333764 Sep 6 01:22:36.001000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.001000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.001000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.001000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.001000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.001000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.001000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.001000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.001000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.001000 audit: BPF prog-id=145 op=LOAD Sep 6 01:22:36.001000 audit[3768]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3759 pid=3768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466643762613866613164316264313138636136383563386562333764 Sep 6 01:22:36.002000 audit: BPF prog-id=145 op=UNLOAD Sep 6 01:22:36.002000 audit: BPF prog-id=144 op=UNLOAD Sep 6 01:22:36.002000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.002000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.002000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.002000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.002000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.002000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.002000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.002000 audit[3768]: AVC avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.002000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.002000 audit[3768]: AVC avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.002000 audit: BPF prog-id=146 op=LOAD Sep 6 01:22:36.002000 audit[3768]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3759 pid=3768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466643762613866613164316264313138636136383563386562333764 Sep 6 01:22:36.043444 env[1445]: time="2025-09-06T01:22:36.043399533Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-54667fdd86-lgvqq,Uid:1b7d63d9-4f3e-44d1-8447-e2d80fa7932c,Namespace:calico-system,Attempt:0,} returns sandbox id \"4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2\"" Sep 6 01:22:36.045066 env[1445]: time="2025-09-06T01:22:36.044897214Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\"" Sep 6 01:22:36.056000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.056000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.056000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.056000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.056000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.056000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.056000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.056000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.056000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.056000 audit: BPF prog-id=147 op=LOAD Sep 6 01:22:36.056000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff513cc98 a2=40 a3=fffff513ccc8 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.056000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:36.056000 audit: BPF prog-id=147 op=UNLOAD Sep 6 01:22:36.056000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.056000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=fffff513cdb0 a2=50 a3=0 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.056000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:36.065000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.065000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff513cd08 a2=28 a3=fffff513ce38 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.065000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:36.065000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.065000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff513cd38 a2=28 a3=fffff513ce68 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.065000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:36.065000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.065000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff513cbe8 a2=28 a3=fffff513cd18 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.065000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:36.066000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.066000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff513cd58 a2=28 a3=fffff513ce88 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.066000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:36.066000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.066000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff513cd38 a2=28 a3=fffff513ce68 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.066000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:36.066000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.066000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff513cd28 a2=28 a3=fffff513ce58 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.066000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:36.066000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.066000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff513cd58 a2=28 a3=fffff513ce88 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.066000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:36.066000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.066000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff513cd38 a2=28 a3=fffff513ce68 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.066000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:36.066000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.066000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff513cd58 a2=28 a3=fffff513ce88 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.066000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:36.067000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.067000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff513cd28 a2=28 a3=fffff513ce58 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.067000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:36.067000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.067000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff513cda8 a2=28 a3=fffff513cee8 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.067000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:36.067000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.067000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff513cae0 a2=50 a3=0 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.067000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:36.067000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.067000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.067000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.067000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.067000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.067000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.067000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.067000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.067000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.067000 audit: BPF prog-id=148 op=LOAD Sep 6 01:22:36.067000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff513cae8 a2=94 a3=5 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.067000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:36.068000 audit: BPF prog-id=148 op=UNLOAD Sep 6 01:22:36.068000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.068000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff513cbf0 a2=50 a3=0 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.068000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:36.068000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.068000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=fffff513cd38 a2=4 a3=3 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.068000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:36.068000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.068000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.068000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.068000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.068000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.068000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.068000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.068000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.068000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.068000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.068000 audit[3731]: AVC avc: denied { confidentiality } for pid=3731 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 01:22:36.068000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff513cd18 a2=94 a3=6 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.068000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:36.069000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.069000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.069000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.069000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.069000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.069000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.069000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.069000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.069000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.069000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.069000 audit[3731]: AVC avc: denied { confidentiality } for pid=3731 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 01:22:36.069000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff513c4e8 a2=94 a3=83 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.069000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:36.070000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.070000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.070000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.070000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.070000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.070000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.070000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.070000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.070000 audit[3731]: AVC avc: denied { perfmon } for pid=3731 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.070000 audit[3731]: AVC avc: denied { bpf } for pid=3731 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.070000 audit[3731]: AVC avc: denied { confidentiality } for pid=3731 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 01:22:36.070000 audit[3731]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff513c4e8 a2=94 a3=83 items=0 ppid=3619 pid=3731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.070000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit: BPF prog-id=149 op=LOAD Sep 6 01:22:36.078000 audit[3794]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc0a30238 a2=98 a3=ffffc0a30228 items=0 ppid=3619 pid=3794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.078000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 6 01:22:36.078000 audit: BPF prog-id=149 op=UNLOAD Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit: BPF prog-id=150 op=LOAD Sep 6 01:22:36.078000 audit[3794]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc0a300e8 a2=74 a3=95 items=0 ppid=3619 pid=3794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.078000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 6 01:22:36.078000 audit: BPF prog-id=150 op=UNLOAD Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.078000 audit: BPF prog-id=151 op=LOAD Sep 6 01:22:36.078000 audit[3794]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc0a30118 a2=40 a3=ffffc0a30148 items=0 ppid=3619 pid=3794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.078000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 6 01:22:36.078000 audit: BPF prog-id=151 op=UNLOAD Sep 6 01:22:36.218378 systemd-networkd[1608]: vxlan.calico: Link UP Sep 6 01:22:36.218385 systemd-networkd[1608]: vxlan.calico: Gained carrier Sep 6 01:22:36.245000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.245000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.245000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.245000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.245000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.245000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.245000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.245000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.245000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.245000 audit: BPF prog-id=152 op=LOAD Sep 6 01:22:36.245000 audit[3820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe9c85998 a2=98 a3=ffffe9c85988 items=0 ppid=3619 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.245000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:36.246000 audit: BPF prog-id=152 op=UNLOAD Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit: BPF prog-id=153 op=LOAD Sep 6 01:22:36.246000 audit[3820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe9c85678 a2=74 a3=95 items=0 ppid=3619 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.246000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:36.246000 audit: BPF prog-id=153 op=UNLOAD Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit: BPF prog-id=154 op=LOAD Sep 6 01:22:36.246000 audit[3820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe9c856d8 a2=94 a3=2 items=0 ppid=3619 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.246000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:36.246000 audit: BPF prog-id=154 op=UNLOAD Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit[3820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe9c85708 a2=28 a3=ffffe9c85838 items=0 ppid=3619 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.246000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit[3820]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe9c85738 a2=28 a3=ffffe9c85868 items=0 ppid=3619 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.246000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit[3820]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe9c855e8 a2=28 a3=ffffe9c85718 items=0 ppid=3619 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.246000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:36.246000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.246000 audit[3820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe9c85758 a2=28 a3=ffffe9c85888 items=0 ppid=3619 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.246000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe9c85738 a2=28 a3=ffffe9c85868 items=0 ppid=3619 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.247000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe9c85728 a2=28 a3=ffffe9c85858 items=0 ppid=3619 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.247000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe9c85758 a2=28 a3=ffffe9c85888 items=0 ppid=3619 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.247000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe9c85738 a2=28 a3=ffffe9c85868 items=0 ppid=3619 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.247000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe9c85758 a2=28 a3=ffffe9c85888 items=0 ppid=3619 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.247000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe9c85728 a2=28 a3=ffffe9c85858 items=0 ppid=3619 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.247000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe9c857a8 a2=28 a3=ffffe9c858e8 items=0 ppid=3619 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.247000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit: BPF prog-id=155 op=LOAD Sep 6 01:22:36.247000 audit[3820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe9c855c8 a2=40 a3=ffffe9c855f8 items=0 ppid=3619 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.247000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:36.247000 audit: BPF prog-id=155 op=UNLOAD Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffe9c855f0 a2=50 a3=0 items=0 ppid=3619 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.247000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffe9c855f0 a2=50 a3=0 items=0 ppid=3619 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.247000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit: BPF prog-id=156 op=LOAD Sep 6 01:22:36.247000 audit[3820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe9c84d58 a2=94 a3=2 items=0 ppid=3619 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.247000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:36.247000 audit: BPF prog-id=156 op=UNLOAD Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { perfmon } for pid=3820 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit[3820]: AVC avc: denied { bpf } for pid=3820 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.247000 audit: BPF prog-id=157 op=LOAD Sep 6 01:22:36.247000 audit[3820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe9c84ee8 a2=94 a3=30 items=0 ppid=3619 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.247000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit: BPF prog-id=158 op=LOAD Sep 6 01:22:36.262000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffff6d68b8 a2=98 a3=ffffff6d68a8 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.262000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.262000 audit: BPF prog-id=158 op=UNLOAD Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit: BPF prog-id=159 op=LOAD Sep 6 01:22:36.262000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffff6d6548 a2=74 a3=95 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.262000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.262000 audit: BPF prog-id=159 op=UNLOAD Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.262000 audit: BPF prog-id=160 op=LOAD Sep 6 01:22:36.262000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffff6d65a8 a2=94 a3=2 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.262000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.262000 audit: BPF prog-id=160 op=UNLOAD Sep 6 01:22:36.357000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.357000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.357000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.357000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.357000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.357000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.357000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.357000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.357000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.357000 audit: BPF prog-id=161 op=LOAD Sep 6 01:22:36.357000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffff6d6568 a2=40 a3=ffffff6d6598 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.357000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.357000 audit: BPF prog-id=161 op=UNLOAD Sep 6 01:22:36.357000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.357000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffff6d6680 a2=50 a3=0 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.357000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffff6d65d8 a2=28 a3=ffffff6d6708 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.366000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffff6d6608 a2=28 a3=ffffff6d6738 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.366000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffff6d64b8 a2=28 a3=ffffff6d65e8 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.366000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffff6d6628 a2=28 a3=ffffff6d6758 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.366000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffff6d6608 a2=28 a3=ffffff6d6738 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.366000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffff6d65f8 a2=28 a3=ffffff6d6728 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.366000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffff6d6628 a2=28 a3=ffffff6d6758 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.366000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffff6d6608 a2=28 a3=ffffff6d6738 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.366000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffff6d6628 a2=28 a3=ffffff6d6758 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.366000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffff6d65f8 a2=28 a3=ffffff6d6728 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.366000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffff6d6678 a2=28 a3=ffffff6d67b8 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.366000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffff6d63b0 a2=50 a3=0 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.366000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit: BPF prog-id=162 op=LOAD Sep 6 01:22:36.366000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffff6d63b8 a2=94 a3=5 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.366000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.366000 audit: BPF prog-id=162 op=UNLOAD Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffff6d64c0 a2=50 a3=0 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.366000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffff6d6608 a2=4 a3=3 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.366000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.366000 audit[3822]: AVC avc: denied { confidentiality } for pid=3822 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 01:22:36.366000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffff6d65e8 a2=94 a3=6 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.366000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { confidentiality } for pid=3822 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 01:22:36.367000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffff6d5db8 a2=94 a3=83 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.367000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { confidentiality } for pid=3822 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 6 01:22:36.367000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffff6d5db8 a2=94 a3=83 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.367000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffff6d77f8 a2=10 a3=ffffff6d78e8 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.367000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffff6d76b8 a2=10 a3=ffffff6d77a8 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.367000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffff6d7628 a2=10 a3=ffffff6d77a8 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.367000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.367000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:36.367000 audit[3822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffff6d7628 a2=10 a3=ffffff6d77a8 items=0 ppid=3619 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.367000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 6 01:22:36.372000 audit: BPF prog-id=157 op=UNLOAD Sep 6 01:22:36.504000 audit[3848]: NETFILTER_CFG table=mangle:106 family=2 entries=16 op=nft_register_chain pid=3848 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:36.504000 audit[3848]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffe217ba20 a2=0 a3=ffff9685efa8 items=0 ppid=3619 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.504000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:36.541000 audit[3851]: NETFILTER_CFG table=nat:107 family=2 entries=15 op=nft_register_chain pid=3851 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:36.541000 audit[3851]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffda183810 a2=0 a3=ffffaa14efa8 items=0 ppid=3619 pid=3851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.541000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:36.560000 audit[3847]: NETFILTER_CFG table=raw:108 family=2 entries=21 op=nft_register_chain pid=3847 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:36.560000 audit[3847]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffd1df44c0 a2=0 a3=ffff809b2fa8 items=0 ppid=3619 pid=3847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.560000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:36.590000 audit[3852]: NETFILTER_CFG table=filter:109 family=2 entries=94 op=nft_register_chain pid=3852 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:36.590000 audit[3852]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=53116 a0=3 a1=fffff7c07930 a2=0 a3=ffffbdc8ffa8 items=0 ppid=3619 pid=3852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:36.590000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:37.483110 env[1445]: time="2025-09-06T01:22:37.483059597Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:37.492307 env[1445]: time="2025-09-06T01:22:37.492251884Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:270a0129ec34c3ad6ae6d56c0afce111eb0baa25dfdacb63722ec5887bafd3c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:37.500011 env[1445]: time="2025-09-06T01:22:37.499974609Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:37.513953 env[1445]: time="2025-09-06T01:22:37.513903419Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:e7113761fc7633d515882f0d48b5c8d0b8e62f3f9d34823f2ee194bb16d2ec44,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:37.514802 env[1445]: time="2025-09-06T01:22:37.514770140Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\" returns image reference \"sha256:270a0129ec34c3ad6ae6d56c0afce111eb0baa25dfdacb63722ec5887bafd3c5\"" Sep 6 01:22:37.526976 env[1445]: time="2025-09-06T01:22:37.526937548Z" level=info msg="CreateContainer within sandbox \"4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Sep 6 01:22:37.599951 systemd-networkd[1608]: cali25dc73ae275: Gained IPv6LL Sep 6 01:22:37.631910 env[1445]: time="2025-09-06T01:22:37.631850702Z" level=info msg="CreateContainer within sandbox \"4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"d23dc65cb1bec27222021a6bdf306e2cf2a2989cbfcf44ee983c370df7656b73\"" Sep 6 01:22:37.632807 env[1445]: time="2025-09-06T01:22:37.632782463Z" level=info msg="StartContainer for \"d23dc65cb1bec27222021a6bdf306e2cf2a2989cbfcf44ee983c370df7656b73\"" Sep 6 01:22:37.664980 systemd[1]: run-containerd-runc-k8s.io-d23dc65cb1bec27222021a6bdf306e2cf2a2989cbfcf44ee983c370df7656b73-runc.ZELevF.mount: Deactivated successfully. Sep 6 01:22:37.667625 systemd[1]: Started cri-containerd-d23dc65cb1bec27222021a6bdf306e2cf2a2989cbfcf44ee983c370df7656b73.scope. Sep 6 01:22:37.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit: BPF prog-id=163 op=LOAD Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { bpf } for pid=3876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=3759 pid=3876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:37.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432336463363563623162656332373232323032316136626466333036 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { perfmon } for pid=3876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=3759 pid=3876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:37.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432336463363563623162656332373232323032316136626466333036 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { bpf } for pid=3876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { bpf } for pid=3876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { bpf } for pid=3876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { perfmon } for pid=3876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { perfmon } for pid=3876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { perfmon } for pid=3876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { perfmon } for pid=3876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { perfmon } for pid=3876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { bpf } for pid=3876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { bpf } for pid=3876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit: BPF prog-id=164 op=LOAD Sep 6 01:22:37.724000 audit[3876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=3759 pid=3876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:37.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432336463363563623162656332373232323032316136626466333036 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { bpf } for pid=3876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { bpf } for pid=3876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { perfmon } for pid=3876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { perfmon } for pid=3876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { perfmon } for pid=3876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { perfmon } for pid=3876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { perfmon } for pid=3876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { bpf } for pid=3876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { bpf } for pid=3876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit: BPF prog-id=165 op=LOAD Sep 6 01:22:37.724000 audit[3876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=3759 pid=3876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:37.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432336463363563623162656332373232323032316136626466333036 Sep 6 01:22:37.724000 audit: BPF prog-id=165 op=UNLOAD Sep 6 01:22:37.724000 audit: BPF prog-id=164 op=UNLOAD Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { bpf } for pid=3876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { bpf } for pid=3876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { bpf } for pid=3876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { perfmon } for pid=3876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { perfmon } for pid=3876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { perfmon } for pid=3876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { perfmon } for pid=3876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { perfmon } for pid=3876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { bpf } for pid=3876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit[3876]: AVC avc: denied { bpf } for pid=3876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:37.724000 audit: BPF prog-id=166 op=LOAD Sep 6 01:22:37.724000 audit[3876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=3759 pid=3876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:37.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432336463363563623162656332373232323032316136626466333036 Sep 6 01:22:37.769000 audit[3887]: AVC avc: denied { search } for pid=3887 comm="nginx" name="crypto" dev="proc" ino=25907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c8,c228 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Sep 6 01:22:37.769000 audit[3887]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffffa3efb958 a2=0 a3=0 items=0 ppid=3759 pid=3887 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c8,c228 key=(null) Sep 6 01:22:37.769000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Sep 6 01:22:37.810560 env[1445]: time="2025-09-06T01:22:37.810514349Z" level=info msg="StartContainer for \"d23dc65cb1bec27222021a6bdf306e2cf2a2989cbfcf44ee983c370df7656b73\" returns successfully" Sep 6 01:22:37.812296 env[1445]: time="2025-09-06T01:22:37.812268670Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\"" Sep 6 01:22:37.918436 systemd-networkd[1608]: vxlan.calico: Gained IPv6LL Sep 6 01:22:38.907982 env[1445]: time="2025-09-06T01:22:38.907944637Z" level=info msg="StopPodSandbox for \"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\"" Sep 6 01:22:38.908553 env[1445]: time="2025-09-06T01:22:38.908396117Z" level=info msg="StopPodSandbox for \"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\"" Sep 6 01:22:39.030311 env[1445]: 2025-09-06 01:22:38.983 [INFO][3927] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Sep 6 01:22:39.030311 env[1445]: 2025-09-06 01:22:38.984 [INFO][3927] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" iface="eth0" netns="/var/run/netns/cni-2d2e5f83-ac7a-28cf-ae66-2aec61a4852f" Sep 6 01:22:39.030311 env[1445]: 2025-09-06 01:22:38.984 [INFO][3927] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" iface="eth0" netns="/var/run/netns/cni-2d2e5f83-ac7a-28cf-ae66-2aec61a4852f" Sep 6 01:22:39.030311 env[1445]: 2025-09-06 01:22:38.984 [INFO][3927] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" iface="eth0" netns="/var/run/netns/cni-2d2e5f83-ac7a-28cf-ae66-2aec61a4852f" Sep 6 01:22:39.030311 env[1445]: 2025-09-06 01:22:38.984 [INFO][3927] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Sep 6 01:22:39.030311 env[1445]: 2025-09-06 01:22:38.984 [INFO][3927] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Sep 6 01:22:39.030311 env[1445]: 2025-09-06 01:22:39.017 [INFO][3939] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" HandleID="k8s-pod-network.3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0" Sep 6 01:22:39.030311 env[1445]: 2025-09-06 01:22:39.017 [INFO][3939] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:39.030311 env[1445]: 2025-09-06 01:22:39.017 [INFO][3939] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:39.030311 env[1445]: 2025-09-06 01:22:39.026 [WARNING][3939] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" HandleID="k8s-pod-network.3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0" Sep 6 01:22:39.030311 env[1445]: 2025-09-06 01:22:39.026 [INFO][3939] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" HandleID="k8s-pod-network.3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0" Sep 6 01:22:39.030311 env[1445]: 2025-09-06 01:22:39.027 [INFO][3939] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:39.030311 env[1445]: 2025-09-06 01:22:39.029 [INFO][3927] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Sep 6 01:22:39.032611 systemd[1]: run-netns-cni\x2d2d2e5f83\x2dac7a\x2d28cf\x2dae66\x2d2aec61a4852f.mount: Deactivated successfully. Sep 6 01:22:39.034311 env[1445]: time="2025-09-06T01:22:39.034117125Z" level=info msg="TearDown network for sandbox \"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\" successfully" Sep 6 01:22:39.034311 env[1445]: time="2025-09-06T01:22:39.034153965Z" level=info msg="StopPodSandbox for \"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\" returns successfully" Sep 6 01:22:39.035489 env[1445]: time="2025-09-06T01:22:39.035452086Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-wd2qh,Uid:bd32de34-d0d2-42a3-9930-aa9a894cc0ac,Namespace:kube-system,Attempt:1,}" Sep 6 01:22:39.061026 env[1445]: 2025-09-06 01:22:39.006 [INFO][3926] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Sep 6 01:22:39.061026 env[1445]: 2025-09-06 01:22:39.006 [INFO][3926] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" iface="eth0" netns="/var/run/netns/cni-a161e311-c0a7-a3db-8642-326cba3c7e93" Sep 6 01:22:39.061026 env[1445]: 2025-09-06 01:22:39.007 [INFO][3926] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" iface="eth0" netns="/var/run/netns/cni-a161e311-c0a7-a3db-8642-326cba3c7e93" Sep 6 01:22:39.061026 env[1445]: 2025-09-06 01:22:39.007 [INFO][3926] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" iface="eth0" netns="/var/run/netns/cni-a161e311-c0a7-a3db-8642-326cba3c7e93" Sep 6 01:22:39.061026 env[1445]: 2025-09-06 01:22:39.007 [INFO][3926] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Sep 6 01:22:39.061026 env[1445]: 2025-09-06 01:22:39.007 [INFO][3926] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Sep 6 01:22:39.061026 env[1445]: 2025-09-06 01:22:39.045 [INFO][3945] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" HandleID="k8s-pod-network.58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0" Sep 6 01:22:39.061026 env[1445]: 2025-09-06 01:22:39.045 [INFO][3945] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:39.061026 env[1445]: 2025-09-06 01:22:39.045 [INFO][3945] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:39.061026 env[1445]: 2025-09-06 01:22:39.055 [WARNING][3945] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" HandleID="k8s-pod-network.58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0" Sep 6 01:22:39.061026 env[1445]: 2025-09-06 01:22:39.055 [INFO][3945] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" HandleID="k8s-pod-network.58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0" Sep 6 01:22:39.061026 env[1445]: 2025-09-06 01:22:39.056 [INFO][3945] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:39.061026 env[1445]: 2025-09-06 01:22:39.058 [INFO][3926] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Sep 6 01:22:39.065831 env[1445]: time="2025-09-06T01:22:39.063763425Z" level=info msg="TearDown network for sandbox \"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\" successfully" Sep 6 01:22:39.065831 env[1445]: time="2025-09-06T01:22:39.063808385Z" level=info msg="StopPodSandbox for \"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\" returns successfully" Sep 6 01:22:39.066262 env[1445]: time="2025-09-06T01:22:39.066229907Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7bdc9c645-jw4z2,Uid:cefa4131-48b4-4105-8378-5bb83a604ba5,Namespace:calico-system,Attempt:1,}" Sep 6 01:22:39.066355 systemd[1]: run-netns-cni\x2da161e311\x2dc0a7\x2da3db\x2d8642\x2d326cba3c7e93.mount: Deactivated successfully. Sep 6 01:22:39.249931 systemd-networkd[1608]: cali0d3fb6f056f: Link UP Sep 6 01:22:39.251071 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0d3fb6f056f: link becomes ready Sep 6 01:22:39.251039 systemd-networkd[1608]: cali0d3fb6f056f: Gained carrier Sep 6 01:22:39.274086 env[1445]: 2025-09-06 01:22:39.154 [INFO][3952] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0 coredns-674b8bbfcf- kube-system bd32de34-d0d2-42a3-9930-aa9a894cc0ac 918 0 2025-09-06 01:21:58 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-645ca388a2 coredns-674b8bbfcf-wd2qh eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali0d3fb6f056f [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd" Namespace="kube-system" Pod="coredns-674b8bbfcf-wd2qh" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-" Sep 6 01:22:39.274086 env[1445]: 2025-09-06 01:22:39.155 [INFO][3952] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd" Namespace="kube-system" Pod="coredns-674b8bbfcf-wd2qh" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0" Sep 6 01:22:39.274086 env[1445]: 2025-09-06 01:22:39.189 [INFO][3973] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd" HandleID="k8s-pod-network.899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0" Sep 6 01:22:39.274086 env[1445]: 2025-09-06 01:22:39.190 [INFO][3973] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd" HandleID="k8s-pod-network.899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002caff0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-645ca388a2", "pod":"coredns-674b8bbfcf-wd2qh", "timestamp":"2025-09-06 01:22:39.189525592 +0000 UTC"}, Hostname:"ci-3510.3.8-n-645ca388a2", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:22:39.274086 env[1445]: 2025-09-06 01:22:39.190 [INFO][3973] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:39.274086 env[1445]: 2025-09-06 01:22:39.191 [INFO][3973] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:39.274086 env[1445]: 2025-09-06 01:22:39.191 [INFO][3973] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-645ca388a2' Sep 6 01:22:39.274086 env[1445]: 2025-09-06 01:22:39.205 [INFO][3973] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:39.274086 env[1445]: 2025-09-06 01:22:39.210 [INFO][3973] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:39.274086 env[1445]: 2025-09-06 01:22:39.214 [INFO][3973] ipam/ipam.go 511: Trying affinity for 192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:39.274086 env[1445]: 2025-09-06 01:22:39.215 [INFO][3973] ipam/ipam.go 158: Attempting to load block cidr=192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:39.274086 env[1445]: 2025-09-06 01:22:39.217 [INFO][3973] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:39.274086 env[1445]: 2025-09-06 01:22:39.217 [INFO][3973] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.80.64/26 handle="k8s-pod-network.899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:39.274086 env[1445]: 2025-09-06 01:22:39.219 [INFO][3973] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd Sep 6 01:22:39.274086 env[1445]: 2025-09-06 01:22:39.223 [INFO][3973] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.80.64/26 handle="k8s-pod-network.899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:39.274086 env[1445]: 2025-09-06 01:22:39.233 [INFO][3973] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.80.66/26] block=192.168.80.64/26 handle="k8s-pod-network.899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:39.274086 env[1445]: 2025-09-06 01:22:39.234 [INFO][3973] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.80.66/26] handle="k8s-pod-network.899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:39.274086 env[1445]: 2025-09-06 01:22:39.234 [INFO][3973] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:39.274086 env[1445]: 2025-09-06 01:22:39.234 [INFO][3973] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.80.66/26] IPv6=[] ContainerID="899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd" HandleID="k8s-pod-network.899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0" Sep 6 01:22:39.274664 env[1445]: 2025-09-06 01:22:39.235 [INFO][3952] cni-plugin/k8s.go 418: Populated endpoint ContainerID="899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd" Namespace="kube-system" Pod="coredns-674b8bbfcf-wd2qh" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"bd32de34-d0d2-42a3-9930-aa9a894cc0ac", ResourceVersion:"918", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 21, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"", Pod:"coredns-674b8bbfcf-wd2qh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.80.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0d3fb6f056f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:39.274664 env[1445]: 2025-09-06 01:22:39.235 [INFO][3952] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.80.66/32] ContainerID="899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd" Namespace="kube-system" Pod="coredns-674b8bbfcf-wd2qh" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0" Sep 6 01:22:39.274664 env[1445]: 2025-09-06 01:22:39.235 [INFO][3952] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0d3fb6f056f ContainerID="899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd" Namespace="kube-system" Pod="coredns-674b8bbfcf-wd2qh" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0" Sep 6 01:22:39.274664 env[1445]: 2025-09-06 01:22:39.255 [INFO][3952] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd" Namespace="kube-system" Pod="coredns-674b8bbfcf-wd2qh" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0" Sep 6 01:22:39.274664 env[1445]: 2025-09-06 01:22:39.256 [INFO][3952] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd" Namespace="kube-system" Pod="coredns-674b8bbfcf-wd2qh" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"bd32de34-d0d2-42a3-9930-aa9a894cc0ac", ResourceVersion:"918", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 21, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd", Pod:"coredns-674b8bbfcf-wd2qh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.80.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0d3fb6f056f", MAC:"e6:a9:58:5c:1d:bf", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:39.274664 env[1445]: 2025-09-06 01:22:39.272 [INFO][3952] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd" Namespace="kube-system" Pod="coredns-674b8bbfcf-wd2qh" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0" Sep 6 01:22:39.297839 kernel: kauditd_printk_skb: 707 callbacks suppressed Sep 6 01:22:39.297994 kernel: audit: type=1325 audit(1757121759.286:1115): table=filter:110 family=2 entries=42 op=nft_register_chain pid=3999 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:39.286000 audit[3999]: NETFILTER_CFG table=filter:110 family=2 entries=42 op=nft_register_chain pid=3999 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:39.286000 audit[3999]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=22552 a0=3 a1=ffffceca2190 a2=0 a3=ffffab510fa8 items=0 ppid=3619 pid=3999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:39.339554 kernel: audit: type=1300 audit(1757121759.286:1115): arch=c00000b7 syscall=211 success=yes exit=22552 a0=3 a1=ffffceca2190 a2=0 a3=ffffab510fa8 items=0 ppid=3619 pid=3999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:39.340409 env[1445]: time="2025-09-06T01:22:39.316430040Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:39.340409 env[1445]: time="2025-09-06T01:22:39.316466600Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:39.340409 env[1445]: time="2025-09-06T01:22:39.316476400Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:39.340409 env[1445]: time="2025-09-06T01:22:39.316581680Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd pid=4008 runtime=io.containerd.runc.v2 Sep 6 01:22:39.286000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:39.357616 kernel: audit: type=1327 audit(1757121759.286:1115): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:39.373138 systemd[1]: Started cri-containerd-899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd.scope. Sep 6 01:22:39.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.430176 kernel: audit: type=1400 audit(1757121759.391:1116): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.430348 kernel: audit: type=1400 audit(1757121759.391:1117): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.450319 kernel: audit: type=1400 audit(1757121759.391:1118): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.470054 systemd-networkd[1608]: cali5adfbb23cc7: Link UP Sep 6 01:22:39.475539 kernel: audit: type=1400 audit(1757121759.391:1119): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.475667 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali5adfbb23cc7: link becomes ready Sep 6 01:22:39.483970 systemd-networkd[1608]: cali5adfbb23cc7: Gained carrier Sep 6 01:22:39.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.502386 kernel: audit: type=1400 audit(1757121759.391:1120): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.520841 kernel: audit: type=1400 audit(1757121759.391:1121): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.522849 kernel: audit: type=1400 audit(1757121759.391:1122): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.541690 env[1445]: 2025-09-06 01:22:39.202 [INFO][3964] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0 calico-kube-controllers-7bdc9c645- calico-system cefa4131-48b4-4105-8378-5bb83a604ba5 919 0 2025-09-06 01:22:15 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:7bdc9c645 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510.3.8-n-645ca388a2 calico-kube-controllers-7bdc9c645-jw4z2 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali5adfbb23cc7 [] [] }} ContainerID="e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89" Namespace="calico-system" Pod="calico-kube-controllers-7bdc9c645-jw4z2" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-" Sep 6 01:22:39.541690 env[1445]: 2025-09-06 01:22:39.202 [INFO][3964] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89" Namespace="calico-system" Pod="calico-kube-controllers-7bdc9c645-jw4z2" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0" Sep 6 01:22:39.541690 env[1445]: 2025-09-06 01:22:39.236 [INFO][3984] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89" HandleID="k8s-pod-network.e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0" Sep 6 01:22:39.541690 env[1445]: 2025-09-06 01:22:39.236 [INFO][3984] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89" HandleID="k8s-pod-network.e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002caff0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-645ca388a2", "pod":"calico-kube-controllers-7bdc9c645-jw4z2", "timestamp":"2025-09-06 01:22:39.236692865 +0000 UTC"}, Hostname:"ci-3510.3.8-n-645ca388a2", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:22:39.541690 env[1445]: 2025-09-06 01:22:39.236 [INFO][3984] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:39.541690 env[1445]: 2025-09-06 01:22:39.237 [INFO][3984] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:39.541690 env[1445]: 2025-09-06 01:22:39.237 [INFO][3984] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-645ca388a2' Sep 6 01:22:39.541690 env[1445]: 2025-09-06 01:22:39.310 [INFO][3984] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:39.541690 env[1445]: 2025-09-06 01:22:39.360 [INFO][3984] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:39.541690 env[1445]: 2025-09-06 01:22:39.364 [INFO][3984] ipam/ipam.go 511: Trying affinity for 192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:39.541690 env[1445]: 2025-09-06 01:22:39.368 [INFO][3984] ipam/ipam.go 158: Attempting to load block cidr=192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:39.541690 env[1445]: 2025-09-06 01:22:39.386 [INFO][3984] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:39.541690 env[1445]: 2025-09-06 01:22:39.386 [INFO][3984] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.80.64/26 handle="k8s-pod-network.e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:39.541690 env[1445]: 2025-09-06 01:22:39.388 [INFO][3984] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89 Sep 6 01:22:39.541690 env[1445]: 2025-09-06 01:22:39.413 [INFO][3984] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.80.64/26 handle="k8s-pod-network.e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:39.541690 env[1445]: 2025-09-06 01:22:39.452 [INFO][3984] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.80.67/26] block=192.168.80.64/26 handle="k8s-pod-network.e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:39.541690 env[1445]: 2025-09-06 01:22:39.453 [INFO][3984] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.80.67/26] handle="k8s-pod-network.e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:39.541690 env[1445]: 2025-09-06 01:22:39.453 [INFO][3984] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:39.541690 env[1445]: 2025-09-06 01:22:39.453 [INFO][3984] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.80.67/26] IPv6=[] ContainerID="e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89" HandleID="k8s-pod-network.e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0" Sep 6 01:22:39.542328 env[1445]: 2025-09-06 01:22:39.456 [INFO][3964] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89" Namespace="calico-system" Pod="calico-kube-controllers-7bdc9c645-jw4z2" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0", GenerateName:"calico-kube-controllers-7bdc9c645-", Namespace:"calico-system", SelfLink:"", UID:"cefa4131-48b4-4105-8378-5bb83a604ba5", ResourceVersion:"919", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7bdc9c645", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"", Pod:"calico-kube-controllers-7bdc9c645-jw4z2", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.80.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali5adfbb23cc7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:39.542328 env[1445]: 2025-09-06 01:22:39.456 [INFO][3964] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.80.67/32] ContainerID="e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89" Namespace="calico-system" Pod="calico-kube-controllers-7bdc9c645-jw4z2" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0" Sep 6 01:22:39.542328 env[1445]: 2025-09-06 01:22:39.456 [INFO][3964] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali5adfbb23cc7 ContainerID="e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89" Namespace="calico-system" Pod="calico-kube-controllers-7bdc9c645-jw4z2" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0" Sep 6 01:22:39.542328 env[1445]: 2025-09-06 01:22:39.471 [INFO][3964] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89" Namespace="calico-system" Pod="calico-kube-controllers-7bdc9c645-jw4z2" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0" Sep 6 01:22:39.542328 env[1445]: 2025-09-06 01:22:39.483 [INFO][3964] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89" Namespace="calico-system" Pod="calico-kube-controllers-7bdc9c645-jw4z2" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0", GenerateName:"calico-kube-controllers-7bdc9c645-", Namespace:"calico-system", SelfLink:"", UID:"cefa4131-48b4-4105-8378-5bb83a604ba5", ResourceVersion:"919", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7bdc9c645", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89", Pod:"calico-kube-controllers-7bdc9c645-jw4z2", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.80.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali5adfbb23cc7", MAC:"26:77:85:2a:7a:c0", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:39.542328 env[1445]: 2025-09-06 01:22:39.522 [INFO][3964] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89" Namespace="calico-system" Pod="calico-kube-controllers-7bdc9c645-jw4z2" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0" Sep 6 01:22:39.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.410000 audit: BPF prog-id=167 op=LOAD Sep 6 01:22:39.552786 env[1445]: time="2025-09-06T01:22:39.552683003Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-wd2qh,Uid:bd32de34-d0d2-42a3-9930-aa9a894cc0ac,Namespace:kube-system,Attempt:1,} returns sandbox id \"899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd\"" Sep 6 01:22:39.431000 audit[4018]: AVC avc: denied { bpf } for pid=4018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.431000 audit[4018]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4008 pid=4018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:39.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839393831353930356430383864333835626439666234383033326435 Sep 6 01:22:39.431000 audit[4018]: AVC avc: denied { perfmon } for pid=4018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.431000 audit[4018]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4008 pid=4018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:39.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839393831353930356430383864333835626439666234383033326435 Sep 6 01:22:39.431000 audit[4018]: AVC avc: denied { bpf } for pid=4018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.431000 audit[4018]: AVC avc: denied { bpf } for pid=4018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.431000 audit[4018]: AVC avc: denied { bpf } for pid=4018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.431000 audit[4018]: AVC avc: denied { perfmon } for pid=4018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.431000 audit[4018]: AVC avc: denied { perfmon } for pid=4018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.431000 audit[4018]: AVC avc: denied { perfmon } for pid=4018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.431000 audit[4018]: AVC avc: denied { perfmon } for pid=4018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.431000 audit[4018]: AVC avc: denied { perfmon } for pid=4018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.431000 audit[4018]: AVC avc: denied { bpf } for pid=4018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.431000 audit[4018]: AVC avc: denied { bpf } for pid=4018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.431000 audit: BPF prog-id=168 op=LOAD Sep 6 01:22:39.431000 audit[4018]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4008 pid=4018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:39.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839393831353930356430383864333835626439666234383033326435 Sep 6 01:22:39.447000 audit[4018]: AVC avc: denied { bpf } for pid=4018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.447000 audit[4018]: AVC avc: denied { bpf } for pid=4018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.447000 audit[4018]: AVC avc: denied { perfmon } for pid=4018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.447000 audit[4018]: AVC avc: denied { perfmon } for pid=4018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.447000 audit[4018]: AVC avc: denied { perfmon } for pid=4018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.447000 audit[4018]: AVC avc: denied { perfmon } for pid=4018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.447000 audit[4018]: AVC avc: denied { perfmon } for pid=4018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.447000 audit[4018]: AVC avc: denied { bpf } for pid=4018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.447000 audit[4018]: AVC avc: denied { bpf } for pid=4018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.447000 audit: BPF prog-id=169 op=LOAD Sep 6 01:22:39.447000 audit[4018]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4008 pid=4018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:39.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839393831353930356430383864333835626439666234383033326435 Sep 6 01:22:39.447000 audit: BPF prog-id=169 op=UNLOAD Sep 6 01:22:39.447000 audit: BPF prog-id=168 op=UNLOAD Sep 6 01:22:39.447000 audit[4018]: AVC avc: denied { bpf } for pid=4018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.447000 audit[4018]: AVC avc: denied { bpf } for pid=4018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.447000 audit[4018]: AVC avc: denied { bpf } for pid=4018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.447000 audit[4018]: AVC avc: denied { perfmon } for pid=4018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.447000 audit[4018]: AVC avc: denied { perfmon } for pid=4018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.447000 audit[4018]: AVC avc: denied { perfmon } for pid=4018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.447000 audit[4018]: AVC avc: denied { perfmon } for pid=4018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.447000 audit[4018]: AVC avc: denied { perfmon } for pid=4018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.447000 audit[4018]: AVC avc: denied { bpf } for pid=4018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.447000 audit[4018]: AVC avc: denied { bpf } for pid=4018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.447000 audit: BPF prog-id=170 op=LOAD Sep 6 01:22:39.447000 audit[4018]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4008 pid=4018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:39.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839393831353930356430383864333835626439666234383033326435 Sep 6 01:22:39.549000 audit[4038]: NETFILTER_CFG table=filter:111 family=2 entries=40 op=nft_register_chain pid=4038 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:39.549000 audit[4038]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20764 a0=3 a1=ffffdc5b7d30 a2=0 a3=ffffba2cdfa8 items=0 ppid=3619 pid=4038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:39.549000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:39.572243 env[1445]: time="2025-09-06T01:22:39.568597534Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:39.572243 env[1445]: time="2025-09-06T01:22:39.568634214Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:39.572243 env[1445]: time="2025-09-06T01:22:39.568644694Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:39.572243 env[1445]: time="2025-09-06T01:22:39.568873934Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89 pid=4056 runtime=io.containerd.runc.v2 Sep 6 01:22:39.573302 env[1445]: time="2025-09-06T01:22:39.573219897Z" level=info msg="CreateContainer within sandbox \"899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 6 01:22:39.588796 systemd[1]: Started cri-containerd-e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89.scope. Sep 6 01:22:39.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.606000 audit: BPF prog-id=171 op=LOAD Sep 6 01:22:39.607000 audit[4067]: AVC avc: denied { bpf } for pid=4067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.607000 audit[4067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4056 pid=4067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:39.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538636539353533383564653738306364653931303966666538643462 Sep 6 01:22:39.609000 audit[4067]: AVC avc: denied { perfmon } for pid=4067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.609000 audit[4067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4056 pid=4067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:39.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538636539353533383564653738306364653931303966666538643462 Sep 6 01:22:39.609000 audit[4067]: AVC avc: denied { bpf } for pid=4067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.609000 audit[4067]: AVC avc: denied { bpf } for pid=4067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.609000 audit[4067]: AVC avc: denied { bpf } for pid=4067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.609000 audit[4067]: AVC avc: denied { perfmon } for pid=4067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.609000 audit[4067]: AVC avc: denied { perfmon } for pid=4067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.609000 audit[4067]: AVC avc: denied { perfmon } for pid=4067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.609000 audit[4067]: AVC avc: denied { perfmon } for pid=4067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.609000 audit[4067]: AVC avc: denied { perfmon } for pid=4067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.609000 audit[4067]: AVC avc: denied { bpf } for pid=4067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.609000 audit[4067]: AVC avc: denied { bpf } for pid=4067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.609000 audit: BPF prog-id=172 op=LOAD Sep 6 01:22:39.609000 audit[4067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4056 pid=4067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:39.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538636539353533383564653738306364653931303966666538643462 Sep 6 01:22:39.610000 audit[4067]: AVC avc: denied { bpf } for pid=4067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.610000 audit[4067]: AVC avc: denied { bpf } for pid=4067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.610000 audit[4067]: AVC avc: denied { perfmon } for pid=4067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.610000 audit[4067]: AVC avc: denied { perfmon } for pid=4067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.610000 audit[4067]: AVC avc: denied { perfmon } for pid=4067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.610000 audit[4067]: AVC avc: denied { perfmon } for pid=4067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.610000 audit[4067]: AVC avc: denied { perfmon } for pid=4067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.610000 audit[4067]: AVC avc: denied { bpf } for pid=4067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.610000 audit[4067]: AVC avc: denied { bpf } for pid=4067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.610000 audit: BPF prog-id=173 op=LOAD Sep 6 01:22:39.610000 audit[4067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4056 pid=4067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:39.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538636539353533383564653738306364653931303966666538643462 Sep 6 01:22:39.611000 audit: BPF prog-id=173 op=UNLOAD Sep 6 01:22:39.611000 audit: BPF prog-id=172 op=UNLOAD Sep 6 01:22:39.612000 audit[4067]: AVC avc: denied { bpf } for pid=4067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.612000 audit[4067]: AVC avc: denied { bpf } for pid=4067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.612000 audit[4067]: AVC avc: denied { bpf } for pid=4067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.612000 audit[4067]: AVC avc: denied { perfmon } for pid=4067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.612000 audit[4067]: AVC avc: denied { perfmon } for pid=4067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.612000 audit[4067]: AVC avc: denied { perfmon } for pid=4067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.612000 audit[4067]: AVC avc: denied { perfmon } for pid=4067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.612000 audit[4067]: AVC avc: denied { perfmon } for pid=4067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.612000 audit[4067]: AVC avc: denied { bpf } for pid=4067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.612000 audit[4067]: AVC avc: denied { bpf } for pid=4067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.612000 audit: BPF prog-id=174 op=LOAD Sep 6 01:22:39.612000 audit[4067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4056 pid=4067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:39.612000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538636539353533383564653738306364653931303966666538643462 Sep 6 01:22:39.633696 env[1445]: time="2025-09-06T01:22:39.633654299Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7bdc9c645-jw4z2,Uid:cefa4131-48b4-4105-8378-5bb83a604ba5,Namespace:calico-system,Attempt:1,} returns sandbox id \"e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89\"" Sep 6 01:22:39.636203 env[1445]: time="2025-09-06T01:22:39.636166381Z" level=info msg="CreateContainer within sandbox \"899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"eae4b071b1ab39e9e38ef29617d5061ccb545337554eee852031d12760cbb140\"" Sep 6 01:22:39.637308 env[1445]: time="2025-09-06T01:22:39.637284982Z" level=info msg="StartContainer for \"eae4b071b1ab39e9e38ef29617d5061ccb545337554eee852031d12760cbb140\"" Sep 6 01:22:39.660923 systemd[1]: Started cri-containerd-eae4b071b1ab39e9e38ef29617d5061ccb545337554eee852031d12760cbb140.scope. Sep 6 01:22:39.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.671000 audit: BPF prog-id=175 op=LOAD Sep 6 01:22:39.672000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.672000 audit[4098]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4008 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:39.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561653462303731623161623339653965333865663239363137643530 Sep 6 01:22:39.672000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.672000 audit[4098]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4008 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:39.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561653462303731623161623339653965333865663239363137643530 Sep 6 01:22:39.673000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.673000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.673000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.673000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.673000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.673000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.673000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.673000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.673000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.673000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.673000 audit: BPF prog-id=176 op=LOAD Sep 6 01:22:39.673000 audit[4098]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4008 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:39.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561653462303731623161623339653965333865663239363137643530 Sep 6 01:22:39.674000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.674000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.674000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.674000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.674000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.674000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.674000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.674000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.674000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.674000 audit: BPF prog-id=177 op=LOAD Sep 6 01:22:39.674000 audit[4098]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4008 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:39.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561653462303731623161623339653965333865663239363137643530 Sep 6 01:22:39.675000 audit: BPF prog-id=177 op=UNLOAD Sep 6 01:22:39.675000 audit: BPF prog-id=176 op=UNLOAD Sep 6 01:22:39.675000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.675000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.675000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.675000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.675000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.675000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.675000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.675000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.675000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.675000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:39.675000 audit: BPF prog-id=178 op=LOAD Sep 6 01:22:39.675000 audit[4098]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4008 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:39.675000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561653462303731623161623339653965333865663239363137643530 Sep 6 01:22:39.699560 env[1445]: time="2025-09-06T01:22:39.699511505Z" level=info msg="StartContainer for \"eae4b071b1ab39e9e38ef29617d5061ccb545337554eee852031d12760cbb140\" returns successfully" Sep 6 01:22:39.703000 audit[4109]: AVC avc: denied { getattr } for pid=4109 comm="coredns" path="cgroup:[4026532658]" dev="nsfs" ino=4026532658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c319,c831 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 6 01:22:39.703000 audit[4109]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056810 a2=400014c578 a3=0 items=0 ppid=4008 pid=4109 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c319,c831 key=(null) Sep 6 01:22:39.703000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 6 01:22:39.910088 env[1445]: time="2025-09-06T01:22:39.910049650Z" level=info msg="StopPodSandbox for \"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\"" Sep 6 01:22:40.011493 env[1445]: 2025-09-06 01:22:39.967 [INFO][4136] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Sep 6 01:22:40.011493 env[1445]: 2025-09-06 01:22:39.967 [INFO][4136] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" iface="eth0" netns="/var/run/netns/cni-d700e96c-7eca-def8-2570-02974398c347" Sep 6 01:22:40.011493 env[1445]: 2025-09-06 01:22:39.968 [INFO][4136] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" iface="eth0" netns="/var/run/netns/cni-d700e96c-7eca-def8-2570-02974398c347" Sep 6 01:22:40.011493 env[1445]: 2025-09-06 01:22:39.968 [INFO][4136] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" iface="eth0" netns="/var/run/netns/cni-d700e96c-7eca-def8-2570-02974398c347" Sep 6 01:22:40.011493 env[1445]: 2025-09-06 01:22:39.968 [INFO][4136] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Sep 6 01:22:40.011493 env[1445]: 2025-09-06 01:22:39.968 [INFO][4136] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Sep 6 01:22:40.011493 env[1445]: 2025-09-06 01:22:39.995 [INFO][4144] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" HandleID="k8s-pod-network.4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0" Sep 6 01:22:40.011493 env[1445]: 2025-09-06 01:22:39.996 [INFO][4144] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:40.011493 env[1445]: 2025-09-06 01:22:39.996 [INFO][4144] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:40.011493 env[1445]: 2025-09-06 01:22:40.006 [WARNING][4144] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" HandleID="k8s-pod-network.4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0" Sep 6 01:22:40.011493 env[1445]: 2025-09-06 01:22:40.006 [INFO][4144] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" HandleID="k8s-pod-network.4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0" Sep 6 01:22:40.011493 env[1445]: 2025-09-06 01:22:40.007 [INFO][4144] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:40.011493 env[1445]: 2025-09-06 01:22:40.009 [INFO][4136] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Sep 6 01:22:40.012430 env[1445]: time="2025-09-06T01:22:40.012377001Z" level=info msg="TearDown network for sandbox \"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\" successfully" Sep 6 01:22:40.012525 env[1445]: time="2025-09-06T01:22:40.012508201Z" level=info msg="StopPodSandbox for \"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\" returns successfully" Sep 6 01:22:40.013614 env[1445]: time="2025-09-06T01:22:40.013540682Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84c8dc6bc5-l6cl4,Uid:18882596-6b47-476c-bb54-87518393b7f7,Namespace:calico-apiserver,Attempt:1,}" Sep 6 01:22:40.034935 systemd[1]: run-netns-cni\x2dd700e96c\x2d7eca\x2ddef8\x2d2570\x2d02974398c347.mount: Deactivated successfully. Sep 6 01:22:40.153577 kubelet[2462]: I0906 01:22:40.153273 2462 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-wd2qh" podStartSLOduration=42.153251617 podStartE2EDuration="42.153251617s" podCreationTimestamp="2025-09-06 01:21:58 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 01:22:40.150421415 +0000 UTC m=+48.374808745" watchObservedRunningTime="2025-09-06 01:22:40.153251617 +0000 UTC m=+48.377638947" Sep 6 01:22:40.167000 audit[4168]: NETFILTER_CFG table=filter:112 family=2 entries=20 op=nft_register_rule pid=4168 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:40.167000 audit[4168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffc9cd3e60 a2=0 a3=1 items=0 ppid=2609 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:40.167000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:40.172000 audit[4168]: NETFILTER_CFG table=nat:113 family=2 entries=14 op=nft_register_rule pid=4168 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:40.172000 audit[4168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffc9cd3e60 a2=0 a3=1 items=0 ppid=2609 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:40.172000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:40.219000 audit[4173]: NETFILTER_CFG table=filter:114 family=2 entries=17 op=nft_register_rule pid=4173 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:40.219000 audit[4173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffffaad53f0 a2=0 a3=1 items=0 ppid=2609 pid=4173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:40.219000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:40.224000 audit[4173]: NETFILTER_CFG table=nat:115 family=2 entries=35 op=nft_register_chain pid=4173 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:40.224000 audit[4173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=fffffaad53f0 a2=0 a3=1 items=0 ppid=2609 pid=4173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:40.224000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:40.251819 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 01:22:40.260818 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8850e5e49cc: link becomes ready Sep 6 01:22:40.265157 systemd-networkd[1608]: cali8850e5e49cc: Link UP Sep 6 01:22:40.265298 systemd-networkd[1608]: cali8850e5e49cc: Gained carrier Sep 6 01:22:40.282675 env[1445]: 2025-09-06 01:22:40.117 [INFO][4150] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0 calico-apiserver-84c8dc6bc5- calico-apiserver 18882596-6b47-476c-bb54-87518393b7f7 933 0 2025-09-06 01:22:10 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:84c8dc6bc5 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-645ca388a2 calico-apiserver-84c8dc6bc5-l6cl4 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali8850e5e49cc [] [] }} ContainerID="169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3" Namespace="calico-apiserver" Pod="calico-apiserver-84c8dc6bc5-l6cl4" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-" Sep 6 01:22:40.282675 env[1445]: 2025-09-06 01:22:40.118 [INFO][4150] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3" Namespace="calico-apiserver" Pod="calico-apiserver-84c8dc6bc5-l6cl4" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0" Sep 6 01:22:40.282675 env[1445]: 2025-09-06 01:22:40.179 [INFO][4163] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3" HandleID="k8s-pod-network.169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0" Sep 6 01:22:40.282675 env[1445]: 2025-09-06 01:22:40.180 [INFO][4163] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3" HandleID="k8s-pod-network.169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d3020), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-645ca388a2", "pod":"calico-apiserver-84c8dc6bc5-l6cl4", "timestamp":"2025-09-06 01:22:40.179864675 +0000 UTC"}, Hostname:"ci-3510.3.8-n-645ca388a2", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:22:40.282675 env[1445]: 2025-09-06 01:22:40.180 [INFO][4163] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:40.282675 env[1445]: 2025-09-06 01:22:40.180 [INFO][4163] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:40.282675 env[1445]: 2025-09-06 01:22:40.180 [INFO][4163] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-645ca388a2' Sep 6 01:22:40.282675 env[1445]: 2025-09-06 01:22:40.197 [INFO][4163] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:40.282675 env[1445]: 2025-09-06 01:22:40.208 [INFO][4163] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:40.282675 env[1445]: 2025-09-06 01:22:40.217 [INFO][4163] ipam/ipam.go 511: Trying affinity for 192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:40.282675 env[1445]: 2025-09-06 01:22:40.220 [INFO][4163] ipam/ipam.go 158: Attempting to load block cidr=192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:40.282675 env[1445]: 2025-09-06 01:22:40.222 [INFO][4163] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:40.282675 env[1445]: 2025-09-06 01:22:40.223 [INFO][4163] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.80.64/26 handle="k8s-pod-network.169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:40.282675 env[1445]: 2025-09-06 01:22:40.224 [INFO][4163] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3 Sep 6 01:22:40.282675 env[1445]: 2025-09-06 01:22:40.229 [INFO][4163] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.80.64/26 handle="k8s-pod-network.169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:40.282675 env[1445]: 2025-09-06 01:22:40.240 [INFO][4163] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.80.68/26] block=192.168.80.64/26 handle="k8s-pod-network.169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:40.282675 env[1445]: 2025-09-06 01:22:40.240 [INFO][4163] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.80.68/26] handle="k8s-pod-network.169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:40.282675 env[1445]: 2025-09-06 01:22:40.240 [INFO][4163] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:40.282675 env[1445]: 2025-09-06 01:22:40.240 [INFO][4163] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.80.68/26] IPv6=[] ContainerID="169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3" HandleID="k8s-pod-network.169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0" Sep 6 01:22:40.283409 env[1445]: 2025-09-06 01:22:40.242 [INFO][4150] cni-plugin/k8s.go 418: Populated endpoint ContainerID="169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3" Namespace="calico-apiserver" Pod="calico-apiserver-84c8dc6bc5-l6cl4" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0", GenerateName:"calico-apiserver-84c8dc6bc5-", Namespace:"calico-apiserver", SelfLink:"", UID:"18882596-6b47-476c-bb54-87518393b7f7", ResourceVersion:"933", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84c8dc6bc5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"", Pod:"calico-apiserver-84c8dc6bc5-l6cl4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.80.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8850e5e49cc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:40.283409 env[1445]: 2025-09-06 01:22:40.242 [INFO][4150] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.80.68/32] ContainerID="169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3" Namespace="calico-apiserver" Pod="calico-apiserver-84c8dc6bc5-l6cl4" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0" Sep 6 01:22:40.283409 env[1445]: 2025-09-06 01:22:40.242 [INFO][4150] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8850e5e49cc ContainerID="169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3" Namespace="calico-apiserver" Pod="calico-apiserver-84c8dc6bc5-l6cl4" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0" Sep 6 01:22:40.283409 env[1445]: 2025-09-06 01:22:40.266 [INFO][4150] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3" Namespace="calico-apiserver" Pod="calico-apiserver-84c8dc6bc5-l6cl4" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0" Sep 6 01:22:40.283409 env[1445]: 2025-09-06 01:22:40.267 [INFO][4150] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3" Namespace="calico-apiserver" Pod="calico-apiserver-84c8dc6bc5-l6cl4" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0", GenerateName:"calico-apiserver-84c8dc6bc5-", Namespace:"calico-apiserver", SelfLink:"", UID:"18882596-6b47-476c-bb54-87518393b7f7", ResourceVersion:"933", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84c8dc6bc5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3", Pod:"calico-apiserver-84c8dc6bc5-l6cl4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.80.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8850e5e49cc", MAC:"ce:c8:f5:0e:66:71", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:40.283409 env[1445]: 2025-09-06 01:22:40.281 [INFO][4150] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3" Namespace="calico-apiserver" Pod="calico-apiserver-84c8dc6bc5-l6cl4" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0" Sep 6 01:22:40.300994 env[1445]: time="2025-09-06T01:22:40.300797118Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:40.300994 env[1445]: time="2025-09-06T01:22:40.300845918Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:40.300994 env[1445]: time="2025-09-06T01:22:40.300856478Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:40.301218 env[1445]: time="2025-09-06T01:22:40.301108438Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3 pid=4192 runtime=io.containerd.runc.v2 Sep 6 01:22:40.300000 audit[4190]: NETFILTER_CFG table=filter:116 family=2 entries=58 op=nft_register_chain pid=4190 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:40.300000 audit[4190]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=30584 a0=3 a1=fffff1164bb0 a2=0 a3=ffffbc0c7fa8 items=0 ppid=3619 pid=4190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:40.300000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:40.320299 systemd[1]: Started cri-containerd-169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3.scope. Sep 6 01:22:40.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.333000 audit: BPF prog-id=179 op=LOAD Sep 6 01:22:40.334000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.334000 audit[4202]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4192 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:40.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136396664356230303336393937616561306538613964666236383532 Sep 6 01:22:40.334000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.334000 audit[4202]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4192 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:40.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136396664356230303336393937616561306538613964666236383532 Sep 6 01:22:40.334000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.334000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.334000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.334000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.334000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.334000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.334000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.334000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.334000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.334000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.334000 audit: BPF prog-id=180 op=LOAD Sep 6 01:22:40.334000 audit[4202]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4192 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:40.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136396664356230303336393937616561306538613964666236383532 Sep 6 01:22:40.335000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.335000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.335000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.335000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.335000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.335000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.335000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.335000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.335000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.335000 audit: BPF prog-id=181 op=LOAD Sep 6 01:22:40.335000 audit[4202]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4192 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:40.335000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136396664356230303336393937616561306538613964666236383532 Sep 6 01:22:40.335000 audit: BPF prog-id=181 op=UNLOAD Sep 6 01:22:40.335000 audit: BPF prog-id=180 op=UNLOAD Sep 6 01:22:40.336000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.336000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.336000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.336000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.336000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.336000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.336000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.336000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.336000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.336000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:40.336000 audit: BPF prog-id=182 op=LOAD Sep 6 01:22:40.336000 audit[4202]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4192 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:40.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136396664356230303336393937616561306538613964666236383532 Sep 6 01:22:40.356304 env[1445]: time="2025-09-06T01:22:40.356235276Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84c8dc6bc5-l6cl4,Uid:18882596-6b47-476c-bb54-87518393b7f7,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3\"" Sep 6 01:22:40.453408 kubelet[2462]: I0906 01:22:40.451152 2462 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 01:22:40.669875 systemd-networkd[1608]: cali0d3fb6f056f: Gained IPv6LL Sep 6 01:22:40.734872 systemd-networkd[1608]: cali5adfbb23cc7: Gained IPv6LL Sep 6 01:22:41.033540 systemd[1]: run-containerd-runc-k8s.io-169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3-runc.QMbh3i.mount: Deactivated successfully. Sep 6 01:22:41.148761 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2610373035.mount: Deactivated successfully. Sep 6 01:22:41.259396 env[1445]: time="2025-09-06T01:22:41.259332132Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:41.272383 env[1445]: time="2025-09-06T01:22:41.272330420Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e210e86234bc99f018431b30477c5ca2ad6f7ecf67ef011498f7beb48fb0b21f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:41.277664 env[1445]: time="2025-09-06T01:22:41.277595024Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:41.294480 env[1445]: time="2025-09-06T01:22:41.294365675Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:29becebc47401da9997a2a30f4c25c511a5f379d17275680b048224829af71a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:41.295033 env[1445]: time="2025-09-06T01:22:41.294996596Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\" returns image reference \"sha256:e210e86234bc99f018431b30477c5ca2ad6f7ecf67ef011498f7beb48fb0b21f\"" Sep 6 01:22:41.296265 env[1445]: time="2025-09-06T01:22:41.296239717Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\"" Sep 6 01:22:41.304698 env[1445]: time="2025-09-06T01:22:41.304647962Z" level=info msg="CreateContainer within sandbox \"4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Sep 6 01:22:41.501979 systemd-networkd[1608]: cali8850e5e49cc: Gained IPv6LL Sep 6 01:22:41.551469 env[1445]: time="2025-09-06T01:22:41.551327289Z" level=info msg="CreateContainer within sandbox \"4fd7ba8fa1d1bd118ca685c8eb37debc0b1636ef03e5a1d610df0bdd3147aae2\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"b3e91866a7b92da6444cd2039e00854c3166d59f2ea053b23e7921d4c20469f2\"" Sep 6 01:22:41.553851 env[1445]: time="2025-09-06T01:22:41.553816411Z" level=info msg="StartContainer for \"b3e91866a7b92da6444cd2039e00854c3166d59f2ea053b23e7921d4c20469f2\"" Sep 6 01:22:41.583625 systemd[1]: Started cri-containerd-b3e91866a7b92da6444cd2039e00854c3166d59f2ea053b23e7921d4c20469f2.scope. Sep 6 01:22:41.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.668000 audit: BPF prog-id=183 op=LOAD Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3759 pid=4279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:41.669000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233653931383636613762393264613634343463643230333965303038 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3759 pid=4279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:41.669000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233653931383636613762393264613634343463643230333965303038 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit: BPF prog-id=184 op=LOAD Sep 6 01:22:41.669000 audit[4279]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3759 pid=4279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:41.669000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233653931383636613762393264613634343463643230333965303038 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit: BPF prog-id=185 op=LOAD Sep 6 01:22:41.669000 audit[4279]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3759 pid=4279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:41.669000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233653931383636613762393264613634343463643230333965303038 Sep 6 01:22:41.669000 audit: BPF prog-id=185 op=UNLOAD Sep 6 01:22:41.669000 audit: BPF prog-id=184 op=UNLOAD Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:41.669000 audit: BPF prog-id=186 op=LOAD Sep 6 01:22:41.669000 audit[4279]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3759 pid=4279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:41.669000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233653931383636613762393264613634343463643230333965303038 Sep 6 01:22:41.769188 env[1445]: time="2025-09-06T01:22:41.769127597Z" level=info msg="StartContainer for \"b3e91866a7b92da6444cd2039e00854c3166d59f2ea053b23e7921d4c20469f2\" returns successfully" Sep 6 01:22:42.311000 audit[4318]: NETFILTER_CFG table=filter:117 family=2 entries=13 op=nft_register_rule pid=4318 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:42.311000 audit[4318]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc7cc0cb0 a2=0 a3=1 items=0 ppid=2609 pid=4318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:42.311000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:42.317000 audit[4318]: NETFILTER_CFG table=nat:118 family=2 entries=27 op=nft_register_chain pid=4318 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:42.317000 audit[4318]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=ffffc7cc0cb0 a2=0 a3=1 items=0 ppid=2609 pid=4318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:42.317000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:42.908775 env[1445]: time="2025-09-06T01:22:42.908681162Z" level=info msg="StopPodSandbox for \"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\"" Sep 6 01:22:42.910007 env[1445]: time="2025-09-06T01:22:42.909976683Z" level=info msg="StopPodSandbox for \"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\"" Sep 6 01:22:42.910303 env[1445]: time="2025-09-06T01:22:42.910010563Z" level=info msg="StopPodSandbox for \"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\"" Sep 6 01:22:43.039161 kubelet[2462]: I0906 01:22:43.039066 2462 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-54667fdd86-lgvqq" podStartSLOduration=2.787619226 podStartE2EDuration="8.039046809s" podCreationTimestamp="2025-09-06 01:22:35 +0000 UTC" firstStartedPulling="2025-09-06 01:22:36.044667734 +0000 UTC m=+44.269055024" lastFinishedPulling="2025-09-06 01:22:41.296095317 +0000 UTC m=+49.520482607" observedRunningTime="2025-09-06 01:22:42.149975133 +0000 UTC m=+50.374362463" watchObservedRunningTime="2025-09-06 01:22:43.039046809 +0000 UTC m=+51.263434139" Sep 6 01:22:43.099919 env[1445]: 2025-09-06 01:22:43.030 [INFO][4342] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Sep 6 01:22:43.099919 env[1445]: 2025-09-06 01:22:43.031 [INFO][4342] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" iface="eth0" netns="/var/run/netns/cni-db7d2156-83d0-d187-3cb6-b68150993152" Sep 6 01:22:43.099919 env[1445]: 2025-09-06 01:22:43.031 [INFO][4342] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" iface="eth0" netns="/var/run/netns/cni-db7d2156-83d0-d187-3cb6-b68150993152" Sep 6 01:22:43.099919 env[1445]: 2025-09-06 01:22:43.031 [INFO][4342] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" iface="eth0" netns="/var/run/netns/cni-db7d2156-83d0-d187-3cb6-b68150993152" Sep 6 01:22:43.099919 env[1445]: 2025-09-06 01:22:43.031 [INFO][4342] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Sep 6 01:22:43.099919 env[1445]: 2025-09-06 01:22:43.031 [INFO][4342] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Sep 6 01:22:43.099919 env[1445]: 2025-09-06 01:22:43.068 [INFO][4365] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" HandleID="k8s-pod-network.bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Workload="ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0" Sep 6 01:22:43.099919 env[1445]: 2025-09-06 01:22:43.068 [INFO][4365] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:43.099919 env[1445]: 2025-09-06 01:22:43.068 [INFO][4365] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:43.099919 env[1445]: 2025-09-06 01:22:43.093 [WARNING][4365] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" HandleID="k8s-pod-network.bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Workload="ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0" Sep 6 01:22:43.099919 env[1445]: 2025-09-06 01:22:43.093 [INFO][4365] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" HandleID="k8s-pod-network.bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Workload="ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0" Sep 6 01:22:43.099919 env[1445]: 2025-09-06 01:22:43.096 [INFO][4365] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:43.099919 env[1445]: 2025-09-06 01:22:43.098 [INFO][4342] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Sep 6 01:22:43.103701 systemd[1]: run-netns-cni\x2ddb7d2156\x2d83d0\x2dd187\x2d3cb6\x2db68150993152.mount: Deactivated successfully. Sep 6 01:22:43.105794 env[1445]: time="2025-09-06T01:22:43.105745453Z" level=info msg="TearDown network for sandbox \"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\" successfully" Sep 6 01:22:43.105903 env[1445]: time="2025-09-06T01:22:43.105886173Z" level=info msg="StopPodSandbox for \"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\" returns successfully" Sep 6 01:22:43.107310 env[1445]: time="2025-09-06T01:22:43.107265654Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-cjzts,Uid:8a374bc2-d94e-4f60-8980-ac3f72dfea23,Namespace:calico-system,Attempt:1,}" Sep 6 01:22:43.247661 env[1445]: 2025-09-06 01:22:43.081 [INFO][4341] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Sep 6 01:22:43.247661 env[1445]: 2025-09-06 01:22:43.081 [INFO][4341] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" iface="eth0" netns="/var/run/netns/cni-6a2126d2-87c3-8743-137f-c43b6ed2b311" Sep 6 01:22:43.247661 env[1445]: 2025-09-06 01:22:43.082 [INFO][4341] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" iface="eth0" netns="/var/run/netns/cni-6a2126d2-87c3-8743-137f-c43b6ed2b311" Sep 6 01:22:43.247661 env[1445]: 2025-09-06 01:22:43.082 [INFO][4341] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" iface="eth0" netns="/var/run/netns/cni-6a2126d2-87c3-8743-137f-c43b6ed2b311" Sep 6 01:22:43.247661 env[1445]: 2025-09-06 01:22:43.082 [INFO][4341] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Sep 6 01:22:43.247661 env[1445]: 2025-09-06 01:22:43.082 [INFO][4341] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Sep 6 01:22:43.247661 env[1445]: 2025-09-06 01:22:43.158 [INFO][4372] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" HandleID="k8s-pod-network.1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0" Sep 6 01:22:43.247661 env[1445]: 2025-09-06 01:22:43.165 [INFO][4372] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:43.247661 env[1445]: 2025-09-06 01:22:43.165 [INFO][4372] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:43.247661 env[1445]: 2025-09-06 01:22:43.236 [WARNING][4372] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" HandleID="k8s-pod-network.1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0" Sep 6 01:22:43.247661 env[1445]: 2025-09-06 01:22:43.236 [INFO][4372] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" HandleID="k8s-pod-network.1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0" Sep 6 01:22:43.247661 env[1445]: 2025-09-06 01:22:43.240 [INFO][4372] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:43.247661 env[1445]: 2025-09-06 01:22:43.241 [INFO][4341] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Sep 6 01:22:43.247661 env[1445]: time="2025-09-06T01:22:43.244908106Z" level=info msg="TearDown network for sandbox \"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\" successfully" Sep 6 01:22:43.247661 env[1445]: time="2025-09-06T01:22:43.244947826Z" level=info msg="StopPodSandbox for \"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\" returns successfully" Sep 6 01:22:43.244859 systemd[1]: run-netns-cni\x2d6a2126d2\x2d87c3\x2d8743\x2d137f\x2dc43b6ed2b311.mount: Deactivated successfully. Sep 6 01:22:43.249187 env[1445]: time="2025-09-06T01:22:43.249146108Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84c8dc6bc5-4q7cp,Uid:f863d5f1-b40a-437f-845c-0824d6d70053,Namespace:calico-apiserver,Attempt:1,}" Sep 6 01:22:43.294931 env[1445]: 2025-09-06 01:22:43.092 [INFO][4355] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Sep 6 01:22:43.294931 env[1445]: 2025-09-06 01:22:43.092 [INFO][4355] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" iface="eth0" netns="/var/run/netns/cni-998fe045-6f01-d378-aa87-27bd1bd4101c" Sep 6 01:22:43.294931 env[1445]: 2025-09-06 01:22:43.093 [INFO][4355] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" iface="eth0" netns="/var/run/netns/cni-998fe045-6f01-d378-aa87-27bd1bd4101c" Sep 6 01:22:43.294931 env[1445]: 2025-09-06 01:22:43.093 [INFO][4355] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" iface="eth0" netns="/var/run/netns/cni-998fe045-6f01-d378-aa87-27bd1bd4101c" Sep 6 01:22:43.294931 env[1445]: 2025-09-06 01:22:43.093 [INFO][4355] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Sep 6 01:22:43.294931 env[1445]: 2025-09-06 01:22:43.093 [INFO][4355] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Sep 6 01:22:43.294931 env[1445]: 2025-09-06 01:22:43.218 [INFO][4377] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" HandleID="k8s-pod-network.ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0" Sep 6 01:22:43.294931 env[1445]: 2025-09-06 01:22:43.218 [INFO][4377] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:43.294931 env[1445]: 2025-09-06 01:22:43.245 [INFO][4377] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:43.294931 env[1445]: 2025-09-06 01:22:43.280 [WARNING][4377] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" HandleID="k8s-pod-network.ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0" Sep 6 01:22:43.294931 env[1445]: 2025-09-06 01:22:43.280 [INFO][4377] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" HandleID="k8s-pod-network.ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0" Sep 6 01:22:43.294931 env[1445]: 2025-09-06 01:22:43.286 [INFO][4377] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:43.294931 env[1445]: 2025-09-06 01:22:43.290 [INFO][4355] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Sep 6 01:22:43.297713 systemd[1]: run-netns-cni\x2d998fe045\x2d6f01\x2dd378\x2daa87\x2d27bd1bd4101c.mount: Deactivated successfully. Sep 6 01:22:43.298476 env[1445]: time="2025-09-06T01:22:43.298398461Z" level=info msg="TearDown network for sandbox \"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\" successfully" Sep 6 01:22:43.298476 env[1445]: time="2025-09-06T01:22:43.298431381Z" level=info msg="StopPodSandbox for \"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\" returns successfully" Sep 6 01:22:43.300482 env[1445]: time="2025-09-06T01:22:43.300446982Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-zjjms,Uid:8dcacbd0-09d2-49ca-b5ed-c0ea362399e9,Namespace:kube-system,Attempt:1,}" Sep 6 01:22:43.545087 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 6 01:22:43.545253 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali86280e2e12a: link becomes ready Sep 6 01:22:43.545484 systemd-networkd[1608]: cali86280e2e12a: Link UP Sep 6 01:22:43.547988 systemd-networkd[1608]: cali86280e2e12a: Gained carrier Sep 6 01:22:43.622851 env[1445]: 2025-09-06 01:22:43.305 [INFO][4385] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0 csi-node-driver- calico-system 8a374bc2-d94e-4f60-8980-ac3f72dfea23 971 0 2025-09-06 01:22:15 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:6c96d95cc7 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ci-3510.3.8-n-645ca388a2 csi-node-driver-cjzts eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali86280e2e12a [] [] }} ContainerID="b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc" Namespace="calico-system" Pod="csi-node-driver-cjzts" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-" Sep 6 01:22:43.622851 env[1445]: 2025-09-06 01:22:43.306 [INFO][4385] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc" Namespace="calico-system" Pod="csi-node-driver-cjzts" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0" Sep 6 01:22:43.622851 env[1445]: 2025-09-06 01:22:43.392 [INFO][4399] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc" HandleID="k8s-pod-network.b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc" Workload="ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0" Sep 6 01:22:43.622851 env[1445]: 2025-09-06 01:22:43.395 [INFO][4399] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc" HandleID="k8s-pod-network.b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc" Workload="ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c3610), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-645ca388a2", "pod":"csi-node-driver-cjzts", "timestamp":"2025-09-06 01:22:43.392240243 +0000 UTC"}, Hostname:"ci-3510.3.8-n-645ca388a2", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:22:43.622851 env[1445]: 2025-09-06 01:22:43.395 [INFO][4399] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:43.622851 env[1445]: 2025-09-06 01:22:43.395 [INFO][4399] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:43.622851 env[1445]: 2025-09-06 01:22:43.395 [INFO][4399] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-645ca388a2' Sep 6 01:22:43.622851 env[1445]: 2025-09-06 01:22:43.404 [INFO][4399] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.622851 env[1445]: 2025-09-06 01:22:43.441 [INFO][4399] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.622851 env[1445]: 2025-09-06 01:22:43.458 [INFO][4399] ipam/ipam.go 511: Trying affinity for 192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.622851 env[1445]: 2025-09-06 01:22:43.465 [INFO][4399] ipam/ipam.go 158: Attempting to load block cidr=192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.622851 env[1445]: 2025-09-06 01:22:43.472 [INFO][4399] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.622851 env[1445]: 2025-09-06 01:22:43.472 [INFO][4399] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.80.64/26 handle="k8s-pod-network.b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.622851 env[1445]: 2025-09-06 01:22:43.482 [INFO][4399] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc Sep 6 01:22:43.622851 env[1445]: 2025-09-06 01:22:43.490 [INFO][4399] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.80.64/26 handle="k8s-pod-network.b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.622851 env[1445]: 2025-09-06 01:22:43.524 [INFO][4399] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.80.69/26] block=192.168.80.64/26 handle="k8s-pod-network.b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.622851 env[1445]: 2025-09-06 01:22:43.524 [INFO][4399] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.80.69/26] handle="k8s-pod-network.b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.622851 env[1445]: 2025-09-06 01:22:43.524 [INFO][4399] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:43.622851 env[1445]: 2025-09-06 01:22:43.524 [INFO][4399] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.80.69/26] IPv6=[] ContainerID="b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc" HandleID="k8s-pod-network.b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc" Workload="ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0" Sep 6 01:22:43.623454 env[1445]: 2025-09-06 01:22:43.526 [INFO][4385] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc" Namespace="calico-system" Pod="csi-node-driver-cjzts" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"8a374bc2-d94e-4f60-8980-ac3f72dfea23", ResourceVersion:"971", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"", Pod:"csi-node-driver-cjzts", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.80.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali86280e2e12a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:43.623454 env[1445]: 2025-09-06 01:22:43.527 [INFO][4385] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.80.69/32] ContainerID="b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc" Namespace="calico-system" Pod="csi-node-driver-cjzts" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0" Sep 6 01:22:43.623454 env[1445]: 2025-09-06 01:22:43.527 [INFO][4385] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali86280e2e12a ContainerID="b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc" Namespace="calico-system" Pod="csi-node-driver-cjzts" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0" Sep 6 01:22:43.623454 env[1445]: 2025-09-06 01:22:43.573 [INFO][4385] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc" Namespace="calico-system" Pod="csi-node-driver-cjzts" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0" Sep 6 01:22:43.623454 env[1445]: 2025-09-06 01:22:43.574 [INFO][4385] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc" Namespace="calico-system" Pod="csi-node-driver-cjzts" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"8a374bc2-d94e-4f60-8980-ac3f72dfea23", ResourceVersion:"971", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc", Pod:"csi-node-driver-cjzts", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.80.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali86280e2e12a", MAC:"66:cf:20:80:23:34", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:43.623454 env[1445]: 2025-09-06 01:22:43.618 [INFO][4385] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc" Namespace="calico-system" Pod="csi-node-driver-cjzts" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0" Sep 6 01:22:43.656148 env[1445]: time="2025-09-06T01:22:43.655986298Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:43.656148 env[1445]: time="2025-09-06T01:22:43.656024938Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:43.656148 env[1445]: time="2025-09-06T01:22:43.656035978Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:43.656438 env[1445]: time="2025-09-06T01:22:43.656379379Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc pid=4458 runtime=io.containerd.runc.v2 Sep 6 01:22:43.667649 systemd[1]: Started cri-containerd-b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc.scope. Sep 6 01:22:43.691000 audit[4479]: NETFILTER_CFG table=filter:119 family=2 entries=54 op=nft_register_chain pid=4479 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:43.691000 audit[4479]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=25992 a0=3 a1=ffffd7f1de80 a2=0 a3=ffff8d6fefa8 items=0 ppid=3619 pid=4479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:43.691000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:43.706390 systemd-networkd[1608]: cali6e8b5b85dc2: Link UP Sep 6 01:22:43.722920 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali6e8b5b85dc2: link becomes ready Sep 6 01:22:43.723477 systemd-networkd[1608]: cali6e8b5b85dc2: Gained carrier Sep 6 01:22:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.736000 audit: BPF prog-id=187 op=LOAD Sep 6 01:22:43.740000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.740000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4458 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:43.740000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238353139343766343631313234656166336132303632363637346530 Sep 6 01:22:43.742716 env[1445]: 2025-09-06 01:22:43.485 [INFO][4415] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0 coredns-674b8bbfcf- kube-system 8dcacbd0-09d2-49ca-b5ed-c0ea362399e9 973 0 2025-09-06 01:21:58 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-645ca388a2 coredns-674b8bbfcf-zjjms eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali6e8b5b85dc2 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f" Namespace="kube-system" Pod="coredns-674b8bbfcf-zjjms" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-" Sep 6 01:22:43.742716 env[1445]: 2025-09-06 01:22:43.485 [INFO][4415] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f" Namespace="kube-system" Pod="coredns-674b8bbfcf-zjjms" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0" Sep 6 01:22:43.742716 env[1445]: 2025-09-06 01:22:43.594 [INFO][4429] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f" HandleID="k8s-pod-network.ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0" Sep 6 01:22:43.742716 env[1445]: 2025-09-06 01:22:43.594 [INFO][4429] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f" HandleID="k8s-pod-network.ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002ab6b0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-645ca388a2", "pod":"coredns-674b8bbfcf-zjjms", "timestamp":"2025-09-06 01:22:43.593883417 +0000 UTC"}, Hostname:"ci-3510.3.8-n-645ca388a2", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:22:43.742716 env[1445]: 2025-09-06 01:22:43.594 [INFO][4429] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:43.742716 env[1445]: 2025-09-06 01:22:43.594 [INFO][4429] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:43.742716 env[1445]: 2025-09-06 01:22:43.594 [INFO][4429] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-645ca388a2' Sep 6 01:22:43.742716 env[1445]: 2025-09-06 01:22:43.632 [INFO][4429] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.742716 env[1445]: 2025-09-06 01:22:43.645 [INFO][4429] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.742716 env[1445]: 2025-09-06 01:22:43.654 [INFO][4429] ipam/ipam.go 511: Trying affinity for 192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.742716 env[1445]: 2025-09-06 01:22:43.661 [INFO][4429] ipam/ipam.go 158: Attempting to load block cidr=192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.742716 env[1445]: 2025-09-06 01:22:43.667 [INFO][4429] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.742716 env[1445]: 2025-09-06 01:22:43.667 [INFO][4429] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.80.64/26 handle="k8s-pod-network.ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.742716 env[1445]: 2025-09-06 01:22:43.672 [INFO][4429] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f Sep 6 01:22:43.742716 env[1445]: 2025-09-06 01:22:43.679 [INFO][4429] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.80.64/26 handle="k8s-pod-network.ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.742716 env[1445]: 2025-09-06 01:22:43.695 [INFO][4429] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.80.70/26] block=192.168.80.64/26 handle="k8s-pod-network.ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.742716 env[1445]: 2025-09-06 01:22:43.695 [INFO][4429] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.80.70/26] handle="k8s-pod-network.ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.742716 env[1445]: 2025-09-06 01:22:43.695 [INFO][4429] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:43.742716 env[1445]: 2025-09-06 01:22:43.695 [INFO][4429] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.80.70/26] IPv6=[] ContainerID="ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f" HandleID="k8s-pod-network.ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0" Sep 6 01:22:43.743211 env[1445]: 2025-09-06 01:22:43.697 [INFO][4415] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f" Namespace="kube-system" Pod="coredns-674b8bbfcf-zjjms" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"8dcacbd0-09d2-49ca-b5ed-c0ea362399e9", ResourceVersion:"973", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 21, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"", Pod:"coredns-674b8bbfcf-zjjms", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.80.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6e8b5b85dc2", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:43.743211 env[1445]: 2025-09-06 01:22:43.697 [INFO][4415] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.80.70/32] ContainerID="ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f" Namespace="kube-system" Pod="coredns-674b8bbfcf-zjjms" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0" Sep 6 01:22:43.743211 env[1445]: 2025-09-06 01:22:43.698 [INFO][4415] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali6e8b5b85dc2 ContainerID="ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f" Namespace="kube-system" Pod="coredns-674b8bbfcf-zjjms" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0" Sep 6 01:22:43.743211 env[1445]: 2025-09-06 01:22:43.724 [INFO][4415] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f" Namespace="kube-system" Pod="coredns-674b8bbfcf-zjjms" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0" Sep 6 01:22:43.743211 env[1445]: 2025-09-06 01:22:43.724 [INFO][4415] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f" Namespace="kube-system" Pod="coredns-674b8bbfcf-zjjms" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"8dcacbd0-09d2-49ca-b5ed-c0ea362399e9", ResourceVersion:"973", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 21, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f", Pod:"coredns-674b8bbfcf-zjjms", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.80.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6e8b5b85dc2", MAC:"9a:b7:00:ac:3c:66", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:43.743211 env[1445]: 2025-09-06 01:22:43.740 [INFO][4415] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f" Namespace="kube-system" Pod="coredns-674b8bbfcf-zjjms" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0" Sep 6 01:22:43.741000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.741000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4458 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:43.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238353139343766343631313234656166336132303632363637346530 Sep 6 01:22:43.741000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.741000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.741000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.741000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.741000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.741000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.741000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.741000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.741000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.741000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.741000 audit: BPF prog-id=188 op=LOAD Sep 6 01:22:43.741000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4458 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:43.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238353139343766343631313234656166336132303632363637346530 Sep 6 01:22:43.744000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.744000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.744000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.744000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.744000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.744000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.744000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.744000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.744000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.744000 audit: BPF prog-id=189 op=LOAD Sep 6 01:22:43.744000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4458 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:43.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238353139343766343631313234656166336132303632363637346530 Sep 6 01:22:43.745000 audit: BPF prog-id=189 op=UNLOAD Sep 6 01:22:43.745000 audit: BPF prog-id=188 op=UNLOAD Sep 6 01:22:43.745000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.745000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.745000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.745000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.745000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.745000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.745000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.745000 audit[4469]: AVC avc: denied { perfmon } for pid=4469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.745000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.745000 audit[4469]: AVC avc: denied { bpf } for pid=4469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.745000 audit: BPF prog-id=190 op=LOAD Sep 6 01:22:43.745000 audit[4469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4458 pid=4469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:43.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238353139343766343631313234656166336132303632363637346530 Sep 6 01:22:43.763778 env[1445]: time="2025-09-06T01:22:43.761975249Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:43.763778 env[1445]: time="2025-09-06T01:22:43.762024369Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:43.763778 env[1445]: time="2025-09-06T01:22:43.762040769Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:43.763778 env[1445]: time="2025-09-06T01:22:43.762153489Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f pid=4499 runtime=io.containerd.runc.v2 Sep 6 01:22:43.779067 systemd[1]: Started cri-containerd-ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f.scope. Sep 6 01:22:43.802359 env[1445]: time="2025-09-06T01:22:43.802258875Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-cjzts,Uid:8a374bc2-d94e-4f60-8980-ac3f72dfea23,Namespace:calico-system,Attempt:1,} returns sandbox id \"b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc\"" Sep 6 01:22:43.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.806000 audit: BPF prog-id=191 op=LOAD Sep 6 01:22:43.807000 audit[4514]: AVC avc: denied { bpf } for pid=4514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.807000 audit[4514]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4499 pid=4514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:43.807000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666623033383265303062633866636330623038643539333264653562 Sep 6 01:22:43.807000 audit[4514]: AVC avc: denied { perfmon } for pid=4514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.807000 audit[4514]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4499 pid=4514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:43.807000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666623033383265303062633866636330623038643539333264653562 Sep 6 01:22:43.808000 audit[4514]: AVC avc: denied { bpf } for pid=4514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.808000 audit[4514]: AVC avc: denied { bpf } for pid=4514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.808000 audit[4514]: AVC avc: denied { bpf } for pid=4514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.808000 audit[4514]: AVC avc: denied { perfmon } for pid=4514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.808000 audit[4514]: AVC avc: denied { perfmon } for pid=4514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.808000 audit[4514]: AVC avc: denied { perfmon } for pid=4514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.808000 audit[4514]: AVC avc: denied { perfmon } for pid=4514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.808000 audit[4514]: AVC avc: denied { perfmon } for pid=4514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.808000 audit[4514]: AVC avc: denied { bpf } for pid=4514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.808000 audit[4514]: AVC avc: denied { bpf } for pid=4514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.808000 audit: BPF prog-id=192 op=LOAD Sep 6 01:22:43.808000 audit[4514]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4499 pid=4514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:43.808000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666623033383265303062633866636330623038643539333264653562 Sep 6 01:22:43.809000 audit[4514]: AVC avc: denied { bpf } for pid=4514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.809000 audit[4514]: AVC avc: denied { bpf } for pid=4514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.809000 audit[4514]: AVC avc: denied { perfmon } for pid=4514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.809000 audit[4514]: AVC avc: denied { perfmon } for pid=4514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.809000 audit[4514]: AVC avc: denied { perfmon } for pid=4514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.809000 audit[4514]: AVC avc: denied { perfmon } for pid=4514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.809000 audit[4514]: AVC avc: denied { perfmon } for pid=4514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.809000 audit[4514]: AVC avc: denied { bpf } for pid=4514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.809000 audit[4514]: AVC avc: denied { bpf } for pid=4514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.809000 audit: BPF prog-id=193 op=LOAD Sep 6 01:22:43.809000 audit[4514]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4499 pid=4514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:43.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666623033383265303062633866636330623038643539333264653562 Sep 6 01:22:43.810000 audit: BPF prog-id=193 op=UNLOAD Sep 6 01:22:43.810000 audit: BPF prog-id=192 op=UNLOAD Sep 6 01:22:43.810000 audit[4514]: AVC avc: denied { bpf } for pid=4514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.810000 audit[4514]: AVC avc: denied { bpf } for pid=4514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.810000 audit[4514]: AVC avc: denied { bpf } for pid=4514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.810000 audit[4514]: AVC avc: denied { perfmon } for pid=4514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.810000 audit[4514]: AVC avc: denied { perfmon } for pid=4514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.810000 audit[4514]: AVC avc: denied { perfmon } for pid=4514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.810000 audit[4514]: AVC avc: denied { perfmon } for pid=4514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.810000 audit[4514]: AVC avc: denied { perfmon } for pid=4514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.810000 audit[4514]: AVC avc: denied { bpf } for pid=4514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.810000 audit[4514]: AVC avc: denied { bpf } for pid=4514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.810000 audit: BPF prog-id=194 op=LOAD Sep 6 01:22:43.810000 audit[4514]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4499 pid=4514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:43.810000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666623033383265303062633866636330623038643539333264653562 Sep 6 01:22:43.828053 systemd-networkd[1608]: cali9468ea26ad0: Link UP Sep 6 01:22:43.829379 systemd-networkd[1608]: cali9468ea26ad0: Gained carrier Sep 6 01:22:43.836789 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9468ea26ad0: link becomes ready Sep 6 01:22:43.853378 env[1445]: time="2025-09-06T01:22:43.853327989Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-zjjms,Uid:8dcacbd0-09d2-49ca-b5ed-c0ea362399e9,Namespace:kube-system,Attempt:1,} returns sandbox id \"ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f\"" Sep 6 01:22:43.862782 env[1445]: 2025-09-06 01:22:43.536 [INFO][4404] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0 calico-apiserver-84c8dc6bc5- calico-apiserver f863d5f1-b40a-437f-845c-0824d6d70053 972 0 2025-09-06 01:22:10 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:84c8dc6bc5 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-645ca388a2 calico-apiserver-84c8dc6bc5-4q7cp eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali9468ea26ad0 [] [] }} ContainerID="62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650" Namespace="calico-apiserver" Pod="calico-apiserver-84c8dc6bc5-4q7cp" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-" Sep 6 01:22:43.862782 env[1445]: 2025-09-06 01:22:43.536 [INFO][4404] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650" Namespace="calico-apiserver" Pod="calico-apiserver-84c8dc6bc5-4q7cp" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0" Sep 6 01:22:43.862782 env[1445]: 2025-09-06 01:22:43.620 [INFO][4439] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650" HandleID="k8s-pod-network.62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0" Sep 6 01:22:43.862782 env[1445]: 2025-09-06 01:22:43.620 [INFO][4439] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650" HandleID="k8s-pod-network.62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d3600), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-645ca388a2", "pod":"calico-apiserver-84c8dc6bc5-4q7cp", "timestamp":"2025-09-06 01:22:43.620264595 +0000 UTC"}, Hostname:"ci-3510.3.8-n-645ca388a2", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:22:43.862782 env[1445]: 2025-09-06 01:22:43.620 [INFO][4439] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:43.862782 env[1445]: 2025-09-06 01:22:43.695 [INFO][4439] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:43.862782 env[1445]: 2025-09-06 01:22:43.695 [INFO][4439] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-645ca388a2' Sep 6 01:22:43.862782 env[1445]: 2025-09-06 01:22:43.733 [INFO][4439] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.862782 env[1445]: 2025-09-06 01:22:43.748 [INFO][4439] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.862782 env[1445]: 2025-09-06 01:22:43.758 [INFO][4439] ipam/ipam.go 511: Trying affinity for 192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.862782 env[1445]: 2025-09-06 01:22:43.764 [INFO][4439] ipam/ipam.go 158: Attempting to load block cidr=192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.862782 env[1445]: 2025-09-06 01:22:43.768 [INFO][4439] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.862782 env[1445]: 2025-09-06 01:22:43.768 [INFO][4439] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.80.64/26 handle="k8s-pod-network.62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.862782 env[1445]: 2025-09-06 01:22:43.783 [INFO][4439] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650 Sep 6 01:22:43.862782 env[1445]: 2025-09-06 01:22:43.794 [INFO][4439] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.80.64/26 handle="k8s-pod-network.62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.862782 env[1445]: 2025-09-06 01:22:43.811 [INFO][4439] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.80.71/26] block=192.168.80.64/26 handle="k8s-pod-network.62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.862782 env[1445]: 2025-09-06 01:22:43.811 [INFO][4439] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.80.71/26] handle="k8s-pod-network.62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:43.862782 env[1445]: 2025-09-06 01:22:43.811 [INFO][4439] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:43.862782 env[1445]: 2025-09-06 01:22:43.811 [INFO][4439] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.80.71/26] IPv6=[] ContainerID="62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650" HandleID="k8s-pod-network.62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0" Sep 6 01:22:43.863419 env[1445]: 2025-09-06 01:22:43.816 [INFO][4404] cni-plugin/k8s.go 418: Populated endpoint ContainerID="62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650" Namespace="calico-apiserver" Pod="calico-apiserver-84c8dc6bc5-4q7cp" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0", GenerateName:"calico-apiserver-84c8dc6bc5-", Namespace:"calico-apiserver", SelfLink:"", UID:"f863d5f1-b40a-437f-845c-0824d6d70053", ResourceVersion:"972", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84c8dc6bc5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"", Pod:"calico-apiserver-84c8dc6bc5-4q7cp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.80.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9468ea26ad0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:43.863419 env[1445]: 2025-09-06 01:22:43.817 [INFO][4404] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.80.71/32] ContainerID="62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650" Namespace="calico-apiserver" Pod="calico-apiserver-84c8dc6bc5-4q7cp" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0" Sep 6 01:22:43.863419 env[1445]: 2025-09-06 01:22:43.817 [INFO][4404] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali9468ea26ad0 ContainerID="62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650" Namespace="calico-apiserver" Pod="calico-apiserver-84c8dc6bc5-4q7cp" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0" Sep 6 01:22:43.863419 env[1445]: 2025-09-06 01:22:43.828 [INFO][4404] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650" Namespace="calico-apiserver" Pod="calico-apiserver-84c8dc6bc5-4q7cp" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0" Sep 6 01:22:43.863419 env[1445]: 2025-09-06 01:22:43.837 [INFO][4404] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650" Namespace="calico-apiserver" Pod="calico-apiserver-84c8dc6bc5-4q7cp" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0", GenerateName:"calico-apiserver-84c8dc6bc5-", Namespace:"calico-apiserver", SelfLink:"", UID:"f863d5f1-b40a-437f-845c-0824d6d70053", ResourceVersion:"972", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84c8dc6bc5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650", Pod:"calico-apiserver-84c8dc6bc5-4q7cp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.80.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9468ea26ad0", MAC:"da:7b:5f:31:11:a9", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:43.863419 env[1445]: 2025-09-06 01:22:43.861 [INFO][4404] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650" Namespace="calico-apiserver" Pod="calico-apiserver-84c8dc6bc5-4q7cp" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0" Sep 6 01:22:43.865003 env[1445]: time="2025-09-06T01:22:43.864966397Z" level=info msg="CreateContainer within sandbox \"ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 6 01:22:43.871000 audit[4548]: NETFILTER_CFG table=filter:120 family=2 entries=44 op=nft_register_chain pid=4548 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:43.871000 audit[4548]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21516 a0=3 a1=fffff52faa30 a2=0 a3=ffff94ac3fa8 items=0 ppid=3619 pid=4548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:43.871000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:43.888780 env[1445]: time="2025-09-06T01:22:43.887578012Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:43.888780 env[1445]: time="2025-09-06T01:22:43.887617852Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:43.888780 env[1445]: time="2025-09-06T01:22:43.887631012Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:43.888780 env[1445]: time="2025-09-06T01:22:43.887843972Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650 pid=4559 runtime=io.containerd.runc.v2 Sep 6 01:22:43.909837 env[1445]: time="2025-09-06T01:22:43.909599147Z" level=info msg="StopPodSandbox for \"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\"" Sep 6 01:22:43.928241 systemd[1]: Started cri-containerd-62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650.scope. Sep 6 01:22:43.933230 env[1445]: time="2025-09-06T01:22:43.933183442Z" level=info msg="CreateContainer within sandbox \"ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"426ff2850c26457f1bc0c45e70df9a5eaeef9e3f6c4c20b8ab270504740d9b69\"" Sep 6 01:22:43.937092 env[1445]: time="2025-09-06T01:22:43.937042285Z" level=info msg="StartContainer for \"426ff2850c26457f1bc0c45e70df9a5eaeef9e3f6c4c20b8ab270504740d9b69\"" Sep 6 01:22:43.962642 systemd[1]: Started cri-containerd-426ff2850c26457f1bc0c45e70df9a5eaeef9e3f6c4c20b8ab270504740d9b69.scope. Sep 6 01:22:43.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.983000 audit: BPF prog-id=195 op=LOAD Sep 6 01:22:43.984000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.984000 audit[4602]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4499 pid=4602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:43.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432366666323835306332363435376631626330633435653730646639 Sep 6 01:22:43.984000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.984000 audit[4602]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4499 pid=4602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:43.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432366666323835306332363435376631626330633435653730646639 Sep 6 01:22:43.984000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.984000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.984000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.984000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.984000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.984000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.984000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.984000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.984000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.984000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.984000 audit: BPF prog-id=196 op=LOAD Sep 6 01:22:43.984000 audit[4602]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4499 pid=4602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:43.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432366666323835306332363435376631626330633435653730646639 Sep 6 01:22:43.985000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.985000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.985000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.985000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.985000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.985000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.985000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.985000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.985000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.985000 audit: BPF prog-id=197 op=LOAD Sep 6 01:22:43.985000 audit[4602]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4499 pid=4602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:43.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432366666323835306332363435376631626330633435653730646639 Sep 6 01:22:43.985000 audit: BPF prog-id=197 op=UNLOAD Sep 6 01:22:43.985000 audit: BPF prog-id=196 op=UNLOAD Sep 6 01:22:43.986000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.986000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.986000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.986000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.986000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.986000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.986000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.986000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.986000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.986000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:43.986000 audit: BPF prog-id=198 op=LOAD Sep 6 01:22:43.986000 audit[4602]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4499 pid=4602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:43.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432366666323835306332363435376631626330633435653730646639 Sep 6 01:22:43.990000 audit[4618]: NETFILTER_CFG table=filter:121 family=2 entries=53 op=nft_register_chain pid=4618 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:43.990000 audit[4618]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26624 a0=3 a1=ffffcdee15a0 a2=0 a3=ffffb761ffa8 items=0 ppid=3619 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:43.990000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:44.011426 env[1445]: time="2025-09-06T01:22:44.011378294Z" level=info msg="StartContainer for \"426ff2850c26457f1bc0c45e70df9a5eaeef9e3f6c4c20b8ab270504740d9b69\" returns successfully" Sep 6 01:22:44.030000 audit[4612]: AVC avc: denied { getattr } for pid=4612 comm="coredns" path="cgroup:[4026532684]" dev="nsfs" ino=4026532684 scontext=system_u:system_r:svirt_lxc_net_t:s0:c449,c870 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 6 01:22:44.030000 audit[4612]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056ac8 a2=40000ea578 a3=0 items=0 ppid=4499 pid=4612 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c449,c870 key=(null) Sep 6 01:22:44.030000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 6 01:22:44.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.033000 audit: BPF prog-id=199 op=LOAD Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4559 pid=4571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:44.034000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632623961386634353065306265653862343566316135396338616166 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4559 pid=4571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:44.034000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632623961386634353065306265653862343566316135396338616166 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit: BPF prog-id=200 op=LOAD Sep 6 01:22:44.034000 audit[4571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4559 pid=4571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:44.034000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632623961386634353065306265653862343566316135396338616166 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit: BPF prog-id=201 op=LOAD Sep 6 01:22:44.034000 audit[4571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4559 pid=4571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:44.034000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632623961386634353065306265653862343566316135396338616166 Sep 6 01:22:44.034000 audit: BPF prog-id=201 op=UNLOAD Sep 6 01:22:44.034000 audit: BPF prog-id=200 op=UNLOAD Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.034000 audit: BPF prog-id=202 op=LOAD Sep 6 01:22:44.034000 audit[4571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4559 pid=4571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:44.034000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632623961386634353065306265653862343566316135396338616166 Sep 6 01:22:44.151067 env[1445]: 2025-09-06 01:22:44.064 [INFO][4598] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Sep 6 01:22:44.151067 env[1445]: 2025-09-06 01:22:44.064 [INFO][4598] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" iface="eth0" netns="/var/run/netns/cni-d82eaaeb-4d27-ab6e-87b1-10e9a5ba4803" Sep 6 01:22:44.151067 env[1445]: 2025-09-06 01:22:44.064 [INFO][4598] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" iface="eth0" netns="/var/run/netns/cni-d82eaaeb-4d27-ab6e-87b1-10e9a5ba4803" Sep 6 01:22:44.151067 env[1445]: 2025-09-06 01:22:44.064 [INFO][4598] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" iface="eth0" netns="/var/run/netns/cni-d82eaaeb-4d27-ab6e-87b1-10e9a5ba4803" Sep 6 01:22:44.151067 env[1445]: 2025-09-06 01:22:44.064 [INFO][4598] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Sep 6 01:22:44.151067 env[1445]: 2025-09-06 01:22:44.064 [INFO][4598] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Sep 6 01:22:44.151067 env[1445]: 2025-09-06 01:22:44.102 [INFO][4641] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" HandleID="k8s-pod-network.4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Workload="ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0" Sep 6 01:22:44.151067 env[1445]: 2025-09-06 01:22:44.106 [INFO][4641] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:44.151067 env[1445]: 2025-09-06 01:22:44.107 [INFO][4641] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:44.151067 env[1445]: 2025-09-06 01:22:44.141 [WARNING][4641] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" HandleID="k8s-pod-network.4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Workload="ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0" Sep 6 01:22:44.151067 env[1445]: 2025-09-06 01:22:44.141 [INFO][4641] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" HandleID="k8s-pod-network.4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Workload="ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0" Sep 6 01:22:44.151067 env[1445]: 2025-09-06 01:22:44.145 [INFO][4641] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:44.151067 env[1445]: 2025-09-06 01:22:44.146 [INFO][4598] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Sep 6 01:22:44.153871 systemd[1]: run-netns-cni\x2dd82eaaeb\x2d4d27\x2dab6e\x2d87b1\x2d10e9a5ba4803.mount: Deactivated successfully. Sep 6 01:22:44.155225 env[1445]: time="2025-09-06T01:22:44.155091948Z" level=info msg="TearDown network for sandbox \"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\" successfully" Sep 6 01:22:44.155225 env[1445]: time="2025-09-06T01:22:44.155133668Z" level=info msg="StopPodSandbox for \"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\" returns successfully" Sep 6 01:22:44.157033 env[1445]: time="2025-09-06T01:22:44.156988710Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-ptp7b,Uid:533f82ff-384e-4ac4-84e9-26949125ddc1,Namespace:calico-system,Attempt:1,}" Sep 6 01:22:44.157553 env[1445]: time="2025-09-06T01:22:44.157509870Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84c8dc6bc5-4q7cp,Uid:f863d5f1-b40a-437f-845c-0824d6d70053,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650\"" Sep 6 01:22:44.188862 kubelet[2462]: I0906 01:22:44.188798 2462 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-zjjms" podStartSLOduration=46.188779531 podStartE2EDuration="46.188779531s" podCreationTimestamp="2025-09-06 01:21:58 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-06 01:22:44.171022319 +0000 UTC m=+52.395409609" watchObservedRunningTime="2025-09-06 01:22:44.188779531 +0000 UTC m=+52.413166861" Sep 6 01:22:44.200000 audit[4657]: NETFILTER_CFG table=filter:122 family=2 entries=12 op=nft_register_rule pid=4657 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:44.200000 audit[4657]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc3e79090 a2=0 a3=1 items=0 ppid=2609 pid=4657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:44.200000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:44.212000 audit[4657]: NETFILTER_CFG table=nat:123 family=2 entries=46 op=nft_register_rule pid=4657 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:44.212000 audit[4657]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=ffffc3e79090 a2=0 a3=1 items=0 ppid=2609 pid=4657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:44.212000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:44.268000 audit[4669]: NETFILTER_CFG table=filter:124 family=2 entries=12 op=nft_register_rule pid=4669 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:44.268000 audit[4669]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffca1459a0 a2=0 a3=1 items=0 ppid=2609 pid=4669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:44.268000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:44.301000 audit[4669]: NETFILTER_CFG table=nat:125 family=2 entries=58 op=nft_register_chain pid=4669 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:44.309019 kernel: kauditd_printk_skb: 554 callbacks suppressed Sep 6 01:22:44.309154 kernel: audit: type=1325 audit(1757121764.301:1294): table=nat:125 family=2 entries=58 op=nft_register_chain pid=4669 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:44.301000 audit[4669]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=ffffca1459a0 a2=0 a3=1 items=0 ppid=2609 pid=4669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:44.352051 kernel: audit: type=1300 audit(1757121764.301:1294): arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=ffffca1459a0 a2=0 a3=1 items=0 ppid=2609 pid=4669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:44.301000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:44.369187 kernel: audit: type=1327 audit(1757121764.301:1294): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:44.478892 systemd-networkd[1608]: cali6dcbd5f9d68: Link UP Sep 6 01:22:44.489778 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali6dcbd5f9d68: link becomes ready Sep 6 01:22:44.490057 systemd-networkd[1608]: cali6dcbd5f9d68: Gained carrier Sep 6 01:22:44.505101 env[1445]: 2025-09-06 01:22:44.294 [INFO][4658] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0 goldmane-54d579b49d- calico-system 533f82ff-384e-4ac4-84e9-26949125ddc1 990 0 2025-09-06 01:22:15 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:54d579b49d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ci-3510.3.8-n-645ca388a2 goldmane-54d579b49d-ptp7b eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali6dcbd5f9d68 [] [] }} ContainerID="6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4" Namespace="calico-system" Pod="goldmane-54d579b49d-ptp7b" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-" Sep 6 01:22:44.505101 env[1445]: 2025-09-06 01:22:44.294 [INFO][4658] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4" Namespace="calico-system" Pod="goldmane-54d579b49d-ptp7b" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0" Sep 6 01:22:44.505101 env[1445]: 2025-09-06 01:22:44.415 [INFO][4675] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4" HandleID="k8s-pod-network.6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4" Workload="ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0" Sep 6 01:22:44.505101 env[1445]: 2025-09-06 01:22:44.416 [INFO][4675] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4" HandleID="k8s-pod-network.6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4" Workload="ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40005ee200), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-645ca388a2", "pod":"goldmane-54d579b49d-ptp7b", "timestamp":"2025-09-06 01:22:44.4159718 +0000 UTC"}, Hostname:"ci-3510.3.8-n-645ca388a2", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 6 01:22:44.505101 env[1445]: 2025-09-06 01:22:44.417 [INFO][4675] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:44.505101 env[1445]: 2025-09-06 01:22:44.417 [INFO][4675] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:44.505101 env[1445]: 2025-09-06 01:22:44.417 [INFO][4675] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-645ca388a2' Sep 6 01:22:44.505101 env[1445]: 2025-09-06 01:22:44.426 [INFO][4675] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:44.505101 env[1445]: 2025-09-06 01:22:44.434 [INFO][4675] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:44.505101 env[1445]: 2025-09-06 01:22:44.439 [INFO][4675] ipam/ipam.go 511: Trying affinity for 192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:44.505101 env[1445]: 2025-09-06 01:22:44.441 [INFO][4675] ipam/ipam.go 158: Attempting to load block cidr=192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:44.505101 env[1445]: 2025-09-06 01:22:44.443 [INFO][4675] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.80.64/26 host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:44.505101 env[1445]: 2025-09-06 01:22:44.443 [INFO][4675] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.80.64/26 handle="k8s-pod-network.6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:44.505101 env[1445]: 2025-09-06 01:22:44.446 [INFO][4675] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4 Sep 6 01:22:44.505101 env[1445]: 2025-09-06 01:22:44.452 [INFO][4675] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.80.64/26 handle="k8s-pod-network.6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:44.505101 env[1445]: 2025-09-06 01:22:44.467 [INFO][4675] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.80.72/26] block=192.168.80.64/26 handle="k8s-pod-network.6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:44.505101 env[1445]: 2025-09-06 01:22:44.467 [INFO][4675] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.80.72/26] handle="k8s-pod-network.6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4" host="ci-3510.3.8-n-645ca388a2" Sep 6 01:22:44.505101 env[1445]: 2025-09-06 01:22:44.467 [INFO][4675] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:44.505101 env[1445]: 2025-09-06 01:22:44.467 [INFO][4675] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.80.72/26] IPv6=[] ContainerID="6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4" HandleID="k8s-pod-network.6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4" Workload="ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0" Sep 6 01:22:44.505731 env[1445]: 2025-09-06 01:22:44.469 [INFO][4658] cni-plugin/k8s.go 418: Populated endpoint ContainerID="6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4" Namespace="calico-system" Pod="goldmane-54d579b49d-ptp7b" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"533f82ff-384e-4ac4-84e9-26949125ddc1", ResourceVersion:"990", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"", Pod:"goldmane-54d579b49d-ptp7b", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.80.72/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali6dcbd5f9d68", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:44.505731 env[1445]: 2025-09-06 01:22:44.469 [INFO][4658] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.80.72/32] ContainerID="6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4" Namespace="calico-system" Pod="goldmane-54d579b49d-ptp7b" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0" Sep 6 01:22:44.505731 env[1445]: 2025-09-06 01:22:44.469 [INFO][4658] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali6dcbd5f9d68 ContainerID="6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4" Namespace="calico-system" Pod="goldmane-54d579b49d-ptp7b" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0" Sep 6 01:22:44.505731 env[1445]: 2025-09-06 01:22:44.490 [INFO][4658] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4" Namespace="calico-system" Pod="goldmane-54d579b49d-ptp7b" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0" Sep 6 01:22:44.505731 env[1445]: 2025-09-06 01:22:44.491 [INFO][4658] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4" Namespace="calico-system" Pod="goldmane-54d579b49d-ptp7b" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"533f82ff-384e-4ac4-84e9-26949125ddc1", ResourceVersion:"990", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4", Pod:"goldmane-54d579b49d-ptp7b", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.80.72/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali6dcbd5f9d68", MAC:"b6:cf:41:21:ea:67", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:44.505731 env[1445]: 2025-09-06 01:22:44.503 [INFO][4658] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4" Namespace="calico-system" Pod="goldmane-54d579b49d-ptp7b" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0" Sep 6 01:22:44.521103 env[1445]: time="2025-09-06T01:22:44.520427828Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 6 01:22:44.521103 env[1445]: time="2025-09-06T01:22:44.520469509Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 6 01:22:44.521103 env[1445]: time="2025-09-06T01:22:44.520479229Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 6 01:22:44.521103 env[1445]: time="2025-09-06T01:22:44.520573309Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4 pid=4695 runtime=io.containerd.runc.v2 Sep 6 01:22:44.541123 systemd[1]: Started cri-containerd-6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4.scope. Sep 6 01:22:44.540000 audit[4714]: NETFILTER_CFG table=filter:126 family=2 entries=70 op=nft_register_chain pid=4714 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:44.540000 audit[4714]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=33956 a0=3 a1=ffffe92e6880 a2=0 a3=ffffbb592fa8 items=0 ppid=3619 pid=4714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:44.589354 kernel: audit: type=1325 audit(1757121764.540:1295): table=filter:126 family=2 entries=70 op=nft_register_chain pid=4714 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 6 01:22:44.589520 kernel: audit: type=1300 audit(1757121764.540:1295): arch=c00000b7 syscall=211 success=yes exit=33956 a0=3 a1=ffffe92e6880 a2=0 a3=ffffbb592fa8 items=0 ppid=3619 pid=4714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:44.540000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:44.614585 kernel: audit: type=1327 audit(1757121764.540:1295): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 6 01:22:44.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.639417 kernel: audit: type=1400 audit(1757121764.589:1296): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.640611 env[1445]: time="2025-09-06T01:22:44.640569587Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-ptp7b,Uid:533f82ff-384e-4ac4-84e9-26949125ddc1,Namespace:calico-system,Attempt:1,} returns sandbox id \"6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4\"" Sep 6 01:22:44.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.661672 kernel: audit: type=1400 audit(1757121764.589:1297): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.680789 kernel: audit: type=1400 audit(1757121764.589:1298): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.701247 kernel: audit: type=1400 audit(1757121764.589:1299): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.589000 audit: BPF prog-id=203 op=LOAD Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4695 pid=4706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:44.590000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663633436326637306161363038353335636430303732303038386264 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4695 pid=4706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:44.590000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663633436326637306161363038353335636430303732303038386264 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit: BPF prog-id=204 op=LOAD Sep 6 01:22:44.590000 audit[4706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4695 pid=4706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:44.590000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663633436326637306161363038353335636430303732303038386264 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit: BPF prog-id=205 op=LOAD Sep 6 01:22:44.590000 audit[4706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4695 pid=4706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:44.590000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663633436326637306161363038353335636430303732303038386264 Sep 6 01:22:44.590000 audit: BPF prog-id=205 op=UNLOAD Sep 6 01:22:44.590000 audit: BPF prog-id=204 op=UNLOAD Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { perfmon } for pid=4706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit[4706]: AVC avc: denied { bpf } for pid=4706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:44.590000 audit: BPF prog-id=206 op=LOAD Sep 6 01:22:44.590000 audit[4706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4695 pid=4706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:44.590000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663633436326637306161363038353335636430303732303038386264 Sep 6 01:22:45.086266 systemd-networkd[1608]: cali6e8b5b85dc2: Gained IPv6LL Sep 6 01:22:45.277898 systemd-networkd[1608]: cali86280e2e12a: Gained IPv6LL Sep 6 01:22:45.469936 systemd-networkd[1608]: cali9468ea26ad0: Gained IPv6LL Sep 6 01:22:45.533980 systemd-networkd[1608]: cali6dcbd5f9d68: Gained IPv6LL Sep 6 01:22:45.897841 env[1445]: time="2025-09-06T01:22:45.897787928Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:45.910921 env[1445]: time="2025-09-06T01:22:45.910867616Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:34117caf92350e1565610f2254377d7455b11e36666b5ce11b4a13670720432a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:45.919585 env[1445]: time="2025-09-06T01:22:45.919517502Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:45.930575 env[1445]: time="2025-09-06T01:22:45.930515669Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:27c4187717f08f0a5727019d8beb7597665eb47e69eaa1d7d091a7e28913e577,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:45.930903 env[1445]: time="2025-09-06T01:22:45.930825829Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\" returns image reference \"sha256:34117caf92350e1565610f2254377d7455b11e36666b5ce11b4a13670720432a\"" Sep 6 01:22:45.939613 env[1445]: time="2025-09-06T01:22:45.939547395Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 6 01:22:45.962456 env[1445]: time="2025-09-06T01:22:45.962413210Z" level=info msg="CreateContainer within sandbox \"e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Sep 6 01:22:46.039503 env[1445]: time="2025-09-06T01:22:46.039442220Z" level=info msg="CreateContainer within sandbox \"e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"b2488fb2309b4c1c2896b9f3d2bd7a35779dd7023a12f3f379ce22f231a3c672\"" Sep 6 01:22:46.040299 env[1445]: time="2025-09-06T01:22:46.040272220Z" level=info msg="StartContainer for \"b2488fb2309b4c1c2896b9f3d2bd7a35779dd7023a12f3f379ce22f231a3c672\"" Sep 6 01:22:46.079848 systemd[1]: Started cri-containerd-b2488fb2309b4c1c2896b9f3d2bd7a35779dd7023a12f3f379ce22f231a3c672.scope. Sep 6 01:22:46.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.206000 audit: BPF prog-id=207 op=LOAD Sep 6 01:22:46.207000 audit[4740]: AVC avc: denied { bpf } for pid=4740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.207000 audit[4740]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4056 pid=4740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:46.207000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232343838666232333039623463316332383936623966336432626437 Sep 6 01:22:46.207000 audit[4740]: AVC avc: denied { perfmon } for pid=4740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.207000 audit[4740]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4056 pid=4740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:46.207000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232343838666232333039623463316332383936623966336432626437 Sep 6 01:22:46.208000 audit[4740]: AVC avc: denied { bpf } for pid=4740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.208000 audit[4740]: AVC avc: denied { bpf } for pid=4740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.208000 audit[4740]: AVC avc: denied { bpf } for pid=4740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.208000 audit[4740]: AVC avc: denied { perfmon } for pid=4740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.208000 audit[4740]: AVC avc: denied { perfmon } for pid=4740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.208000 audit[4740]: AVC avc: denied { perfmon } for pid=4740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.208000 audit[4740]: AVC avc: denied { perfmon } for pid=4740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.208000 audit[4740]: AVC avc: denied { perfmon } for pid=4740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.208000 audit[4740]: AVC avc: denied { bpf } for pid=4740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.208000 audit[4740]: AVC avc: denied { bpf } for pid=4740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.208000 audit: BPF prog-id=208 op=LOAD Sep 6 01:22:46.208000 audit[4740]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4056 pid=4740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:46.208000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232343838666232333039623463316332383936623966336432626437 Sep 6 01:22:46.209000 audit[4740]: AVC avc: denied { bpf } for pid=4740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.209000 audit[4740]: AVC avc: denied { bpf } for pid=4740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.209000 audit[4740]: AVC avc: denied { perfmon } for pid=4740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.209000 audit[4740]: AVC avc: denied { perfmon } for pid=4740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.209000 audit[4740]: AVC avc: denied { perfmon } for pid=4740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.209000 audit[4740]: AVC avc: denied { perfmon } for pid=4740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.209000 audit[4740]: AVC avc: denied { perfmon } for pid=4740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.209000 audit[4740]: AVC avc: denied { bpf } for pid=4740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.209000 audit[4740]: AVC avc: denied { bpf } for pid=4740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.209000 audit: BPF prog-id=209 op=LOAD Sep 6 01:22:46.209000 audit[4740]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4056 pid=4740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:46.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232343838666232333039623463316332383936623966336432626437 Sep 6 01:22:46.209000 audit: BPF prog-id=209 op=UNLOAD Sep 6 01:22:46.209000 audit: BPF prog-id=208 op=UNLOAD Sep 6 01:22:46.210000 audit[4740]: AVC avc: denied { bpf } for pid=4740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.210000 audit[4740]: AVC avc: denied { bpf } for pid=4740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.210000 audit[4740]: AVC avc: denied { bpf } for pid=4740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.210000 audit[4740]: AVC avc: denied { perfmon } for pid=4740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.210000 audit[4740]: AVC avc: denied { perfmon } for pid=4740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.210000 audit[4740]: AVC avc: denied { perfmon } for pid=4740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.210000 audit[4740]: AVC avc: denied { perfmon } for pid=4740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.210000 audit[4740]: AVC avc: denied { perfmon } for pid=4740 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.210000 audit[4740]: AVC avc: denied { bpf } for pid=4740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.210000 audit[4740]: AVC avc: denied { bpf } for pid=4740 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:46.210000 audit: BPF prog-id=210 op=LOAD Sep 6 01:22:46.210000 audit[4740]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4056 pid=4740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:46.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232343838666232333039623463316332383936623966336432626437 Sep 6 01:22:46.414354 env[1445]: time="2025-09-06T01:22:46.414308102Z" level=info msg="StartContainer for \"b2488fb2309b4c1c2896b9f3d2bd7a35779dd7023a12f3f379ce22f231a3c672\" returns successfully" Sep 6 01:22:47.208228 systemd[1]: run-containerd-runc-k8s.io-b2488fb2309b4c1c2896b9f3d2bd7a35779dd7023a12f3f379ce22f231a3c672-runc.3FEYSY.mount: Deactivated successfully. Sep 6 01:22:47.261164 kubelet[2462]: I0906 01:22:47.261096 2462 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-7bdc9c645-jw4z2" podStartSLOduration=25.964126916 podStartE2EDuration="32.261079366s" podCreationTimestamp="2025-09-06 01:22:15 +0000 UTC" firstStartedPulling="2025-09-06 01:22:39.63515978 +0000 UTC m=+47.859547070" lastFinishedPulling="2025-09-06 01:22:45.93211219 +0000 UTC m=+54.156499520" observedRunningTime="2025-09-06 01:22:47.226998984 +0000 UTC m=+55.451386314" watchObservedRunningTime="2025-09-06 01:22:47.261079366 +0000 UTC m=+55.485466696" Sep 6 01:22:48.587000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522494 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:48.587000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=400fac1b60 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:22:48.587000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:22:48.588000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:48.588000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=40062a5cc0 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:22:48.588000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:22:48.588000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522490 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:48.588000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=400fac1bf0 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:22:48.588000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:22:48.616000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522496 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:48.616000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=400493ec60 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:22:48.616000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:22:48.643000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:48.643000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=4006fd7f80 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:22:48.643000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:22:48.643000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522494 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:48.643000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=4006c99c20 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:22:48.643000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:22:48.820778 env[1445]: time="2025-09-06T01:22:48.820735798Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:48.829864 env[1445]: time="2025-09-06T01:22:48.829819164Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:48.838317 env[1445]: time="2025-09-06T01:22:48.838276210Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:48.843942 env[1445]: time="2025-09-06T01:22:48.843844733Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:48.844373 env[1445]: time="2025-09-06T01:22:48.844346493Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08\"" Sep 6 01:22:48.847042 env[1445]: time="2025-09-06T01:22:48.847013935Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\"" Sep 6 01:22:48.859324 env[1445]: time="2025-09-06T01:22:48.859281223Z" level=info msg="CreateContainer within sandbox \"169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 6 01:22:48.918701 env[1445]: time="2025-09-06T01:22:48.918637940Z" level=info msg="CreateContainer within sandbox \"169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"6b94cf6de91700a56661deb170caf3af4d9316e896a30552c8ceb952dd31b321\"" Sep 6 01:22:48.919568 env[1445]: time="2025-09-06T01:22:48.919540941Z" level=info msg="StartContainer for \"6b94cf6de91700a56661deb170caf3af4d9316e896a30552c8ceb952dd31b321\"" Sep 6 01:22:48.940593 systemd[1]: Started cri-containerd-6b94cf6de91700a56661deb170caf3af4d9316e896a30552c8ceb952dd31b321.scope. Sep 6 01:22:49.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.013000 audit: BPF prog-id=211 op=LOAD Sep 6 01:22:49.014000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.014000 audit[4809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4192 pid=4809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:49.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662393463663664653931373030613536363631646562313730636166 Sep 6 01:22:49.015000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.015000 audit[4809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4192 pid=4809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:49.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662393463663664653931373030613536363631646562313730636166 Sep 6 01:22:49.015000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.015000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.015000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.015000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.015000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.015000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.015000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.015000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.015000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.015000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.015000 audit: BPF prog-id=212 op=LOAD Sep 6 01:22:49.015000 audit[4809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4192 pid=4809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:49.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662393463663664653931373030613536363631646562313730636166 Sep 6 01:22:49.016000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.016000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.016000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.016000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.016000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.016000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.016000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.016000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.016000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.016000 audit: BPF prog-id=213 op=LOAD Sep 6 01:22:49.016000 audit[4809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4192 pid=4809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:49.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662393463663664653931373030613536363631646562313730636166 Sep 6 01:22:49.016000 audit: BPF prog-id=213 op=UNLOAD Sep 6 01:22:49.016000 audit: BPF prog-id=212 op=UNLOAD Sep 6 01:22:49.016000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.016000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.016000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.016000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.016000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.016000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.016000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.016000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.016000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.016000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:49.016000 audit: BPF prog-id=214 op=LOAD Sep 6 01:22:49.016000 audit[4809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4192 pid=4809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:49.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662393463663664653931373030613536363631646562313730636166 Sep 6 01:22:49.458102 env[1445]: time="2025-09-06T01:22:49.458058360Z" level=info msg="StartContainer for \"6b94cf6de91700a56661deb170caf3af4d9316e896a30552c8ceb952dd31b321\" returns successfully" Sep 6 01:22:49.893788 systemd[1]: run-containerd-runc-k8s.io-6b94cf6de91700a56661deb170caf3af4d9316e896a30552c8ceb952dd31b321-runc.4SSZkU.mount: Deactivated successfully. Sep 6 01:22:49.928000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522494 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:49.935645 kernel: kauditd_printk_skb: 185 callbacks suppressed Sep 6 01:22:49.935793 kernel: audit: type=1400 audit(1757121769.928:1356): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522494 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:49.943000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:49.982737 kernel: audit: type=1400 audit(1757121769.943:1357): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:49.943000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000948980 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:22:50.016781 kernel: audit: type=1300 audit(1757121769.943:1357): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000948980 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:22:49.943000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:50.041389 kernel: audit: type=1327 audit(1757121769.943:1357): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:49.928000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002ae2660 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:22:50.072698 kernel: audit: type=1300 audit(1757121769.928:1356): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002ae2660 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:22:49.928000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:50.098876 kernel: audit: type=1327 audit(1757121769.928:1356): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:50.262000 audit[4822]: AVC avc: denied { watch } for pid=4822 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_22_27.3271909987/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c840,c867 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c840,c867 tclass=file permissive=0 Sep 6 01:22:50.262000 audit[4822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000dec6e0 a2=fc6 a3=0 items=0 ppid=4192 pid=4822 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c840,c867 key=(null) Sep 6 01:22:50.329910 kernel: audit: type=1400 audit(1757121770.262:1358): avc: denied { watch } for pid=4822 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_22_27.3271909987/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c840,c867 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c840,c867 tclass=file permissive=0 Sep 6 01:22:50.329994 kernel: audit: type=1300 audit(1757121770.262:1358): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000dec6e0 a2=fc6 a3=0 items=0 ppid=4192 pid=4822 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c840,c867 key=(null) Sep 6 01:22:50.262000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:22:50.359533 kernel: audit: type=1327 audit(1757121770.262:1358): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:22:50.478833 kubelet[2462]: I0906 01:22:50.478765 2462 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-84c8dc6bc5-l6cl4" podStartSLOduration=31.992647382 podStartE2EDuration="40.478750438s" podCreationTimestamp="2025-09-06 01:22:10 +0000 UTC" firstStartedPulling="2025-09-06 01:22:40.360010838 +0000 UTC m=+48.584398128" lastFinishedPulling="2025-09-06 01:22:48.846113894 +0000 UTC m=+57.070501184" observedRunningTime="2025-09-06 01:22:50.478636198 +0000 UTC m=+58.703023528" watchObservedRunningTime="2025-09-06 01:22:50.478750438 +0000 UTC m=+58.703137728" Sep 6 01:22:50.507000 audit[4846]: NETFILTER_CFG table=filter:127 family=2 entries=12 op=nft_register_rule pid=4846 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:50.507000 audit[4846]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd4ee9ea0 a2=0 a3=1 items=0 ppid=2609 pid=4846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:50.507000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:50.527048 kernel: audit: type=1325 audit(1757121770.507:1359): table=filter:127 family=2 entries=12 op=nft_register_rule pid=4846 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:50.533000 audit[4846]: NETFILTER_CFG table=nat:128 family=2 entries=22 op=nft_register_rule pid=4846 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:50.533000 audit[4846]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffd4ee9ea0 a2=0 a3=1 items=0 ppid=2609 pid=4846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:50.533000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:51.296742 env[1445]: time="2025-09-06T01:22:51.296681386Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:51.320898 env[1445]: time="2025-09-06T01:22:51.320854601Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e2b30128ce4b607acd97d3edef62ce1a90be0259903090a51c360adbe4a8f3b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:51.327903 env[1445]: time="2025-09-06T01:22:51.327858085Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:51.336956 env[1445]: time="2025-09-06T01:22:51.336895331Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:f22c88018d8b58c4ef0052f594b216a13bd6852166ac131a538c5ab2fba23bb2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:51.337539 env[1445]: time="2025-09-06T01:22:51.337508331Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\" returns image reference \"sha256:5e2b30128ce4b607acd97d3edef62ce1a90be0259903090a51c360adbe4a8f3b\"" Sep 6 01:22:51.338717 env[1445]: time="2025-09-06T01:22:51.338511532Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 6 01:22:51.350122 env[1445]: time="2025-09-06T01:22:51.350079659Z" level=info msg="CreateContainer within sandbox \"b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Sep 6 01:22:51.424855 env[1445]: time="2025-09-06T01:22:51.424806425Z" level=info msg="CreateContainer within sandbox \"b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"cef695968b59fc11a3b26a3519da5e5e5bc6ccca1c5f33de99f445735715883e\"" Sep 6 01:22:51.425873 env[1445]: time="2025-09-06T01:22:51.425833146Z" level=info msg="StartContainer for \"cef695968b59fc11a3b26a3519da5e5e5bc6ccca1c5f33de99f445735715883e\"" Sep 6 01:22:51.456714 systemd[1]: run-containerd-runc-k8s.io-cef695968b59fc11a3b26a3519da5e5e5bc6ccca1c5f33de99f445735715883e-runc.Z24UDD.mount: Deactivated successfully. Sep 6 01:22:51.464143 systemd[1]: Started cri-containerd-cef695968b59fc11a3b26a3519da5e5e5bc6ccca1c5f33de99f445735715883e.scope. Sep 6 01:22:51.480476 kubelet[2462]: I0906 01:22:51.479923 2462 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4458 pid=4854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:51.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365663639353936386235396663313161336232366133353139646135 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit: BPF prog-id=215 op=LOAD Sep 6 01:22:51.494000 audit[4854]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4458 pid=4854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:51.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365663639353936386235396663313161336232366133353139646135 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit: BPF prog-id=216 op=LOAD Sep 6 01:22:51.494000 audit[4854]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4458 pid=4854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:51.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365663639353936386235396663313161336232366133353139646135 Sep 6 01:22:51.494000 audit: BPF prog-id=216 op=UNLOAD Sep 6 01:22:51.494000 audit: BPF prog-id=215 op=UNLOAD Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.494000 audit: BPF prog-id=217 op=LOAD Sep 6 01:22:51.494000 audit[4854]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4458 pid=4854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:51.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365663639353936386235396663313161336232366133353139646135 Sep 6 01:22:51.515295 env[1445]: time="2025-09-06T01:22:51.515051681Z" level=info msg="StartContainer for \"cef695968b59fc11a3b26a3519da5e5e5bc6ccca1c5f33de99f445735715883e\" returns successfully" Sep 6 01:22:51.736478 env[1445]: time="2025-09-06T01:22:51.736374778Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:51.748935 env[1445]: time="2025-09-06T01:22:51.748880825Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:51.755170 env[1445]: time="2025-09-06T01:22:51.755128989Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:51.759630 env[1445]: time="2025-09-06T01:22:51.759582232Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:51.760286 env[1445]: time="2025-09-06T01:22:51.760254152Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08\"" Sep 6 01:22:51.761773 env[1445]: time="2025-09-06T01:22:51.761745233Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\"" Sep 6 01:22:51.769137 env[1445]: time="2025-09-06T01:22:51.769080958Z" level=info msg="CreateContainer within sandbox \"62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 6 01:22:51.839231 env[1445]: time="2025-09-06T01:22:51.839175081Z" level=info msg="CreateContainer within sandbox \"62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"dc7c916b87c6027c9a685aacfdf2aa0ccefbe80b8748d61f4d207c53fd564e2d\"" Sep 6 01:22:51.839878 env[1445]: time="2025-09-06T01:22:51.839850161Z" level=info msg="StartContainer for \"dc7c916b87c6027c9a685aacfdf2aa0ccefbe80b8748d61f4d207c53fd564e2d\"" Sep 6 01:22:51.854553 systemd[1]: Started cri-containerd-dc7c916b87c6027c9a685aacfdf2aa0ccefbe80b8748d61f4d207c53fd564e2d.scope. Sep 6 01:22:51.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.892000 audit: BPF prog-id=218 op=LOAD Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { bpf } for pid=4890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4559 pid=4890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:51.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463376339313662383763363032376339613638356161636664663261 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { perfmon } for pid=4890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4559 pid=4890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:51.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463376339313662383763363032376339613638356161636664663261 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { bpf } for pid=4890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { bpf } for pid=4890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { bpf } for pid=4890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { perfmon } for pid=4890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { perfmon } for pid=4890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { perfmon } for pid=4890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { perfmon } for pid=4890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { perfmon } for pid=4890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { bpf } for pid=4890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { bpf } for pid=4890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit: BPF prog-id=219 op=LOAD Sep 6 01:22:51.893000 audit[4890]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4559 pid=4890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:51.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463376339313662383763363032376339613638356161636664663261 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { bpf } for pid=4890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { bpf } for pid=4890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { perfmon } for pid=4890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { perfmon } for pid=4890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { perfmon } for pid=4890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { perfmon } for pid=4890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { perfmon } for pid=4890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { bpf } for pid=4890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { bpf } for pid=4890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit: BPF prog-id=220 op=LOAD Sep 6 01:22:51.893000 audit[4890]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4559 pid=4890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:51.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463376339313662383763363032376339613638356161636664663261 Sep 6 01:22:51.893000 audit: BPF prog-id=220 op=UNLOAD Sep 6 01:22:51.893000 audit: BPF prog-id=219 op=UNLOAD Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { bpf } for pid=4890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { bpf } for pid=4890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { bpf } for pid=4890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { perfmon } for pid=4890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { perfmon } for pid=4890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { perfmon } for pid=4890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { perfmon } for pid=4890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { perfmon } for pid=4890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { bpf } for pid=4890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit[4890]: AVC avc: denied { bpf } for pid=4890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:51.893000 audit: BPF prog-id=221 op=LOAD Sep 6 01:22:51.893000 audit[4890]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4559 pid=4890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:51.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463376339313662383763363032376339613638356161636664663261 Sep 6 01:22:51.927160 env[1445]: time="2025-09-06T01:22:51.927107615Z" level=info msg="StartContainer for \"dc7c916b87c6027c9a685aacfdf2aa0ccefbe80b8748d61f4d207c53fd564e2d\" returns successfully" Sep 6 01:22:51.929451 env[1445]: time="2025-09-06T01:22:51.929408337Z" level=info msg="StopPodSandbox for \"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\"" Sep 6 01:22:52.082904 env[1445]: 2025-09-06 01:22:52.013 [WARNING][4928] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"533f82ff-384e-4ac4-84e9-26949125ddc1", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4", Pod:"goldmane-54d579b49d-ptp7b", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.80.72/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali6dcbd5f9d68", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:52.082904 env[1445]: 2025-09-06 01:22:52.013 [INFO][4928] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Sep 6 01:22:52.082904 env[1445]: 2025-09-06 01:22:52.013 [INFO][4928] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" iface="eth0" netns="" Sep 6 01:22:52.082904 env[1445]: 2025-09-06 01:22:52.013 [INFO][4928] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Sep 6 01:22:52.082904 env[1445]: 2025-09-06 01:22:52.013 [INFO][4928] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Sep 6 01:22:52.082904 env[1445]: 2025-09-06 01:22:52.065 [INFO][4935] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" HandleID="k8s-pod-network.4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Workload="ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0" Sep 6 01:22:52.082904 env[1445]: 2025-09-06 01:22:52.065 [INFO][4935] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:52.082904 env[1445]: 2025-09-06 01:22:52.066 [INFO][4935] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:52.082904 env[1445]: 2025-09-06 01:22:52.075 [WARNING][4935] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" HandleID="k8s-pod-network.4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Workload="ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0" Sep 6 01:22:52.082904 env[1445]: 2025-09-06 01:22:52.076 [INFO][4935] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" HandleID="k8s-pod-network.4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Workload="ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0" Sep 6 01:22:52.082904 env[1445]: 2025-09-06 01:22:52.078 [INFO][4935] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:52.082904 env[1445]: 2025-09-06 01:22:52.080 [INFO][4928] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Sep 6 01:22:52.083568 env[1445]: time="2025-09-06T01:22:52.083532352Z" level=info msg="TearDown network for sandbox \"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\" successfully" Sep 6 01:22:52.083922 env[1445]: time="2025-09-06T01:22:52.083896712Z" level=info msg="StopPodSandbox for \"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\" returns successfully" Sep 6 01:22:52.084629 env[1445]: time="2025-09-06T01:22:52.084591952Z" level=info msg="RemovePodSandbox for \"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\"" Sep 6 01:22:52.084714 env[1445]: time="2025-09-06T01:22:52.084631872Z" level=info msg="Forcibly stopping sandbox \"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\"" Sep 6 01:22:52.271753 env[1445]: 2025-09-06 01:22:52.201 [WARNING][4954] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"533f82ff-384e-4ac4-84e9-26949125ddc1", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4", Pod:"goldmane-54d579b49d-ptp7b", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.80.72/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali6dcbd5f9d68", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:52.271753 env[1445]: 2025-09-06 01:22:52.202 [INFO][4954] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Sep 6 01:22:52.271753 env[1445]: 2025-09-06 01:22:52.202 [INFO][4954] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" iface="eth0" netns="" Sep 6 01:22:52.271753 env[1445]: 2025-09-06 01:22:52.202 [INFO][4954] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Sep 6 01:22:52.271753 env[1445]: 2025-09-06 01:22:52.202 [INFO][4954] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Sep 6 01:22:52.271753 env[1445]: 2025-09-06 01:22:52.237 [INFO][4962] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" HandleID="k8s-pod-network.4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Workload="ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0" Sep 6 01:22:52.271753 env[1445]: 2025-09-06 01:22:52.237 [INFO][4962] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:52.271753 env[1445]: 2025-09-06 01:22:52.237 [INFO][4962] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:52.271753 env[1445]: 2025-09-06 01:22:52.262 [WARNING][4962] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" HandleID="k8s-pod-network.4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Workload="ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0" Sep 6 01:22:52.271753 env[1445]: 2025-09-06 01:22:52.262 [INFO][4962] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" HandleID="k8s-pod-network.4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Workload="ci--3510.3.8--n--645ca388a2-k8s-goldmane--54d579b49d--ptp7b-eth0" Sep 6 01:22:52.271753 env[1445]: 2025-09-06 01:22:52.267 [INFO][4962] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:52.271753 env[1445]: 2025-09-06 01:22:52.268 [INFO][4954] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561" Sep 6 01:22:52.271753 env[1445]: time="2025-09-06T01:22:52.271075666Z" level=info msg="TearDown network for sandbox \"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\" successfully" Sep 6 01:22:52.290357 env[1445]: time="2025-09-06T01:22:52.290289478Z" level=info msg="RemovePodSandbox \"4a431b1abf8702b6b2c9a9756d15475f75ef5623dc9ef3721044915103851561\" returns successfully" Sep 6 01:22:52.290955 env[1445]: time="2025-09-06T01:22:52.290915759Z" level=info msg="StopPodSandbox for \"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\"" Sep 6 01:22:52.385269 env[1445]: 2025-09-06 01:22:52.333 [WARNING][4976] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0", GenerateName:"calico-kube-controllers-7bdc9c645-", Namespace:"calico-system", SelfLink:"", UID:"cefa4131-48b4-4105-8378-5bb83a604ba5", ResourceVersion:"1018", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7bdc9c645", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89", Pod:"calico-kube-controllers-7bdc9c645-jw4z2", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.80.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali5adfbb23cc7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:52.385269 env[1445]: 2025-09-06 01:22:52.334 [INFO][4976] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Sep 6 01:22:52.385269 env[1445]: 2025-09-06 01:22:52.334 [INFO][4976] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" iface="eth0" netns="" Sep 6 01:22:52.385269 env[1445]: 2025-09-06 01:22:52.334 [INFO][4976] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Sep 6 01:22:52.385269 env[1445]: 2025-09-06 01:22:52.334 [INFO][4976] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Sep 6 01:22:52.385269 env[1445]: 2025-09-06 01:22:52.368 [INFO][4983] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" HandleID="k8s-pod-network.58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0" Sep 6 01:22:52.385269 env[1445]: 2025-09-06 01:22:52.368 [INFO][4983] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:52.385269 env[1445]: 2025-09-06 01:22:52.368 [INFO][4983] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:52.385269 env[1445]: 2025-09-06 01:22:52.378 [WARNING][4983] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" HandleID="k8s-pod-network.58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0" Sep 6 01:22:52.385269 env[1445]: 2025-09-06 01:22:52.379 [INFO][4983] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" HandleID="k8s-pod-network.58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0" Sep 6 01:22:52.385269 env[1445]: 2025-09-06 01:22:52.382 [INFO][4983] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:52.385269 env[1445]: 2025-09-06 01:22:52.383 [INFO][4976] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Sep 6 01:22:52.385269 env[1445]: time="2025-09-06T01:22:52.385234096Z" level=info msg="TearDown network for sandbox \"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\" successfully" Sep 6 01:22:52.385926 env[1445]: time="2025-09-06T01:22:52.385273336Z" level=info msg="StopPodSandbox for \"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\" returns successfully" Sep 6 01:22:52.388805 env[1445]: time="2025-09-06T01:22:52.388764779Z" level=info msg="RemovePodSandbox for \"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\"" Sep 6 01:22:52.390157 env[1445]: time="2025-09-06T01:22:52.388805059Z" level=info msg="Forcibly stopping sandbox \"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\"" Sep 6 01:22:52.490274 env[1445]: 2025-09-06 01:22:52.434 [WARNING][4998] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0", GenerateName:"calico-kube-controllers-7bdc9c645-", Namespace:"calico-system", SelfLink:"", UID:"cefa4131-48b4-4105-8378-5bb83a604ba5", ResourceVersion:"1018", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7bdc9c645", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"e8ce955385de780cde9109ffe8d4b549242b2a72f54fb200a553262e12e0bf89", Pod:"calico-kube-controllers-7bdc9c645-jw4z2", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.80.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali5adfbb23cc7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:52.490274 env[1445]: 2025-09-06 01:22:52.435 [INFO][4998] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Sep 6 01:22:52.490274 env[1445]: 2025-09-06 01:22:52.435 [INFO][4998] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" iface="eth0" netns="" Sep 6 01:22:52.490274 env[1445]: 2025-09-06 01:22:52.435 [INFO][4998] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Sep 6 01:22:52.490274 env[1445]: 2025-09-06 01:22:52.435 [INFO][4998] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Sep 6 01:22:52.490274 env[1445]: 2025-09-06 01:22:52.462 [INFO][5005] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" HandleID="k8s-pod-network.58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0" Sep 6 01:22:52.490274 env[1445]: 2025-09-06 01:22:52.466 [INFO][5005] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:52.490274 env[1445]: 2025-09-06 01:22:52.466 [INFO][5005] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:52.490274 env[1445]: 2025-09-06 01:22:52.477 [WARNING][5005] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" HandleID="k8s-pod-network.58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0" Sep 6 01:22:52.490274 env[1445]: 2025-09-06 01:22:52.477 [INFO][5005] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" HandleID="k8s-pod-network.58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--kube--controllers--7bdc9c645--jw4z2-eth0" Sep 6 01:22:52.490274 env[1445]: 2025-09-06 01:22:52.480 [INFO][5005] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:52.490274 env[1445]: 2025-09-06 01:22:52.487 [INFO][4998] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2" Sep 6 01:22:52.490746 env[1445]: time="2025-09-06T01:22:52.490300881Z" level=info msg="TearDown network for sandbox \"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\" successfully" Sep 6 01:22:52.506701 env[1445]: time="2025-09-06T01:22:52.506645131Z" level=info msg="RemovePodSandbox \"58b7834bc8cabc6f747fcc87eaefe5c9887a74573752a17d1ab2d9e18c73ade2\" returns successfully" Sep 6 01:22:52.507235 env[1445]: time="2025-09-06T01:22:52.507211571Z" level=info msg="StopPodSandbox for \"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\"" Sep 6 01:22:52.589000 audit[5025]: NETFILTER_CFG table=filter:129 family=2 entries=12 op=nft_register_rule pid=5025 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:52.589000 audit[5025]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffe384e020 a2=0 a3=1 items=0 ppid=2609 pid=5025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:52.589000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:52.595000 audit[5025]: NETFILTER_CFG table=nat:130 family=2 entries=22 op=nft_register_rule pid=5025 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:52.595000 audit[5025]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffe384e020 a2=0 a3=1 items=0 ppid=2609 pid=5025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:52.595000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:52.620345 env[1445]: 2025-09-06 01:22:52.563 [WARNING][5019] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-whisker--6cb794cd7f--jqbrr-eth0" Sep 6 01:22:52.620345 env[1445]: 2025-09-06 01:22:52.563 [INFO][5019] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Sep 6 01:22:52.620345 env[1445]: 2025-09-06 01:22:52.563 [INFO][5019] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" iface="eth0" netns="" Sep 6 01:22:52.620345 env[1445]: 2025-09-06 01:22:52.563 [INFO][5019] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Sep 6 01:22:52.620345 env[1445]: 2025-09-06 01:22:52.563 [INFO][5019] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Sep 6 01:22:52.620345 env[1445]: 2025-09-06 01:22:52.604 [INFO][5028] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" HandleID="k8s-pod-network.da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Workload="ci--3510.3.8--n--645ca388a2-k8s-whisker--6cb794cd7f--jqbrr-eth0" Sep 6 01:22:52.620345 env[1445]: 2025-09-06 01:22:52.604 [INFO][5028] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:52.620345 env[1445]: 2025-09-06 01:22:52.604 [INFO][5028] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:52.620345 env[1445]: 2025-09-06 01:22:52.614 [WARNING][5028] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" HandleID="k8s-pod-network.da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Workload="ci--3510.3.8--n--645ca388a2-k8s-whisker--6cb794cd7f--jqbrr-eth0" Sep 6 01:22:52.620345 env[1445]: 2025-09-06 01:22:52.614 [INFO][5028] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" HandleID="k8s-pod-network.da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Workload="ci--3510.3.8--n--645ca388a2-k8s-whisker--6cb794cd7f--jqbrr-eth0" Sep 6 01:22:52.620345 env[1445]: 2025-09-06 01:22:52.617 [INFO][5028] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:52.620345 env[1445]: 2025-09-06 01:22:52.618 [INFO][5019] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Sep 6 01:22:52.620872 env[1445]: time="2025-09-06T01:22:52.620823961Z" level=info msg="TearDown network for sandbox \"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\" successfully" Sep 6 01:22:52.620957 env[1445]: time="2025-09-06T01:22:52.620940081Z" level=info msg="StopPodSandbox for \"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\" returns successfully" Sep 6 01:22:52.621601 env[1445]: time="2025-09-06T01:22:52.621570441Z" level=info msg="RemovePodSandbox for \"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\"" Sep 6 01:22:52.621682 env[1445]: time="2025-09-06T01:22:52.621621201Z" level=info msg="Forcibly stopping sandbox \"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\"" Sep 6 01:22:52.722907 env[1445]: 2025-09-06 01:22:52.679 [WARNING][5042] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" WorkloadEndpoint="ci--3510.3.8--n--645ca388a2-k8s-whisker--6cb794cd7f--jqbrr-eth0" Sep 6 01:22:52.722907 env[1445]: 2025-09-06 01:22:52.679 [INFO][5042] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Sep 6 01:22:52.722907 env[1445]: 2025-09-06 01:22:52.679 [INFO][5042] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" iface="eth0" netns="" Sep 6 01:22:52.722907 env[1445]: 2025-09-06 01:22:52.679 [INFO][5042] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Sep 6 01:22:52.722907 env[1445]: 2025-09-06 01:22:52.679 [INFO][5042] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Sep 6 01:22:52.722907 env[1445]: 2025-09-06 01:22:52.705 [INFO][5049] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" HandleID="k8s-pod-network.da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Workload="ci--3510.3.8--n--645ca388a2-k8s-whisker--6cb794cd7f--jqbrr-eth0" Sep 6 01:22:52.722907 env[1445]: 2025-09-06 01:22:52.705 [INFO][5049] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:52.722907 env[1445]: 2025-09-06 01:22:52.706 [INFO][5049] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:52.722907 env[1445]: 2025-09-06 01:22:52.718 [WARNING][5049] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" HandleID="k8s-pod-network.da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Workload="ci--3510.3.8--n--645ca388a2-k8s-whisker--6cb794cd7f--jqbrr-eth0" Sep 6 01:22:52.722907 env[1445]: 2025-09-06 01:22:52.718 [INFO][5049] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" HandleID="k8s-pod-network.da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Workload="ci--3510.3.8--n--645ca388a2-k8s-whisker--6cb794cd7f--jqbrr-eth0" Sep 6 01:22:52.722907 env[1445]: 2025-09-06 01:22:52.720 [INFO][5049] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:52.722907 env[1445]: 2025-09-06 01:22:52.721 [INFO][5042] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50" Sep 6 01:22:52.722907 env[1445]: time="2025-09-06T01:22:52.722869783Z" level=info msg="TearDown network for sandbox \"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\" successfully" Sep 6 01:22:52.794769 env[1445]: time="2025-09-06T01:22:52.794704987Z" level=info msg="RemovePodSandbox \"da2d64355126d0f5ab72e34c4253737170d4c6ca1cc661819078977481749c50\" returns successfully" Sep 6 01:22:52.795297 env[1445]: time="2025-09-06T01:22:52.795254308Z" level=info msg="StopPodSandbox for \"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\"" Sep 6 01:22:52.912169 env[1445]: 2025-09-06 01:22:52.861 [WARNING][5065] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"8dcacbd0-09d2-49ca-b5ed-c0ea362399e9", ResourceVersion:"995", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 21, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f", Pod:"coredns-674b8bbfcf-zjjms", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.80.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6e8b5b85dc2", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:52.912169 env[1445]: 2025-09-06 01:22:52.861 [INFO][5065] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Sep 6 01:22:52.912169 env[1445]: 2025-09-06 01:22:52.861 [INFO][5065] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" iface="eth0" netns="" Sep 6 01:22:52.912169 env[1445]: 2025-09-06 01:22:52.861 [INFO][5065] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Sep 6 01:22:52.912169 env[1445]: 2025-09-06 01:22:52.861 [INFO][5065] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Sep 6 01:22:52.912169 env[1445]: 2025-09-06 01:22:52.885 [INFO][5072] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" HandleID="k8s-pod-network.ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0" Sep 6 01:22:52.912169 env[1445]: 2025-09-06 01:22:52.886 [INFO][5072] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:52.912169 env[1445]: 2025-09-06 01:22:52.886 [INFO][5072] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:52.912169 env[1445]: 2025-09-06 01:22:52.904 [WARNING][5072] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" HandleID="k8s-pod-network.ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0" Sep 6 01:22:52.912169 env[1445]: 2025-09-06 01:22:52.905 [INFO][5072] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" HandleID="k8s-pod-network.ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0" Sep 6 01:22:52.912169 env[1445]: 2025-09-06 01:22:52.909 [INFO][5072] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:52.912169 env[1445]: 2025-09-06 01:22:52.910 [INFO][5065] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Sep 6 01:22:52.912618 env[1445]: time="2025-09-06T01:22:52.912196299Z" level=info msg="TearDown network for sandbox \"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\" successfully" Sep 6 01:22:52.912618 env[1445]: time="2025-09-06T01:22:52.912226179Z" level=info msg="StopPodSandbox for \"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\" returns successfully" Sep 6 01:22:52.912884 env[1445]: time="2025-09-06T01:22:52.912833900Z" level=info msg="RemovePodSandbox for \"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\"" Sep 6 01:22:52.913086 env[1445]: time="2025-09-06T01:22:52.913045100Z" level=info msg="Forcibly stopping sandbox \"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\"" Sep 6 01:22:52.939000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:52.939000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40019f92c0 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:22:52.939000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:52.944000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:52.944000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40019f92e0 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:22:52.944000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:52.944000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:52.944000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40019f9300 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:22:52.944000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:52.945000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:22:52.945000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40022104c0 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:22:52.945000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:22:53.024804 env[1445]: 2025-09-06 01:22:52.969 [WARNING][5087] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"8dcacbd0-09d2-49ca-b5ed-c0ea362399e9", ResourceVersion:"995", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 21, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"ffb0382e00bc8fcc0b08d5932de5bb2fca196098297b865c7fe0ea3c72208b3f", Pod:"coredns-674b8bbfcf-zjjms", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.80.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6e8b5b85dc2", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:53.024804 env[1445]: 2025-09-06 01:22:52.970 [INFO][5087] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Sep 6 01:22:53.024804 env[1445]: 2025-09-06 01:22:52.970 [INFO][5087] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" iface="eth0" netns="" Sep 6 01:22:53.024804 env[1445]: 2025-09-06 01:22:52.970 [INFO][5087] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Sep 6 01:22:53.024804 env[1445]: 2025-09-06 01:22:52.970 [INFO][5087] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Sep 6 01:22:53.024804 env[1445]: 2025-09-06 01:22:53.003 [INFO][5094] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" HandleID="k8s-pod-network.ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0" Sep 6 01:22:53.024804 env[1445]: 2025-09-06 01:22:53.004 [INFO][5094] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:53.024804 env[1445]: 2025-09-06 01:22:53.004 [INFO][5094] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:53.024804 env[1445]: 2025-09-06 01:22:53.018 [WARNING][5094] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" HandleID="k8s-pod-network.ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0" Sep 6 01:22:53.024804 env[1445]: 2025-09-06 01:22:53.019 [INFO][5094] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" HandleID="k8s-pod-network.ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--zjjms-eth0" Sep 6 01:22:53.024804 env[1445]: 2025-09-06 01:22:53.022 [INFO][5094] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:53.024804 env[1445]: 2025-09-06 01:22:53.023 [INFO][5087] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67" Sep 6 01:22:53.025450 env[1445]: time="2025-09-06T01:22:53.025409689Z" level=info msg="TearDown network for sandbox \"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\" successfully" Sep 6 01:22:53.039044 env[1445]: time="2025-09-06T01:22:53.038997737Z" level=info msg="RemovePodSandbox \"ae5528c29a353f36693c82b38b87a14aac4e1e3ac2c0aa6e84a11e67c937eb67\" returns successfully" Sep 6 01:22:53.039983 env[1445]: time="2025-09-06T01:22:53.039953817Z" level=info msg="StopPodSandbox for \"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\"" Sep 6 01:22:53.194849 env[1445]: 2025-09-06 01:22:53.117 [WARNING][5108] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0", GenerateName:"calico-apiserver-84c8dc6bc5-", Namespace:"calico-apiserver", SelfLink:"", UID:"f863d5f1-b40a-437f-845c-0824d6d70053", ResourceVersion:"1051", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84c8dc6bc5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650", Pod:"calico-apiserver-84c8dc6bc5-4q7cp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.80.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9468ea26ad0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:53.194849 env[1445]: 2025-09-06 01:22:53.117 [INFO][5108] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Sep 6 01:22:53.194849 env[1445]: 2025-09-06 01:22:53.117 [INFO][5108] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" iface="eth0" netns="" Sep 6 01:22:53.194849 env[1445]: 2025-09-06 01:22:53.117 [INFO][5108] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Sep 6 01:22:53.194849 env[1445]: 2025-09-06 01:22:53.117 [INFO][5108] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Sep 6 01:22:53.194849 env[1445]: 2025-09-06 01:22:53.156 [INFO][5116] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" HandleID="k8s-pod-network.1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0" Sep 6 01:22:53.194849 env[1445]: 2025-09-06 01:22:53.157 [INFO][5116] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:53.194849 env[1445]: 2025-09-06 01:22:53.157 [INFO][5116] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:53.194849 env[1445]: 2025-09-06 01:22:53.185 [WARNING][5116] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" HandleID="k8s-pod-network.1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0" Sep 6 01:22:53.194849 env[1445]: 2025-09-06 01:22:53.185 [INFO][5116] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" HandleID="k8s-pod-network.1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0" Sep 6 01:22:53.194849 env[1445]: 2025-09-06 01:22:53.191 [INFO][5116] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:53.194849 env[1445]: 2025-09-06 01:22:53.193 [INFO][5108] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Sep 6 01:22:53.195545 env[1445]: time="2025-09-06T01:22:53.195512112Z" level=info msg="TearDown network for sandbox \"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\" successfully" Sep 6 01:22:53.195613 env[1445]: time="2025-09-06T01:22:53.195598112Z" level=info msg="StopPodSandbox for \"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\" returns successfully" Sep 6 01:22:53.196275 env[1445]: time="2025-09-06T01:22:53.196253352Z" level=info msg="RemovePodSandbox for \"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\"" Sep 6 01:22:53.196538 env[1445]: time="2025-09-06T01:22:53.196498233Z" level=info msg="Forcibly stopping sandbox \"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\"" Sep 6 01:22:53.375835 env[1445]: 2025-09-06 01:22:53.291 [WARNING][5132] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0", GenerateName:"calico-apiserver-84c8dc6bc5-", Namespace:"calico-apiserver", SelfLink:"", UID:"f863d5f1-b40a-437f-845c-0824d6d70053", ResourceVersion:"1051", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84c8dc6bc5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"62b9a8f450e0bee8b45f1a59c8aaf963868c7402eaec47a79242ea976cc05650", Pod:"calico-apiserver-84c8dc6bc5-4q7cp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.80.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9468ea26ad0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:53.375835 env[1445]: 2025-09-06 01:22:53.291 [INFO][5132] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Sep 6 01:22:53.375835 env[1445]: 2025-09-06 01:22:53.291 [INFO][5132] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" iface="eth0" netns="" Sep 6 01:22:53.375835 env[1445]: 2025-09-06 01:22:53.291 [INFO][5132] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Sep 6 01:22:53.375835 env[1445]: 2025-09-06 01:22:53.291 [INFO][5132] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Sep 6 01:22:53.375835 env[1445]: 2025-09-06 01:22:53.345 [INFO][5139] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" HandleID="k8s-pod-network.1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0" Sep 6 01:22:53.375835 env[1445]: 2025-09-06 01:22:53.345 [INFO][5139] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:53.375835 env[1445]: 2025-09-06 01:22:53.345 [INFO][5139] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:53.375835 env[1445]: 2025-09-06 01:22:53.359 [WARNING][5139] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" HandleID="k8s-pod-network.1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0" Sep 6 01:22:53.375835 env[1445]: 2025-09-06 01:22:53.359 [INFO][5139] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" HandleID="k8s-pod-network.1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--4q7cp-eth0" Sep 6 01:22:53.375835 env[1445]: 2025-09-06 01:22:53.372 [INFO][5139] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:53.375835 env[1445]: 2025-09-06 01:22:53.374 [INFO][5132] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b" Sep 6 01:22:53.376925 env[1445]: time="2025-09-06T01:22:53.376890902Z" level=info msg="TearDown network for sandbox \"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\" successfully" Sep 6 01:22:53.390884 env[1445]: time="2025-09-06T01:22:53.390834511Z" level=info msg="RemovePodSandbox \"1c8a140510b062c65e7ea97ddc8a2a9bc037cf5df3c013b98c4fabea3ca7986b\" returns successfully" Sep 6 01:22:53.392819 env[1445]: time="2025-09-06T01:22:53.392786872Z" level=info msg="StopPodSandbox for \"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\"" Sep 6 01:22:53.498096 kubelet[2462]: I0906 01:22:53.498043 2462 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 01:22:53.547773 env[1445]: 2025-09-06 01:22:53.465 [WARNING][5154] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"8a374bc2-d94e-4f60-8980-ac3f72dfea23", ResourceVersion:"977", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc", Pod:"csi-node-driver-cjzts", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.80.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali86280e2e12a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:53.547773 env[1445]: 2025-09-06 01:22:53.465 [INFO][5154] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Sep 6 01:22:53.547773 env[1445]: 2025-09-06 01:22:53.465 [INFO][5154] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" iface="eth0" netns="" Sep 6 01:22:53.547773 env[1445]: 2025-09-06 01:22:53.465 [INFO][5154] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Sep 6 01:22:53.547773 env[1445]: 2025-09-06 01:22:53.465 [INFO][5154] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Sep 6 01:22:53.547773 env[1445]: 2025-09-06 01:22:53.531 [INFO][5161] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" HandleID="k8s-pod-network.bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Workload="ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0" Sep 6 01:22:53.547773 env[1445]: 2025-09-06 01:22:53.531 [INFO][5161] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:53.547773 env[1445]: 2025-09-06 01:22:53.531 [INFO][5161] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:53.547773 env[1445]: 2025-09-06 01:22:53.543 [WARNING][5161] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" HandleID="k8s-pod-network.bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Workload="ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0" Sep 6 01:22:53.547773 env[1445]: 2025-09-06 01:22:53.543 [INFO][5161] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" HandleID="k8s-pod-network.bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Workload="ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0" Sep 6 01:22:53.547773 env[1445]: 2025-09-06 01:22:53.544 [INFO][5161] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:53.547773 env[1445]: 2025-09-06 01:22:53.546 [INFO][5154] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Sep 6 01:22:53.548275 env[1445]: time="2025-09-06T01:22:53.547809046Z" level=info msg="TearDown network for sandbox \"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\" successfully" Sep 6 01:22:53.548275 env[1445]: time="2025-09-06T01:22:53.547843806Z" level=info msg="StopPodSandbox for \"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\" returns successfully" Sep 6 01:22:53.548537 env[1445]: time="2025-09-06T01:22:53.548513687Z" level=info msg="RemovePodSandbox for \"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\"" Sep 6 01:22:53.548643 env[1445]: time="2025-09-06T01:22:53.548608167Z" level=info msg="Forcibly stopping sandbox \"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\"" Sep 6 01:22:53.677126 env[1445]: 2025-09-06 01:22:53.622 [WARNING][5175] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"8a374bc2-d94e-4f60-8980-ac3f72dfea23", ResourceVersion:"977", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc", Pod:"csi-node-driver-cjzts", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.80.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali86280e2e12a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:53.677126 env[1445]: 2025-09-06 01:22:53.622 [INFO][5175] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Sep 6 01:22:53.677126 env[1445]: 2025-09-06 01:22:53.622 [INFO][5175] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" iface="eth0" netns="" Sep 6 01:22:53.677126 env[1445]: 2025-09-06 01:22:53.622 [INFO][5175] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Sep 6 01:22:53.677126 env[1445]: 2025-09-06 01:22:53.622 [INFO][5175] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Sep 6 01:22:53.677126 env[1445]: 2025-09-06 01:22:53.658 [INFO][5183] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" HandleID="k8s-pod-network.bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Workload="ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0" Sep 6 01:22:53.677126 env[1445]: 2025-09-06 01:22:53.658 [INFO][5183] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:53.677126 env[1445]: 2025-09-06 01:22:53.658 [INFO][5183] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:53.677126 env[1445]: 2025-09-06 01:22:53.671 [WARNING][5183] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" HandleID="k8s-pod-network.bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Workload="ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0" Sep 6 01:22:53.677126 env[1445]: 2025-09-06 01:22:53.671 [INFO][5183] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" HandleID="k8s-pod-network.bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Workload="ci--3510.3.8--n--645ca388a2-k8s-csi--node--driver--cjzts-eth0" Sep 6 01:22:53.677126 env[1445]: 2025-09-06 01:22:53.674 [INFO][5183] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:53.677126 env[1445]: 2025-09-06 01:22:53.675 [INFO][5175] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4" Sep 6 01:22:53.677525 env[1445]: time="2025-09-06T01:22:53.677098525Z" level=info msg="TearDown network for sandbox \"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\" successfully" Sep 6 01:22:53.685954 env[1445]: time="2025-09-06T01:22:53.685904330Z" level=info msg="RemovePodSandbox \"bbf9eefbeaa8b19b62ec0176e52461889c6ada91963c45f8f187f79e99b795a4\" returns successfully" Sep 6 01:22:53.686441 env[1445]: time="2025-09-06T01:22:53.686408170Z" level=info msg="StopPodSandbox for \"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\"" Sep 6 01:22:53.806321 env[1445]: 2025-09-06 01:22:53.752 [WARNING][5197] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0", GenerateName:"calico-apiserver-84c8dc6bc5-", Namespace:"calico-apiserver", SelfLink:"", UID:"18882596-6b47-476c-bb54-87518393b7f7", ResourceVersion:"1032", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84c8dc6bc5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3", Pod:"calico-apiserver-84c8dc6bc5-l6cl4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.80.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8850e5e49cc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:53.806321 env[1445]: 2025-09-06 01:22:53.753 [INFO][5197] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Sep 6 01:22:53.806321 env[1445]: 2025-09-06 01:22:53.753 [INFO][5197] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" iface="eth0" netns="" Sep 6 01:22:53.806321 env[1445]: 2025-09-06 01:22:53.753 [INFO][5197] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Sep 6 01:22:53.806321 env[1445]: 2025-09-06 01:22:53.753 [INFO][5197] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Sep 6 01:22:53.806321 env[1445]: 2025-09-06 01:22:53.789 [INFO][5204] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" HandleID="k8s-pod-network.4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0" Sep 6 01:22:53.806321 env[1445]: 2025-09-06 01:22:53.789 [INFO][5204] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:53.806321 env[1445]: 2025-09-06 01:22:53.789 [INFO][5204] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:53.806321 env[1445]: 2025-09-06 01:22:53.799 [WARNING][5204] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" HandleID="k8s-pod-network.4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0" Sep 6 01:22:53.806321 env[1445]: 2025-09-06 01:22:53.800 [INFO][5204] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" HandleID="k8s-pod-network.4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0" Sep 6 01:22:53.806321 env[1445]: 2025-09-06 01:22:53.803 [INFO][5204] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:53.806321 env[1445]: 2025-09-06 01:22:53.804 [INFO][5197] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Sep 6 01:22:53.806919 env[1445]: time="2025-09-06T01:22:53.806353403Z" level=info msg="TearDown network for sandbox \"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\" successfully" Sep 6 01:22:53.806919 env[1445]: time="2025-09-06T01:22:53.806385323Z" level=info msg="StopPodSandbox for \"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\" returns successfully" Sep 6 01:22:53.807164 env[1445]: time="2025-09-06T01:22:53.807139404Z" level=info msg="RemovePodSandbox for \"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\"" Sep 6 01:22:53.807294 env[1445]: time="2025-09-06T01:22:53.807256324Z" level=info msg="Forcibly stopping sandbox \"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\"" Sep 6 01:22:53.935709 env[1445]: 2025-09-06 01:22:53.860 [WARNING][5218] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0", GenerateName:"calico-apiserver-84c8dc6bc5-", Namespace:"calico-apiserver", SelfLink:"", UID:"18882596-6b47-476c-bb54-87518393b7f7", ResourceVersion:"1032", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 22, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84c8dc6bc5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"169fd5b0036997aea0e8a9dfb685268961c3e13a3536bbd22efb1b53ac9737b3", Pod:"calico-apiserver-84c8dc6bc5-l6cl4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.80.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8850e5e49cc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:53.935709 env[1445]: 2025-09-06 01:22:53.860 [INFO][5218] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Sep 6 01:22:53.935709 env[1445]: 2025-09-06 01:22:53.860 [INFO][5218] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" iface="eth0" netns="" Sep 6 01:22:53.935709 env[1445]: 2025-09-06 01:22:53.860 [INFO][5218] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Sep 6 01:22:53.935709 env[1445]: 2025-09-06 01:22:53.860 [INFO][5218] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Sep 6 01:22:53.935709 env[1445]: 2025-09-06 01:22:53.902 [INFO][5225] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" HandleID="k8s-pod-network.4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0" Sep 6 01:22:53.935709 env[1445]: 2025-09-06 01:22:53.902 [INFO][5225] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:53.935709 env[1445]: 2025-09-06 01:22:53.902 [INFO][5225] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:53.935709 env[1445]: 2025-09-06 01:22:53.929 [WARNING][5225] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" HandleID="k8s-pod-network.4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0" Sep 6 01:22:53.935709 env[1445]: 2025-09-06 01:22:53.929 [INFO][5225] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" HandleID="k8s-pod-network.4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Workload="ci--3510.3.8--n--645ca388a2-k8s-calico--apiserver--84c8dc6bc5--l6cl4-eth0" Sep 6 01:22:53.935709 env[1445]: 2025-09-06 01:22:53.932 [INFO][5225] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:53.935709 env[1445]: 2025-09-06 01:22:53.934 [INFO][5218] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371" Sep 6 01:22:53.936472 env[1445]: time="2025-09-06T01:22:53.935678002Z" level=info msg="TearDown network for sandbox \"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\" successfully" Sep 6 01:22:53.967021 env[1445]: time="2025-09-06T01:22:53.966975341Z" level=info msg="RemovePodSandbox \"4ab880934b93e173426019c4018323ba8a05a05d3a9897888bfbcdcc81749371\" returns successfully" Sep 6 01:22:53.968192 env[1445]: time="2025-09-06T01:22:53.968163262Z" level=info msg="StopPodSandbox for \"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\"" Sep 6 01:22:54.074692 env[1445]: 2025-09-06 01:22:54.018 [WARNING][5240] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"bd32de34-d0d2-42a3-9930-aa9a894cc0ac", ResourceVersion:"938", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 21, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd", Pod:"coredns-674b8bbfcf-wd2qh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.80.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0d3fb6f056f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:54.074692 env[1445]: 2025-09-06 01:22:54.018 [INFO][5240] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Sep 6 01:22:54.074692 env[1445]: 2025-09-06 01:22:54.018 [INFO][5240] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" iface="eth0" netns="" Sep 6 01:22:54.074692 env[1445]: 2025-09-06 01:22:54.018 [INFO][5240] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Sep 6 01:22:54.074692 env[1445]: 2025-09-06 01:22:54.018 [INFO][5240] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Sep 6 01:22:54.074692 env[1445]: 2025-09-06 01:22:54.053 [INFO][5247] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" HandleID="k8s-pod-network.3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0" Sep 6 01:22:54.074692 env[1445]: 2025-09-06 01:22:54.057 [INFO][5247] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:54.074692 env[1445]: 2025-09-06 01:22:54.057 [INFO][5247] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:54.074692 env[1445]: 2025-09-06 01:22:54.069 [WARNING][5247] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" HandleID="k8s-pod-network.3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0" Sep 6 01:22:54.074692 env[1445]: 2025-09-06 01:22:54.069 [INFO][5247] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" HandleID="k8s-pod-network.3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0" Sep 6 01:22:54.074692 env[1445]: 2025-09-06 01:22:54.071 [INFO][5247] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:54.074692 env[1445]: 2025-09-06 01:22:54.072 [INFO][5240] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Sep 6 01:22:54.075264 env[1445]: time="2025-09-06T01:22:54.075213326Z" level=info msg="TearDown network for sandbox \"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\" successfully" Sep 6 01:22:54.075349 env[1445]: time="2025-09-06T01:22:54.075333206Z" level=info msg="StopPodSandbox for \"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\" returns successfully" Sep 6 01:22:54.076017 env[1445]: time="2025-09-06T01:22:54.075989167Z" level=info msg="RemovePodSandbox for \"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\"" Sep 6 01:22:54.076150 env[1445]: time="2025-09-06T01:22:54.076113127Z" level=info msg="Forcibly stopping sandbox \"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\"" Sep 6 01:22:54.193499 env[1445]: 2025-09-06 01:22:54.128 [WARNING][5262] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"bd32de34-d0d2-42a3-9930-aa9a894cc0ac", ResourceVersion:"938", Generation:0, CreationTimestamp:time.Date(2025, time.September, 6, 1, 21, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-645ca388a2", ContainerID:"899815905d088d385bd9fb48032d56815d527f9a548a1cd2c9c28cd1b3f2b6bd", Pod:"coredns-674b8bbfcf-wd2qh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.80.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali0d3fb6f056f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 6 01:22:54.193499 env[1445]: 2025-09-06 01:22:54.130 [INFO][5262] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Sep 6 01:22:54.193499 env[1445]: 2025-09-06 01:22:54.130 [INFO][5262] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" iface="eth0" netns="" Sep 6 01:22:54.193499 env[1445]: 2025-09-06 01:22:54.130 [INFO][5262] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Sep 6 01:22:54.193499 env[1445]: 2025-09-06 01:22:54.130 [INFO][5262] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Sep 6 01:22:54.193499 env[1445]: 2025-09-06 01:22:54.177 [INFO][5269] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" HandleID="k8s-pod-network.3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0" Sep 6 01:22:54.193499 env[1445]: 2025-09-06 01:22:54.177 [INFO][5269] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 6 01:22:54.193499 env[1445]: 2025-09-06 01:22:54.177 [INFO][5269] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 6 01:22:54.193499 env[1445]: 2025-09-06 01:22:54.188 [WARNING][5269] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" HandleID="k8s-pod-network.3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0" Sep 6 01:22:54.193499 env[1445]: 2025-09-06 01:22:54.188 [INFO][5269] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" HandleID="k8s-pod-network.3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Workload="ci--3510.3.8--n--645ca388a2-k8s-coredns--674b8bbfcf--wd2qh-eth0" Sep 6 01:22:54.193499 env[1445]: 2025-09-06 01:22:54.190 [INFO][5269] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 6 01:22:54.193499 env[1445]: 2025-09-06 01:22:54.192 [INFO][5262] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf" Sep 6 01:22:54.194393 env[1445]: time="2025-09-06T01:22:54.194345998Z" level=info msg="TearDown network for sandbox \"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\" successfully" Sep 6 01:22:54.219584 env[1445]: time="2025-09-06T01:22:54.219528413Z" level=info msg="RemovePodSandbox \"3a6d04938949c454443b8a34b444dc09b9fb7e684e96f56647d704d59bb9d9cf\" returns successfully" Sep 6 01:22:55.498440 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2561357299.mount: Deactivated successfully. Sep 6 01:22:55.580000 audit[4901]: AVC avc: denied { watch } for pid=4901 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_22_27.2732154571/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c357,c976 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c357,c976 tclass=file permissive=0 Sep 6 01:22:55.587578 kernel: kauditd_printk_skb: 123 callbacks suppressed Sep 6 01:22:55.587673 kernel: audit: type=1400 audit(1757121775.580:1391): avc: denied { watch } for pid=4901 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_22_27.2732154571/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c357,c976 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c357,c976 tclass=file permissive=0 Sep 6 01:22:55.580000 audit[4901]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4001677020 a2=fc6 a3=0 items=0 ppid=4559 pid=4901 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c357,c976 key=(null) Sep 6 01:22:55.663081 kernel: audit: type=1300 audit(1757121775.580:1391): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4001677020 a2=fc6 a3=0 items=0 ppid=4559 pid=4901 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c357,c976 key=(null) Sep 6 01:22:55.580000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:22:55.718865 kernel: audit: type=1327 audit(1757121775.580:1391): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:22:56.276837 env[1445]: time="2025-09-06T01:22:56.276785367Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:56.291668 env[1445]: time="2025-09-06T01:22:56.291609376Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14088376331a0622b7f6a2fbc2f2932806a6eafdd7b602f6139d3b985bf1e685,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:56.301023 env[1445]: time="2025-09-06T01:22:56.300970022Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:56.311229 env[1445]: time="2025-09-06T01:22:56.311173388Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:46297703ab3739331a00a58f0d6a5498c8d3b6523ad947eed68592ee0f3e79f0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:56.311976 env[1445]: time="2025-09-06T01:22:56.311942748Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\" returns image reference \"sha256:14088376331a0622b7f6a2fbc2f2932806a6eafdd7b602f6139d3b985bf1e685\"" Sep 6 01:22:56.316995 env[1445]: time="2025-09-06T01:22:56.316944031Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\"" Sep 6 01:22:56.326732 env[1445]: time="2025-09-06T01:22:56.326673637Z" level=info msg="CreateContainer within sandbox \"6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Sep 6 01:22:56.385624 env[1445]: time="2025-09-06T01:22:56.385556512Z" level=info msg="CreateContainer within sandbox \"6cc462f70aa608535cd00720088bd6fc83e2270ef7a5272965358e78b8b347d4\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"293550cd9922e930925a6a2cf6d941c1c234c4dc35c5884b2fd766de17dd5d10\"" Sep 6 01:22:56.386596 env[1445]: time="2025-09-06T01:22:56.386566353Z" level=info msg="StartContainer for \"293550cd9922e930925a6a2cf6d941c1c234c4dc35c5884b2fd766de17dd5d10\"" Sep 6 01:22:56.427916 systemd[1]: Started cri-containerd-293550cd9922e930925a6a2cf6d941c1c234c4dc35c5884b2fd766de17dd5d10.scope. Sep 6 01:22:56.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.486561 kernel: audit: type=1400 audit(1757121776.447:1392): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.486679 kernel: audit: type=1400 audit(1757121776.447:1393): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.504553 kernel: audit: type=1400 audit(1757121776.447:1394): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.522769 kernel: audit: type=1400 audit(1757121776.447:1395): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.547622 kernel: audit: type=1400 audit(1757121776.447:1396): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.560168 kubelet[2462]: I0906 01:22:56.559795 2462 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 01:22:56.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.583884 kernel: audit: type=1400 audit(1757121776.447:1397): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.603977 kernel: audit: type=1400 audit(1757121776.447:1398): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.448000 audit: BPF prog-id=222 op=LOAD Sep 6 01:22:56.458000 audit[5284]: AVC avc: denied { bpf } for pid=5284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.458000 audit[5284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=4695 pid=5284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:56.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239333535306364393932326539333039323561366132636636643934 Sep 6 01:22:56.458000 audit[5284]: AVC avc: denied { perfmon } for pid=5284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.458000 audit[5284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=4695 pid=5284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:56.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239333535306364393932326539333039323561366132636636643934 Sep 6 01:22:56.458000 audit[5284]: AVC avc: denied { bpf } for pid=5284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.458000 audit[5284]: AVC avc: denied { bpf } for pid=5284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.458000 audit[5284]: AVC avc: denied { bpf } for pid=5284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.458000 audit[5284]: AVC avc: denied { perfmon } for pid=5284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.458000 audit[5284]: AVC avc: denied { perfmon } for pid=5284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.458000 audit[5284]: AVC avc: denied { perfmon } for pid=5284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.458000 audit[5284]: AVC avc: denied { perfmon } for pid=5284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.458000 audit[5284]: AVC avc: denied { perfmon } for pid=5284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.458000 audit[5284]: AVC avc: denied { bpf } for pid=5284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.458000 audit[5284]: AVC avc: denied { bpf } for pid=5284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.458000 audit: BPF prog-id=223 op=LOAD Sep 6 01:22:56.458000 audit[5284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=4695 pid=5284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:56.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239333535306364393932326539333039323561366132636636643934 Sep 6 01:22:56.467000 audit[5284]: AVC avc: denied { bpf } for pid=5284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.467000 audit[5284]: AVC avc: denied { bpf } for pid=5284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.467000 audit[5284]: AVC avc: denied { perfmon } for pid=5284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.467000 audit[5284]: AVC avc: denied { perfmon } for pid=5284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.467000 audit[5284]: AVC avc: denied { perfmon } for pid=5284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.467000 audit[5284]: AVC avc: denied { perfmon } for pid=5284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.467000 audit[5284]: AVC avc: denied { perfmon } for pid=5284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.467000 audit[5284]: AVC avc: denied { bpf } for pid=5284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.467000 audit[5284]: AVC avc: denied { bpf } for pid=5284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.467000 audit: BPF prog-id=224 op=LOAD Sep 6 01:22:56.467000 audit[5284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=4695 pid=5284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:56.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239333535306364393932326539333039323561366132636636643934 Sep 6 01:22:56.485000 audit: BPF prog-id=224 op=UNLOAD Sep 6 01:22:56.485000 audit: BPF prog-id=223 op=UNLOAD Sep 6 01:22:56.485000 audit[5284]: AVC avc: denied { bpf } for pid=5284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.485000 audit[5284]: AVC avc: denied { bpf } for pid=5284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.485000 audit[5284]: AVC avc: denied { bpf } for pid=5284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.485000 audit[5284]: AVC avc: denied { perfmon } for pid=5284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.485000 audit[5284]: AVC avc: denied { perfmon } for pid=5284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.485000 audit[5284]: AVC avc: denied { perfmon } for pid=5284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.485000 audit[5284]: AVC avc: denied { perfmon } for pid=5284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.485000 audit[5284]: AVC avc: denied { perfmon } for pid=5284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.485000 audit[5284]: AVC avc: denied { bpf } for pid=5284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.485000 audit[5284]: AVC avc: denied { bpf } for pid=5284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:56.485000 audit: BPF prog-id=225 op=LOAD Sep 6 01:22:56.485000 audit[5284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=4695 pid=5284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:56.485000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239333535306364393932326539333039323561366132636636643934 Sep 6 01:22:56.624834 kubelet[2462]: I0906 01:22:56.624764 2462 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-84c8dc6bc5-4q7cp" podStartSLOduration=39.023917933 podStartE2EDuration="46.624745294s" podCreationTimestamp="2025-09-06 01:22:10 +0000 UTC" firstStartedPulling="2025-09-06 01:22:44.160365072 +0000 UTC m=+52.384752402" lastFinishedPulling="2025-09-06 01:22:51.761192433 +0000 UTC m=+59.985579763" observedRunningTime="2025-09-06 01:22:52.519115138 +0000 UTC m=+60.743502468" watchObservedRunningTime="2025-09-06 01:22:56.624745294 +0000 UTC m=+64.849132584" Sep 6 01:22:56.652000 audit[5314]: NETFILTER_CFG table=filter:131 family=2 entries=11 op=nft_register_rule pid=5314 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:56.652000 audit[5314]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffde4e9870 a2=0 a3=1 items=0 ppid=2609 pid=5314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:56.652000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:56.658000 audit[5314]: NETFILTER_CFG table=nat:132 family=2 entries=29 op=nft_register_chain pid=5314 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:56.658000 audit[5314]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffde4e9870 a2=0 a3=1 items=0 ppid=2609 pid=5314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:56.658000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:56.722599 env[1445]: time="2025-09-06T01:22:56.722531592Z" level=info msg="StartContainer for \"293550cd9922e930925a6a2cf6d941c1c234c4dc35c5884b2fd766de17dd5d10\" returns successfully" Sep 6 01:22:57.368001 systemd[1]: run-containerd-runc-k8s.io-293550cd9922e930925a6a2cf6d941c1c234c4dc35c5884b2fd766de17dd5d10-runc.ugKhrH.mount: Deactivated successfully. Sep 6 01:22:57.551346 kubelet[2462]: I0906 01:22:57.551268 2462 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-54d579b49d-ptp7b" podStartSLOduration=30.879915202 podStartE2EDuration="42.551253723s" podCreationTimestamp="2025-09-06 01:22:15 +0000 UTC" firstStartedPulling="2025-09-06 01:22:44.641945308 +0000 UTC m=+52.866332638" lastFinishedPulling="2025-09-06 01:22:56.313283749 +0000 UTC m=+64.537671159" observedRunningTime="2025-09-06 01:22:57.551125203 +0000 UTC m=+65.775512533" watchObservedRunningTime="2025-09-06 01:22:57.551253723 +0000 UTC m=+65.775641053" Sep 6 01:22:57.605000 audit[5340]: NETFILTER_CFG table=filter:133 family=2 entries=10 op=nft_register_rule pid=5340 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:57.605000 audit[5340]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffee3f08a0 a2=0 a3=1 items=0 ppid=2609 pid=5340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:57.605000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:57.608000 audit[5340]: NETFILTER_CFG table=nat:134 family=2 entries=24 op=nft_register_rule pid=5340 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:57.608000 audit[5340]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffee3f08a0 a2=0 a3=1 items=0 ppid=2609 pid=5340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:57.608000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:57.664478 systemd[1]: run-containerd-runc-k8s.io-293550cd9922e930925a6a2cf6d941c1c234c4dc35c5884b2fd766de17dd5d10-runc.EdWrJR.mount: Deactivated successfully. Sep 6 01:22:57.962082 env[1445]: time="2025-09-06T01:22:57.961964565Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:57.986395 env[1445]: time="2025-09-06T01:22:57.986332499Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a319b5bdc1001e98875b68e2943279adb74bcb19d09f1db857bc27959a078a65,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:57.991691 env[1445]: time="2025-09-06T01:22:57.991630623Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:58.002217 env[1445]: time="2025-09-06T01:22:58.002169669Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:731ab232ca708102ab332340b1274d5cd656aa896ecc5368ee95850b811df86f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 6 01:22:58.002754 env[1445]: time="2025-09-06T01:22:58.002695349Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\" returns image reference \"sha256:a319b5bdc1001e98875b68e2943279adb74bcb19d09f1db857bc27959a078a65\"" Sep 6 01:22:58.020130 env[1445]: time="2025-09-06T01:22:58.020085999Z" level=info msg="CreateContainer within sandbox \"b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Sep 6 01:22:58.072258 env[1445]: time="2025-09-06T01:22:58.072201430Z" level=info msg="CreateContainer within sandbox \"b851947f461124eaf3a20626674e05f006e1596a5973badfbed0103289fc9fbc\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"e46ecfcab77a5777bd3e02893d8c5a501a07b9513aae46ea75297cee1ec554d7\"" Sep 6 01:22:58.073219 env[1445]: time="2025-09-06T01:22:58.073178070Z" level=info msg="StartContainer for \"e46ecfcab77a5777bd3e02893d8c5a501a07b9513aae46ea75297cee1ec554d7\"" Sep 6 01:22:58.097292 systemd[1]: Started cri-containerd-e46ecfcab77a5777bd3e02893d8c5a501a07b9513aae46ea75297cee1ec554d7.scope. Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { perfmon } for pid=5369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4458 pid=5369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:58.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534366563666361623737613537373762643365303238393364386335 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { bpf } for pid=5369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { bpf } for pid=5369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { bpf } for pid=5369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { perfmon } for pid=5369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { perfmon } for pid=5369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { perfmon } for pid=5369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { perfmon } for pid=5369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { perfmon } for pid=5369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { bpf } for pid=5369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { bpf } for pid=5369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit: BPF prog-id=226 op=LOAD Sep 6 01:22:58.120000 audit[5369]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4458 pid=5369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:58.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534366563666361623737613537373762643365303238393364386335 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { bpf } for pid=5369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { bpf } for pid=5369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { perfmon } for pid=5369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { perfmon } for pid=5369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { perfmon } for pid=5369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { perfmon } for pid=5369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { perfmon } for pid=5369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { bpf } for pid=5369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { bpf } for pid=5369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit: BPF prog-id=227 op=LOAD Sep 6 01:22:58.120000 audit[5369]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4458 pid=5369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:58.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534366563666361623737613537373762643365303238393364386335 Sep 6 01:22:58.120000 audit: BPF prog-id=227 op=UNLOAD Sep 6 01:22:58.120000 audit: BPF prog-id=226 op=UNLOAD Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { bpf } for pid=5369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { bpf } for pid=5369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { bpf } for pid=5369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { perfmon } for pid=5369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { perfmon } for pid=5369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { perfmon } for pid=5369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { perfmon } for pid=5369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { perfmon } for pid=5369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { bpf } for pid=5369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit[5369]: AVC avc: denied { bpf } for pid=5369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 6 01:22:58.120000 audit: BPF prog-id=228 op=LOAD Sep 6 01:22:58.120000 audit[5369]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4458 pid=5369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:58.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534366563666361623737613537373762643365303238393364386335 Sep 6 01:22:58.160914 env[1445]: time="2025-09-06T01:22:58.160871202Z" level=info msg="StartContainer for \"e46ecfcab77a5777bd3e02893d8c5a501a07b9513aae46ea75297cee1ec554d7\" returns successfully" Sep 6 01:22:58.553081 systemd[1]: run-containerd-runc-k8s.io-293550cd9922e930925a6a2cf6d941c1c234c4dc35c5884b2fd766de17dd5d10-runc.mNuTfY.mount: Deactivated successfully. Sep 6 01:22:58.566959 kubelet[2462]: I0906 01:22:58.566513 2462 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-cjzts" podStartSLOduration=29.367835086 podStartE2EDuration="43.566496399s" podCreationTimestamp="2025-09-06 01:22:15 +0000 UTC" firstStartedPulling="2025-09-06 01:22:43.805143637 +0000 UTC m=+52.029530967" lastFinishedPulling="2025-09-06 01:22:58.00380499 +0000 UTC m=+66.228192280" observedRunningTime="2025-09-06 01:22:58.564925119 +0000 UTC m=+66.789312449" watchObservedRunningTime="2025-09-06 01:22:58.566496399 +0000 UTC m=+66.790883729" Sep 6 01:22:59.030464 kubelet[2462]: I0906 01:22:59.030426 2462 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Sep 6 01:22:59.031972 kubelet[2462]: I0906 01:22:59.031944 2462 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Sep 6 01:22:59.478579 kubelet[2462]: I0906 01:22:59.478472 2462 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 6 01:22:59.547133 systemd[1]: run-containerd-runc-k8s.io-293550cd9922e930925a6a2cf6d941c1c234c4dc35c5884b2fd766de17dd5d10-runc.r3Ur33.mount: Deactivated successfully. Sep 6 01:22:59.709000 audit[5443]: NETFILTER_CFG table=filter:135 family=2 entries=10 op=nft_register_rule pid=5443 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:59.709000 audit[5443]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffd6dbf350 a2=0 a3=1 items=0 ppid=2609 pid=5443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:59.709000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:22:59.714000 audit[5443]: NETFILTER_CFG table=nat:136 family=2 entries=36 op=nft_register_chain pid=5443 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:22:59.714000 audit[5443]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=ffffd6dbf350 a2=0 a3=1 items=0 ppid=2609 pid=5443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:22:59.714000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:23:10.579472 systemd[1]: run-containerd-runc-k8s.io-c43e88fbd7dabb13c3d6d9508cc2ae3e97ae4faba7a9b60dc07bcf98766bd75f-runc.VgJ5RC.mount: Deactivated successfully. Sep 6 01:23:17.216483 systemd[1]: run-containerd-runc-k8s.io-b2488fb2309b4c1c2896b9f3d2bd7a35779dd7023a12f3f379ce22f231a3c672-runc.0VpgKL.mount: Deactivated successfully. Sep 6 01:23:24.713230 systemd[1]: run-containerd-runc-k8s.io-b2488fb2309b4c1c2896b9f3d2bd7a35779dd7023a12f3f379ce22f231a3c672-runc.cYexc1.mount: Deactivated successfully. Sep 6 01:23:29.673000 audit[5545]: NETFILTER_CFG table=filter:137 family=2 entries=9 op=nft_register_rule pid=5545 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:29.681187 kernel: kauditd_printk_skb: 111 callbacks suppressed Sep 6 01:23:29.681339 kernel: audit: type=1325 audit(1757121809.673:1422): table=filter:137 family=2 entries=9 op=nft_register_rule pid=5545 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:29.673000 audit[5545]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=fffffd41f900 a2=0 a3=1 items=0 ppid=2609 pid=5545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:29.727373 kernel: audit: type=1300 audit(1757121809.673:1422): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=fffffd41f900 a2=0 a3=1 items=0 ppid=2609 pid=5545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:29.673000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:23:29.741778 kernel: audit: type=1327 audit(1757121809.673:1422): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:23:29.726000 audit[5545]: NETFILTER_CFG table=nat:138 family=2 entries=31 op=nft_register_chain pid=5545 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:29.757085 kernel: audit: type=1325 audit(1757121809.726:1423): table=nat:138 family=2 entries=31 op=nft_register_chain pid=5545 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:23:29.726000 audit[5545]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=fffffd41f900 a2=0 a3=1 items=0 ppid=2609 pid=5545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:29.726000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:23:29.805821 kernel: audit: type=1300 audit(1757121809.726:1423): arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=fffffd41f900 a2=0 a3=1 items=0 ppid=2609 pid=5545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:23:29.805981 kernel: audit: type=1327 audit(1757121809.726:1423): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:23:40.570157 systemd[1]: run-containerd-runc-k8s.io-c43e88fbd7dabb13c3d6d9508cc2ae3e97ae4faba7a9b60dc07bcf98766bd75f-runc.Qt61mJ.mount: Deactivated successfully. Sep 6 01:23:47.207633 systemd[1]: run-containerd-runc-k8s.io-b2488fb2309b4c1c2896b9f3d2bd7a35779dd7023a12f3f379ce22f231a3c672-runc.wnwAOu.mount: Deactivated successfully. Sep 6 01:23:48.590000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522490 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:48.590000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522494 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:48.641217 kernel: audit: type=1400 audit(1757121828.590:1424): avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522490 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:48.641370 kernel: audit: type=1400 audit(1757121828.590:1425): avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522494 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:48.590000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=4006c2dad0 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:23:48.669802 kernel: audit: type=1300 audit(1757121828.590:1425): arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=4006c2dad0 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:23:48.590000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:23:48.695968 kernel: audit: type=1327 audit(1757121828.590:1425): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:23:48.590000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:48.719908 kernel: audit: type=1400 audit(1757121828.590:1426): avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:48.590000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=4006fd6b20 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:23:48.750066 kernel: audit: type=1300 audit(1757121828.590:1426): arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=4006fd6b20 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:23:48.590000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:23:48.774924 kernel: audit: type=1327 audit(1757121828.590:1426): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:23:48.590000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=76 a1=4008ac4ea0 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:23:48.803232 kernel: audit: type=1300 audit(1757121828.590:1424): arch=c00000b7 syscall=27 success=no exit=-13 a0=76 a1=4008ac4ea0 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:23:48.590000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:23:48.828329 kernel: audit: type=1327 audit(1757121828.590:1424): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:23:48.640000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522496 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:48.851743 kernel: audit: type=1400 audit(1757121828.640:1427): avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522496 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:48.640000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=76 a1=4008ac4ed0 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:23:48.640000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:23:48.669000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:48.669000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=76 a1=40073b59a0 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:23:48.669000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:23:48.669000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522494 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:48.669000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=76 a1=4008ac5050 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:23:48.669000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:23:49.944000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:49.944000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400037ada0 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:23:49.944000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:23:49.945000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522494 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:49.945000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001101f80 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:23:49.945000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:23:50.264000 audit[4822]: AVC avc: denied { watch } for pid=4822 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_22_27.3271909987/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c840,c867 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c840,c867 tclass=file permissive=0 Sep 6 01:23:50.264000 audit[4822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40010031e0 a2=fc6 a3=0 items=0 ppid=4192 pid=4822 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c840,c867 key=(null) Sep 6 01:23:50.264000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:23:52.946000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:52.946000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001b36fc0 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:23:52.946000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:23:52.946000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:52.946000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001b370c0 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:23:52.946000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:23:52.946000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:52.946000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001b37100 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:23:52.946000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:23:52.946000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:23:52.946000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001b378e0 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:23:52.946000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:23:55.582000 audit[4901]: AVC avc: denied { watch } for pid=4901 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_22_27.2732154571/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c357,c976 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c357,c976 tclass=file permissive=0 Sep 6 01:23:55.588254 kernel: kauditd_printk_skb: 29 callbacks suppressed Sep 6 01:23:55.613883 kernel: audit: type=1400 audit(1757121835.582:1437): avc: denied { watch } for pid=4901 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_22_27.2732154571/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c357,c976 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c357,c976 tclass=file permissive=0 Sep 6 01:23:55.582000 audit[4901]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4002c24340 a2=fc6 a3=0 items=0 ppid=4559 pid=4901 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c357,c976 key=(null) Sep 6 01:23:55.643869 kernel: audit: type=1300 audit(1757121835.582:1437): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4002c24340 a2=fc6 a3=0 items=0 ppid=4559 pid=4901 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c357,c976 key=(null) Sep 6 01:23:55.582000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:23:55.668206 kernel: audit: type=1327 audit(1757121835.582:1437): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:23:57.595782 systemd[1]: run-containerd-runc-k8s.io-293550cd9922e930925a6a2cf6d941c1c234c4dc35c5884b2fd766de17dd5d10-runc.9jogO4.mount: Deactivated successfully. Sep 6 01:23:59.547544 systemd[1]: run-containerd-runc-k8s.io-293550cd9922e930925a6a2cf6d941c1c234c4dc35c5884b2fd766de17dd5d10-runc.Lr6YSo.mount: Deactivated successfully. Sep 6 01:24:11.710000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.17:22-10.200.16.10:36210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:11.710869 systemd[1]: Started sshd@7-10.200.20.17:22-10.200.16.10:36210.service. Sep 6 01:24:11.734753 kernel: audit: type=1130 audit(1757121851.710:1438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.17:22-10.200.16.10:36210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:12.228000 audit[5666]: USER_ACCT pid=5666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:12.229780 sshd[5666]: Accepted publickey for core from 10.200.16.10 port 36210 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:24:12.254746 kernel: audit: type=1101 audit(1757121852.228:1439): pid=5666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:12.254000 audit[5666]: CRED_ACQ pid=5666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:12.255865 sshd[5666]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:24:12.261265 systemd[1]: Started session-10.scope. Sep 6 01:24:12.262637 systemd-logind[1436]: New session 10 of user core. Sep 6 01:24:12.292555 kernel: audit: type=1103 audit(1757121852.254:1440): pid=5666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:12.292715 kernel: audit: type=1006 audit(1757121852.254:1441): pid=5666 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Sep 6 01:24:12.254000 audit[5666]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9c9d440 a2=3 a3=1 items=0 ppid=1 pid=5666 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:12.317237 kernel: audit: type=1300 audit(1757121852.254:1441): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9c9d440 a2=3 a3=1 items=0 ppid=1 pid=5666 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:12.254000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:12.325767 kernel: audit: type=1327 audit(1757121852.254:1441): proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:12.325845 kernel: audit: type=1105 audit(1757121852.266:1442): pid=5666 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:12.266000 audit[5666]: USER_START pid=5666 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:12.268000 audit[5668]: CRED_ACQ pid=5668 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:12.373039 kernel: audit: type=1103 audit(1757121852.268:1443): pid=5668 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:12.808987 sshd[5666]: pam_unix(sshd:session): session closed for user core Sep 6 01:24:12.809000 audit[5666]: USER_END pid=5666 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:12.811927 systemd-logind[1436]: Session 10 logged out. Waiting for processes to exit. Sep 6 01:24:12.813472 systemd[1]: sshd@7-10.200.20.17:22-10.200.16.10:36210.service: Deactivated successfully. Sep 6 01:24:12.814299 systemd[1]: session-10.scope: Deactivated successfully. Sep 6 01:24:12.816064 systemd-logind[1436]: Removed session 10. Sep 6 01:24:12.809000 audit[5666]: CRED_DISP pid=5666 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:12.859029 kernel: audit: type=1106 audit(1757121852.809:1444): pid=5666 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:12.859167 kernel: audit: type=1104 audit(1757121852.809:1445): pid=5666 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:12.812000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.17:22-10.200.16.10:36210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:17.211914 systemd[1]: run-containerd-runc-k8s.io-b2488fb2309b4c1c2896b9f3d2bd7a35779dd7023a12f3f379ce22f231a3c672-runc.9u53FO.mount: Deactivated successfully. Sep 6 01:24:17.885559 systemd[1]: Started sshd@8-10.200.20.17:22-10.200.16.10:36212.service. Sep 6 01:24:17.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.17:22-10.200.16.10:36212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:17.890881 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:24:17.890964 kernel: audit: type=1130 audit(1757121857.884:1447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.17:22-10.200.16.10:36212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:18.363533 sshd[5711]: Accepted publickey for core from 10.200.16.10 port 36212 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:24:18.362000 audit[5711]: USER_ACCT pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:18.390170 sshd[5711]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:24:18.389000 audit[5711]: CRED_ACQ pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:18.414029 kernel: audit: type=1101 audit(1757121858.362:1448): pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:18.414175 kernel: audit: type=1103 audit(1757121858.389:1449): pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:18.429369 kernel: audit: type=1006 audit(1757121858.389:1450): pid=5711 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Sep 6 01:24:18.389000 audit[5711]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca96cea0 a2=3 a3=1 items=0 ppid=1 pid=5711 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:18.454375 kernel: audit: type=1300 audit(1757121858.389:1450): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca96cea0 a2=3 a3=1 items=0 ppid=1 pid=5711 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:18.389000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:18.459559 systemd-logind[1436]: New session 11 of user core. Sep 6 01:24:18.463579 kernel: audit: type=1327 audit(1757121858.389:1450): proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:18.464069 systemd[1]: Started session-11.scope. Sep 6 01:24:18.469000 audit[5711]: USER_START pid=5711 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:18.471000 audit[5713]: CRED_ACQ pid=5713 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:18.523553 kernel: audit: type=1105 audit(1757121858.469:1451): pid=5711 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:18.523707 kernel: audit: type=1103 audit(1757121858.471:1452): pid=5713 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:18.843957 sshd[5711]: pam_unix(sshd:session): session closed for user core Sep 6 01:24:18.845000 audit[5711]: USER_END pid=5711 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:18.847897 systemd-logind[1436]: Session 11 logged out. Waiting for processes to exit. Sep 6 01:24:18.849713 systemd[1]: sshd@8-10.200.20.17:22-10.200.16.10:36212.service: Deactivated successfully. Sep 6 01:24:18.850514 systemd[1]: session-11.scope: Deactivated successfully. Sep 6 01:24:18.852118 systemd-logind[1436]: Removed session 11. Sep 6 01:24:18.845000 audit[5711]: CRED_DISP pid=5711 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:18.898103 kernel: audit: type=1106 audit(1757121858.845:1453): pid=5711 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:18.898256 kernel: audit: type=1104 audit(1757121858.845:1454): pid=5711 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:18.849000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.17:22-10.200.16.10:36212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:23.908883 systemd[1]: Started sshd@9-10.200.20.17:22-10.200.16.10:34888.service. Sep 6 01:24:23.908000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.17:22-10.200.16.10:34888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:23.914353 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:24:23.914462 kernel: audit: type=1130 audit(1757121863.908:1456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.17:22-10.200.16.10:34888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:24.327000 audit[5724]: USER_ACCT pid=5724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:24.328527 sshd[5724]: Accepted publickey for core from 10.200.16.10 port 34888 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:24:24.331237 sshd[5724]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:24:24.336874 systemd[1]: Started session-12.scope. Sep 6 01:24:24.338443 systemd-logind[1436]: New session 12 of user core. Sep 6 01:24:24.330000 audit[5724]: CRED_ACQ pid=5724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:24.378513 kernel: audit: type=1101 audit(1757121864.327:1457): pid=5724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:24.378636 kernel: audit: type=1103 audit(1757121864.330:1458): pid=5724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:24.378680 kernel: audit: type=1006 audit(1757121864.330:1459): pid=5724 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Sep 6 01:24:24.330000 audit[5724]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6cfee80 a2=3 a3=1 items=0 ppid=1 pid=5724 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:24.418430 kernel: audit: type=1300 audit(1757121864.330:1459): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6cfee80 a2=3 a3=1 items=0 ppid=1 pid=5724 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:24.330000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:24.427685 kernel: audit: type=1327 audit(1757121864.330:1459): proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:24.427805 kernel: audit: type=1105 audit(1757121864.343:1460): pid=5724 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:24.343000 audit[5724]: USER_START pid=5724 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:24.345000 audit[5726]: CRED_ACQ pid=5726 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:24.478581 kernel: audit: type=1103 audit(1757121864.345:1461): pid=5726 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:24.713880 systemd[1]: run-containerd-runc-k8s.io-b2488fb2309b4c1c2896b9f3d2bd7a35779dd7023a12f3f379ce22f231a3c672-runc.BUODXA.mount: Deactivated successfully. Sep 6 01:24:24.721543 sshd[5724]: pam_unix(sshd:session): session closed for user core Sep 6 01:24:24.721000 audit[5724]: USER_END pid=5724 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:24.724248 systemd[1]: sshd@9-10.200.20.17:22-10.200.16.10:34888.service: Deactivated successfully. Sep 6 01:24:24.725085 systemd[1]: session-12.scope: Deactivated successfully. Sep 6 01:24:24.726813 systemd-logind[1436]: Session 12 logged out. Waiting for processes to exit. Sep 6 01:24:24.727715 systemd-logind[1436]: Removed session 12. Sep 6 01:24:24.721000 audit[5724]: CRED_DISP pid=5724 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:24.772373 kernel: audit: type=1106 audit(1757121864.721:1462): pid=5724 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:24.772502 kernel: audit: type=1104 audit(1757121864.721:1463): pid=5724 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:24.723000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.17:22-10.200.16.10:34888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:29.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.17:22-10.200.16.10:34900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:29.792537 systemd[1]: Started sshd@10-10.200.20.17:22-10.200.16.10:34900.service. Sep 6 01:24:29.797907 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:24:29.821713 kernel: audit: type=1130 audit(1757121869.791:1465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.17:22-10.200.16.10:34900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:30.236000 audit[5775]: USER_ACCT pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:30.237549 sshd[5775]: Accepted publickey for core from 10.200.16.10 port 34900 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:24:30.239535 sshd[5775]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:24:30.238000 audit[5775]: CRED_ACQ pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:30.291300 kernel: audit: type=1101 audit(1757121870.236:1466): pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:30.291395 kernel: audit: type=1103 audit(1757121870.238:1467): pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:30.308146 kernel: audit: type=1006 audit(1757121870.238:1468): pid=5775 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Sep 6 01:24:30.238000 audit[5775]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2b5b930 a2=3 a3=1 items=0 ppid=1 pid=5775 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:30.337626 systemd-logind[1436]: New session 13 of user core. Sep 6 01:24:30.337985 systemd[1]: Started session-13.scope. Sep 6 01:24:30.238000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:30.348075 kernel: audit: type=1300 audit(1757121870.238:1468): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2b5b930 a2=3 a3=1 items=0 ppid=1 pid=5775 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:30.348222 kernel: audit: type=1327 audit(1757121870.238:1468): proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:30.351000 audit[5775]: USER_START pid=5775 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:30.352000 audit[5777]: CRED_ACQ pid=5777 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:30.406789 kernel: audit: type=1105 audit(1757121870.351:1469): pid=5775 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:30.406895 kernel: audit: type=1103 audit(1757121870.352:1470): pid=5777 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:30.661358 sshd[5775]: pam_unix(sshd:session): session closed for user core Sep 6 01:24:30.661000 audit[5775]: USER_END pid=5775 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:30.665975 systemd[1]: session-13.scope: Deactivated successfully. Sep 6 01:24:30.666785 systemd[1]: sshd@10-10.200.20.17:22-10.200.16.10:34900.service: Deactivated successfully. Sep 6 01:24:30.691011 kernel: audit: type=1106 audit(1757121870.661:1471): pid=5775 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:30.691126 kernel: audit: type=1104 audit(1757121870.663:1472): pid=5775 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:30.663000 audit[5775]: CRED_DISP pid=5775 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:30.666000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.17:22-10.200.16.10:34900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:30.713652 systemd-logind[1436]: Session 13 logged out. Waiting for processes to exit. Sep 6 01:24:30.715047 systemd-logind[1436]: Removed session 13. Sep 6 01:24:30.759799 systemd[1]: Started sshd@11-10.200.20.17:22-10.200.16.10:58064.service. Sep 6 01:24:30.759000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.17:22-10.200.16.10:58064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:31.169000 audit[5787]: USER_ACCT pid=5787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:31.170830 sshd[5787]: Accepted publickey for core from 10.200.16.10 port 58064 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:24:31.172301 sshd[5787]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:24:31.171000 audit[5787]: CRED_ACQ pid=5787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:31.171000 audit[5787]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5193850 a2=3 a3=1 items=0 ppid=1 pid=5787 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:31.171000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:31.176703 systemd-logind[1436]: New session 14 of user core. Sep 6 01:24:31.177523 systemd[1]: Started session-14.scope. Sep 6 01:24:31.181000 audit[5787]: USER_START pid=5787 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:31.182000 audit[5789]: CRED_ACQ pid=5789 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:31.591582 sshd[5787]: pam_unix(sshd:session): session closed for user core Sep 6 01:24:31.592000 audit[5787]: USER_END pid=5787 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:31.592000 audit[5787]: CRED_DISP pid=5787 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:31.594000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.17:22-10.200.16.10:58064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:31.594389 systemd-logind[1436]: Session 14 logged out. Waiting for processes to exit. Sep 6 01:24:31.594564 systemd[1]: sshd@11-10.200.20.17:22-10.200.16.10:58064.service: Deactivated successfully. Sep 6 01:24:31.595336 systemd[1]: session-14.scope: Deactivated successfully. Sep 6 01:24:31.596399 systemd-logind[1436]: Removed session 14. Sep 6 01:24:31.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.17:22-10.200.16.10:58078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:31.660381 systemd[1]: Started sshd@12-10.200.20.17:22-10.200.16.10:58078.service. Sep 6 01:24:32.073831 sshd[5797]: Accepted publickey for core from 10.200.16.10 port 58078 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:24:32.073000 audit[5797]: USER_ACCT pid=5797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:32.074000 audit[5797]: CRED_ACQ pid=5797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:32.074000 audit[5797]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe540e980 a2=3 a3=1 items=0 ppid=1 pid=5797 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:32.074000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:32.075246 sshd[5797]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:24:32.079156 systemd-logind[1436]: New session 15 of user core. Sep 6 01:24:32.079548 systemd[1]: Started session-15.scope. Sep 6 01:24:32.083000 audit[5797]: USER_START pid=5797 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:32.084000 audit[5799]: CRED_ACQ pid=5799 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:32.456287 sshd[5797]: pam_unix(sshd:session): session closed for user core Sep 6 01:24:32.456000 audit[5797]: USER_END pid=5797 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:32.457000 audit[5797]: CRED_DISP pid=5797 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:32.459401 systemd-logind[1436]: Session 15 logged out. Waiting for processes to exit. Sep 6 01:24:32.459646 systemd[1]: sshd@12-10.200.20.17:22-10.200.16.10:58078.service: Deactivated successfully. Sep 6 01:24:32.460429 systemd[1]: session-15.scope: Deactivated successfully. Sep 6 01:24:32.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.17:22-10.200.16.10:58078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:32.461327 systemd-logind[1436]: Removed session 15. Sep 6 01:24:37.525000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.17:22-10.200.16.10:58088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:37.525665 systemd[1]: Started sshd@13-10.200.20.17:22-10.200.16.10:58088.service. Sep 6 01:24:37.530995 kernel: kauditd_printk_skb: 23 callbacks suppressed Sep 6 01:24:37.531103 kernel: audit: type=1130 audit(1757121877.525:1492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.17:22-10.200.16.10:58088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:37.938000 audit[5815]: USER_ACCT pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:37.945760 sshd[5815]: Accepted publickey for core from 10.200.16.10 port 58088 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:24:37.946619 sshd[5815]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:24:37.951792 systemd[1]: Started session-16.scope. Sep 6 01:24:37.953002 systemd-logind[1436]: New session 16 of user core. Sep 6 01:24:37.944000 audit[5815]: CRED_ACQ pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:37.989745 kernel: audit: type=1101 audit(1757121877.938:1493): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:37.989895 kernel: audit: type=1103 audit(1757121877.944:1494): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:38.006949 kernel: audit: type=1006 audit(1757121877.944:1495): pid=5815 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Sep 6 01:24:37.944000 audit[5815]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd03fd840 a2=3 a3=1 items=0 ppid=1 pid=5815 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:38.034575 kernel: audit: type=1300 audit(1757121877.944:1495): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd03fd840 a2=3 a3=1 items=0 ppid=1 pid=5815 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:38.034694 kernel: audit: type=1327 audit(1757121877.944:1495): proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:37.944000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:37.954000 audit[5815]: USER_START pid=5815 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:38.072466 kernel: audit: type=1105 audit(1757121877.954:1496): pid=5815 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:37.959000 audit[5817]: CRED_ACQ pid=5817 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:38.095233 kernel: audit: type=1103 audit(1757121877.959:1497): pid=5817 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:38.335956 sshd[5815]: pam_unix(sshd:session): session closed for user core Sep 6 01:24:38.336000 audit[5815]: USER_END pid=5815 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:38.339319 systemd[1]: session-16.scope: Deactivated successfully. Sep 6 01:24:38.340104 systemd[1]: sshd@13-10.200.20.17:22-10.200.16.10:58088.service: Deactivated successfully. Sep 6 01:24:38.337000 audit[5815]: CRED_DISP pid=5815 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:38.387376 kernel: audit: type=1106 audit(1757121878.336:1498): pid=5815 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:38.387483 kernel: audit: type=1104 audit(1757121878.337:1499): pid=5815 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:38.387562 systemd-logind[1436]: Session 16 logged out. Waiting for processes to exit. Sep 6 01:24:38.339000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.17:22-10.200.16.10:58088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:38.388391 systemd-logind[1436]: Removed session 16. Sep 6 01:24:43.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.17:22-10.200.16.10:33202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:43.419225 systemd[1]: Started sshd@14-10.200.20.17:22-10.200.16.10:33202.service. Sep 6 01:24:43.425109 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:24:43.425234 kernel: audit: type=1130 audit(1757121883.418:1501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.17:22-10.200.16.10:33202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:43.870000 audit[5849]: USER_ACCT pid=5849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:43.871471 sshd[5849]: Accepted publickey for core from 10.200.16.10 port 33202 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:24:43.875328 sshd[5849]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:24:43.874000 audit[5849]: CRED_ACQ pid=5849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:43.920356 kernel: audit: type=1101 audit(1757121883.870:1502): pid=5849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:43.920494 kernel: audit: type=1103 audit(1757121883.874:1503): pid=5849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:43.922940 kernel: audit: type=1006 audit(1757121883.874:1504): pid=5849 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Sep 6 01:24:43.874000 audit[5849]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffac82390 a2=3 a3=1 items=0 ppid=1 pid=5849 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:43.966033 kernel: audit: type=1300 audit(1757121883.874:1504): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffac82390 a2=3 a3=1 items=0 ppid=1 pid=5849 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:43.874000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:43.976230 kernel: audit: type=1327 audit(1757121883.874:1504): proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:43.977591 systemd[1]: Started session-17.scope. Sep 6 01:24:43.977796 systemd-logind[1436]: New session 17 of user core. Sep 6 01:24:43.983000 audit[5849]: USER_START pid=5849 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:43.983000 audit[5851]: CRED_ACQ pid=5851 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:44.034034 kernel: audit: type=1105 audit(1757121883.983:1505): pid=5849 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:44.034171 kernel: audit: type=1103 audit(1757121883.983:1506): pid=5851 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:44.317948 sshd[5849]: pam_unix(sshd:session): session closed for user core Sep 6 01:24:44.318000 audit[5849]: USER_END pid=5849 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:44.320642 systemd-logind[1436]: Session 17 logged out. Waiting for processes to exit. Sep 6 01:24:44.325409 systemd[1]: sshd@14-10.200.20.17:22-10.200.16.10:33202.service: Deactivated successfully. Sep 6 01:24:44.326201 systemd[1]: session-17.scope: Deactivated successfully. Sep 6 01:24:44.327498 systemd-logind[1436]: Removed session 17. Sep 6 01:24:44.318000 audit[5849]: CRED_DISP pid=5849 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:44.371089 kernel: audit: type=1106 audit(1757121884.318:1507): pid=5849 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:44.371238 kernel: audit: type=1104 audit(1757121884.318:1508): pid=5849 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:44.324000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.17:22-10.200.16.10:33202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:48.592000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522490 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:48.598347 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:24:48.598467 kernel: audit: type=1400 audit(1757121888.592:1510): avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522490 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:48.592000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=40071e85a0 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:24:48.650648 kernel: audit: type=1300 audit(1757121888.592:1510): arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=40071e85a0 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:24:48.592000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:24:48.677342 kernel: audit: type=1327 audit(1757121888.592:1510): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:24:48.592000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522494 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:48.701816 kernel: audit: type=1400 audit(1757121888.592:1511): avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522494 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:48.592000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=40071e86c0 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:24:48.731912 kernel: audit: type=1300 audit(1757121888.592:1511): arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=40071e86c0 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:24:48.592000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:24:48.758114 kernel: audit: type=1327 audit(1757121888.592:1511): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:24:48.592000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:48.781369 kernel: audit: type=1400 audit(1757121888.592:1512): avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:48.592000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=4004ae1420 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:24:48.813212 kernel: audit: type=1300 audit(1757121888.592:1512): arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=4004ae1420 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:24:48.592000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:24:48.910482 kernel: audit: type=1327 audit(1757121888.592:1512): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:24:48.641000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522496 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:48.935621 kernel: audit: type=1400 audit(1757121888.641:1513): avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522496 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:48.641000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=40071e89f0 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:24:48.641000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:24:48.666000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522494 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:48.666000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=40071e9710 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:24:48.666000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:24:48.666000 audit[2277]: AVC avc: denied { watch } for pid=2277 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:48.666000 audit[2277]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=4004ae19c0 a2=fc6 a3=0 items=0 ppid=2136 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c742 key=(null) Sep 6 01:24:48.666000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 6 01:24:49.387423 systemd[1]: Started sshd@15-10.200.20.17:22-10.200.16.10:33204.service. Sep 6 01:24:49.386000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.17:22-10.200.16.10:33204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:49.837120 sshd[5881]: Accepted publickey for core from 10.200.16.10 port 33204 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:24:49.836000 audit[5881]: USER_ACCT pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:49.838907 sshd[5881]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:24:49.837000 audit[5881]: CRED_ACQ pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:49.837000 audit[5881]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd38c6c40 a2=3 a3=1 items=0 ppid=1 pid=5881 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:49.837000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:49.843703 systemd[1]: Started session-18.scope. Sep 6 01:24:49.844882 systemd-logind[1436]: New session 18 of user core. Sep 6 01:24:49.848000 audit[5881]: USER_START pid=5881 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:49.850000 audit[5883]: CRED_ACQ pid=5883 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:49.946000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:49.946000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40020aeca0 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:24:49.946000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:24:49.946000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522494 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:49.946000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40023ff2c0 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:24:49.946000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:24:50.252155 sshd[5881]: pam_unix(sshd:session): session closed for user core Sep 6 01:24:50.252000 audit[5881]: USER_END pid=5881 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:50.252000 audit[5881]: CRED_DISP pid=5881 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:50.254622 systemd[1]: sshd@15-10.200.20.17:22-10.200.16.10:33204.service: Deactivated successfully. Sep 6 01:24:50.255398 systemd[1]: session-18.scope: Deactivated successfully. Sep 6 01:24:50.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.17:22-10.200.16.10:33204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:50.255959 systemd-logind[1436]: Session 18 logged out. Waiting for processes to exit. Sep 6 01:24:50.256786 systemd-logind[1436]: Removed session 18. Sep 6 01:24:50.266000 audit[4822]: AVC avc: denied { watch } for pid=4822 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_22_27.3271909987/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c840,c867 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c840,c867 tclass=file permissive=0 Sep 6 01:24:50.266000 audit[4822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4001b96260 a2=fc6 a3=0 items=0 ppid=4192 pid=4822 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c840,c867 key=(null) Sep 6 01:24:50.266000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:24:52.947000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:52.947000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001f13100 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:24:52.947000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:52.947000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40020af9e0 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:24:52.947000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:24:52.947000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:52.947000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40020afa00 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:24:52.947000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:24:52.947000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:24:52.947000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522488 scontext=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 6 01:24:52.947000 audit[2334]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001f13120 a2=fc6 a3=0 items=0 ppid=2171 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c65,c883 key=(null) Sep 6 01:24:52.947000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 6 01:24:55.352907 kernel: kauditd_printk_skb: 40 callbacks suppressed Sep 6 01:24:55.353042 kernel: audit: type=1130 audit(1757121895.325:1532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.17:22-10.200.16.10:44032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:55.325000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.17:22-10.200.16.10:44032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:55.326454 systemd[1]: Started sshd@16-10.200.20.17:22-10.200.16.10:44032.service. Sep 6 01:24:55.586000 audit[4901]: AVC avc: denied { watch } for pid=4901 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_22_27.2732154571/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c357,c976 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c357,c976 tclass=file permissive=0 Sep 6 01:24:55.586000 audit[4901]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4002c98300 a2=fc6 a3=0 items=0 ppid=4559 pid=4901 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c357,c976 key=(null) Sep 6 01:24:55.645348 kernel: audit: type=1400 audit(1757121895.586:1533): avc: denied { watch } for pid=4901 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_01_22_27.2732154571/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c357,c976 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c357,c976 tclass=file permissive=0 Sep 6 01:24:55.645434 kernel: audit: type=1300 audit(1757121895.586:1533): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4002c98300 a2=fc6 a3=0 items=0 ppid=4559 pid=4901 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c357,c976 key=(null) Sep 6 01:24:55.586000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:24:55.671306 kernel: audit: type=1327 audit(1757121895.586:1533): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 6 01:24:55.777247 sshd[5894]: Accepted publickey for core from 10.200.16.10 port 44032 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:24:55.776000 audit[5894]: USER_ACCT pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:55.800971 sshd[5894]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:24:55.799000 audit[5894]: CRED_ACQ pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:55.822896 kernel: audit: type=1101 audit(1757121895.776:1534): pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:55.822979 kernel: audit: type=1103 audit(1757121895.799:1535): pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:55.837064 kernel: audit: type=1006 audit(1757121895.799:1536): pid=5894 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Sep 6 01:24:55.837807 kernel: audit: type=1300 audit(1757121895.799:1536): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe41ad450 a2=3 a3=1 items=0 ppid=1 pid=5894 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:55.799000 audit[5894]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe41ad450 a2=3 a3=1 items=0 ppid=1 pid=5894 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:55.799000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:55.869173 kernel: audit: type=1327 audit(1757121895.799:1536): proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:55.872321 systemd[1]: Started session-19.scope. Sep 6 01:24:55.872763 systemd-logind[1436]: New session 19 of user core. Sep 6 01:24:55.876000 audit[5894]: USER_START pid=5894 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:55.903467 kernel: audit: type=1105 audit(1757121895.876:1537): pid=5894 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:55.902000 audit[5896]: CRED_ACQ pid=5896 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:56.226789 sshd[5894]: pam_unix(sshd:session): session closed for user core Sep 6 01:24:56.227000 audit[5894]: USER_END pid=5894 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:56.227000 audit[5894]: CRED_DISP pid=5894 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:56.231106 systemd-logind[1436]: Session 19 logged out. Waiting for processes to exit. Sep 6 01:24:56.231447 systemd[1]: session-19.scope: Deactivated successfully. Sep 6 01:24:56.232556 systemd-logind[1436]: Removed session 19. Sep 6 01:24:56.232000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.17:22-10.200.16.10:44032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:56.232942 systemd[1]: sshd@16-10.200.20.17:22-10.200.16.10:44032.service: Deactivated successfully. Sep 6 01:24:56.295324 systemd[1]: Started sshd@17-10.200.20.17:22-10.200.16.10:44036.service. Sep 6 01:24:56.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.17:22-10.200.16.10:44036 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:56.707779 sshd[5906]: Accepted publickey for core from 10.200.16.10 port 44036 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:24:56.706000 audit[5906]: USER_ACCT pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:56.709481 sshd[5906]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:24:56.708000 audit[5906]: CRED_ACQ pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:56.708000 audit[5906]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff999e9b0 a2=3 a3=1 items=0 ppid=1 pid=5906 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:56.708000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:56.713901 systemd[1]: Started session-20.scope. Sep 6 01:24:56.714218 systemd-logind[1436]: New session 20 of user core. Sep 6 01:24:56.717000 audit[5906]: USER_START pid=5906 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:56.719000 audit[5908]: CRED_ACQ pid=5908 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:57.176968 sshd[5906]: pam_unix(sshd:session): session closed for user core Sep 6 01:24:57.177000 audit[5906]: USER_END pid=5906 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:57.178000 audit[5906]: CRED_DISP pid=5906 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:57.180443 systemd[1]: sshd@17-10.200.20.17:22-10.200.16.10:44036.service: Deactivated successfully. Sep 6 01:24:57.179000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.17:22-10.200.16.10:44036 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:57.181216 systemd[1]: session-20.scope: Deactivated successfully. Sep 6 01:24:57.182206 systemd-logind[1436]: Session 20 logged out. Waiting for processes to exit. Sep 6 01:24:57.183220 systemd-logind[1436]: Removed session 20. Sep 6 01:24:57.259010 systemd[1]: Started sshd@18-10.200.20.17:22-10.200.16.10:44052.service. Sep 6 01:24:57.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.17:22-10.200.16.10:44052 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:57.595672 systemd[1]: run-containerd-runc-k8s.io-293550cd9922e930925a6a2cf6d941c1c234c4dc35c5884b2fd766de17dd5d10-runc.k5ifGk.mount: Deactivated successfully. Sep 6 01:24:57.711000 audit[5916]: USER_ACCT pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:57.712098 sshd[5916]: Accepted publickey for core from 10.200.16.10 port 44052 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:24:57.712000 audit[5916]: CRED_ACQ pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:57.712000 audit[5916]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2f90920 a2=3 a3=1 items=0 ppid=1 pid=5916 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:57.712000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:57.713268 sshd[5916]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:24:57.717443 systemd-logind[1436]: New session 21 of user core. Sep 6 01:24:57.717859 systemd[1]: Started session-21.scope. Sep 6 01:24:57.721000 audit[5916]: USER_START pid=5916 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:57.723000 audit[5937]: CRED_ACQ pid=5937 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:58.409000 audit[5947]: NETFILTER_CFG table=filter:139 family=2 entries=20 op=nft_register_rule pid=5947 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:24:58.409000 audit[5947]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffe2571970 a2=0 a3=1 items=0 ppid=2609 pid=5947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:58.409000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:24:58.416000 audit[5947]: NETFILTER_CFG table=nat:140 family=2 entries=26 op=nft_register_rule pid=5947 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:24:58.416000 audit[5947]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffe2571970 a2=0 a3=1 items=0 ppid=2609 pid=5947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:58.416000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:24:58.431000 audit[5949]: NETFILTER_CFG table=filter:141 family=2 entries=32 op=nft_register_rule pid=5949 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:24:58.431000 audit[5949]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffcce4ada0 a2=0 a3=1 items=0 ppid=2609 pid=5949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:58.431000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:24:58.436000 audit[5949]: NETFILTER_CFG table=nat:142 family=2 entries=26 op=nft_register_rule pid=5949 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:24:58.436000 audit[5949]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffcce4ada0 a2=0 a3=1 items=0 ppid=2609 pid=5949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:58.436000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:24:58.492097 sshd[5916]: pam_unix(sshd:session): session closed for user core Sep 6 01:24:58.492000 audit[5916]: USER_END pid=5916 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:58.492000 audit[5916]: CRED_DISP pid=5916 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:58.495027 systemd[1]: sshd@18-10.200.20.17:22-10.200.16.10:44052.service: Deactivated successfully. Sep 6 01:24:58.494000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.17:22-10.200.16.10:44052 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:58.496009 systemd[1]: session-21.scope: Deactivated successfully. Sep 6 01:24:58.496956 systemd-logind[1436]: Session 21 logged out. Waiting for processes to exit. Sep 6 01:24:58.498356 systemd-logind[1436]: Removed session 21. Sep 6 01:24:58.553519 systemd[1]: Started sshd@19-10.200.20.17:22-10.200.16.10:44068.service. Sep 6 01:24:58.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.17:22-10.200.16.10:44068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:58.967000 audit[5952]: USER_ACCT pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:58.968505 sshd[5952]: Accepted publickey for core from 10.200.16.10 port 44068 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:24:58.968000 audit[5952]: CRED_ACQ pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:58.969000 audit[5952]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc212f80 a2=3 a3=1 items=0 ppid=1 pid=5952 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:24:58.969000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:24:58.970124 sshd[5952]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:24:58.973799 systemd-logind[1436]: New session 22 of user core. Sep 6 01:24:58.974457 systemd[1]: Started session-22.scope. Sep 6 01:24:58.978000 audit[5952]: USER_START pid=5952 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:58.980000 audit[5955]: CRED_ACQ pid=5955 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:59.470375 sshd[5952]: pam_unix(sshd:session): session closed for user core Sep 6 01:24:59.470000 audit[5952]: USER_END pid=5952 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:59.470000 audit[5952]: CRED_DISP pid=5952 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:24:59.472986 systemd[1]: sshd@19-10.200.20.17:22-10.200.16.10:44068.service: Deactivated successfully. Sep 6 01:24:59.472000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.17:22-10.200.16.10:44068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:24:59.473784 systemd[1]: session-22.scope: Deactivated successfully. Sep 6 01:24:59.474400 systemd-logind[1436]: Session 22 logged out. Waiting for processes to exit. Sep 6 01:24:59.475387 systemd-logind[1436]: Removed session 22. Sep 6 01:24:59.551257 systemd[1]: run-containerd-runc-k8s.io-293550cd9922e930925a6a2cf6d941c1c234c4dc35c5884b2fd766de17dd5d10-runc.7VvIR3.mount: Deactivated successfully. Sep 6 01:24:59.553215 systemd[1]: Started sshd@20-10.200.20.17:22-10.200.16.10:44082.service. Sep 6 01:24:59.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.17:22-10.200.16.10:44082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:00.004000 audit[5974]: USER_ACCT pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:00.005435 sshd[5974]: Accepted publickey for core from 10.200.16.10 port 44082 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:25:00.005000 audit[5974]: CRED_ACQ pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:00.006000 audit[5974]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea51b730 a2=3 a3=1 items=0 ppid=1 pid=5974 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:00.006000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:00.007080 sshd[5974]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:25:00.011220 systemd-logind[1436]: New session 23 of user core. Sep 6 01:25:00.011678 systemd[1]: Started session-23.scope. Sep 6 01:25:00.015000 audit[5974]: USER_START pid=5974 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:00.016000 audit[5986]: CRED_ACQ pid=5986 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:00.415319 sshd[5974]: pam_unix(sshd:session): session closed for user core Sep 6 01:25:00.447092 kernel: kauditd_printk_skb: 57 callbacks suppressed Sep 6 01:25:00.447175 kernel: audit: type=1106 audit(1757121900.415:1579): pid=5974 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:00.415000 audit[5974]: USER_END pid=5974 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:00.419183 systemd[1]: session-23.scope: Deactivated successfully. Sep 6 01:25:00.420037 systemd[1]: sshd@20-10.200.20.17:22-10.200.16.10:44082.service: Deactivated successfully. Sep 6 01:25:00.422382 systemd-logind[1436]: Session 23 logged out. Waiting for processes to exit. Sep 6 01:25:00.423159 systemd-logind[1436]: Removed session 23. Sep 6 01:25:00.415000 audit[5974]: CRED_DISP pid=5974 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:00.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.17:22-10.200.16.10:44082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:00.490398 kernel: audit: type=1104 audit(1757121900.415:1580): pid=5974 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:00.490497 kernel: audit: type=1131 audit(1757121900.415:1581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.17:22-10.200.16.10:44082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:05.384000 audit[5996]: NETFILTER_CFG table=filter:143 family=2 entries=20 op=nft_register_rule pid=5996 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:25:05.457681 kernel: audit: type=1325 audit(1757121905.384:1582): table=filter:143 family=2 entries=20 op=nft_register_rule pid=5996 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:25:05.457793 kernel: audit: type=1300 audit(1757121905.384:1582): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd74a7de0 a2=0 a3=1 items=0 ppid=2609 pid=5996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:05.457824 kernel: audit: type=1327 audit(1757121905.384:1582): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:25:05.457844 kernel: audit: type=1325 audit(1757121905.430:1583): table=nat:144 family=2 entries=110 op=nft_register_chain pid=5996 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:25:05.457871 kernel: audit: type=1300 audit(1757121905.430:1583): arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffd74a7de0 a2=0 a3=1 items=0 ppid=2609 pid=5996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:05.384000 audit[5996]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd74a7de0 a2=0 a3=1 items=0 ppid=2609 pid=5996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:05.384000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:25:05.430000 audit[5996]: NETFILTER_CFG table=nat:144 family=2 entries=110 op=nft_register_chain pid=5996 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 6 01:25:05.430000 audit[5996]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffd74a7de0 a2=0 a3=1 items=0 ppid=2609 pid=5996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:05.430000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:25:05.499715 kernel: audit: type=1327 audit(1757121905.430:1583): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 6 01:25:05.501481 systemd[1]: Started sshd@21-10.200.20.17:22-10.200.16.10:46858.service. Sep 6 01:25:05.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.17:22-10.200.16.10:46858 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:05.525748 kernel: audit: type=1130 audit(1757121905.500:1584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.17:22-10.200.16.10:46858 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:05.952793 sshd[5998]: Accepted publickey for core from 10.200.16.10 port 46858 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:25:05.951000 audit[5998]: USER_ACCT pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:05.954327 sshd[5998]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:25:05.952000 audit[5998]: CRED_ACQ pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:05.999201 kernel: audit: type=1101 audit(1757121905.951:1585): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:05.999330 kernel: audit: type=1103 audit(1757121905.952:1586): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:06.013841 kernel: audit: type=1006 audit(1757121905.952:1587): pid=5998 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Sep 6 01:25:05.952000 audit[5998]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd49a79b0 a2=3 a3=1 items=0 ppid=1 pid=5998 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:06.039490 kernel: audit: type=1300 audit(1757121905.952:1587): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd49a79b0 a2=3 a3=1 items=0 ppid=1 pid=5998 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:06.038817 systemd-logind[1436]: New session 24 of user core. Sep 6 01:25:06.039150 systemd[1]: Started session-24.scope. Sep 6 01:25:05.952000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:06.047889 kernel: audit: type=1327 audit(1757121905.952:1587): proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:06.051000 audit[5998]: USER_START pid=5998 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:06.052000 audit[6002]: CRED_ACQ pid=6002 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:06.373499 sshd[5998]: pam_unix(sshd:session): session closed for user core Sep 6 01:25:06.373000 audit[5998]: USER_END pid=5998 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:06.374000 audit[5998]: CRED_DISP pid=5998 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:06.376355 systemd-logind[1436]: Session 24 logged out. Waiting for processes to exit. Sep 6 01:25:06.376442 systemd[1]: session-24.scope: Deactivated successfully. Sep 6 01:25:06.377479 systemd[1]: sshd@21-10.200.20.17:22-10.200.16.10:46858.service: Deactivated successfully. Sep 6 01:25:06.376000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.17:22-10.200.16.10:46858 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:06.378343 systemd-logind[1436]: Removed session 24. Sep 6 01:25:10.568275 systemd[1]: run-containerd-runc-k8s.io-c43e88fbd7dabb13c3d6d9508cc2ae3e97ae4faba7a9b60dc07bcf98766bd75f-runc.XBDUFs.mount: Deactivated successfully. Sep 6 01:25:11.462707 kernel: kauditd_printk_skb: 5 callbacks suppressed Sep 6 01:25:11.462892 kernel: audit: type=1130 audit(1757121911.435:1593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.17:22-10.200.16.10:53950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:11.435000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.17:22-10.200.16.10:53950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:11.436359 systemd[1]: Started sshd@22-10.200.20.17:22-10.200.16.10:53950.service. Sep 6 01:25:11.845000 audit[6033]: USER_ACCT pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:11.846991 sshd[6033]: Accepted publickey for core from 10.200.16.10 port 53950 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:25:11.848834 sshd[6033]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:25:11.847000 audit[6033]: CRED_ACQ pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:11.895419 kernel: audit: type=1101 audit(1757121911.845:1594): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:11.895536 kernel: audit: type=1103 audit(1757121911.847:1595): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:11.909698 kernel: audit: type=1006 audit(1757121911.847:1596): pid=6033 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Sep 6 01:25:11.847000 audit[6033]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb855020 a2=3 a3=1 items=0 ppid=1 pid=6033 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:11.933670 kernel: audit: type=1300 audit(1757121911.847:1596): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb855020 a2=3 a3=1 items=0 ppid=1 pid=6033 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:11.847000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:11.942938 kernel: audit: type=1327 audit(1757121911.847:1596): proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:11.946170 systemd-logind[1436]: New session 25 of user core. Sep 6 01:25:11.946991 systemd[1]: Started session-25.scope. Sep 6 01:25:11.951000 audit[6033]: USER_START pid=6033 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:11.978000 audit[6035]: CRED_ACQ pid=6035 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:12.002874 kernel: audit: type=1105 audit(1757121911.951:1597): pid=6033 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:12.002989 kernel: audit: type=1103 audit(1757121911.978:1598): pid=6035 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:12.299963 sshd[6033]: pam_unix(sshd:session): session closed for user core Sep 6 01:25:12.300000 audit[6033]: USER_END pid=6033 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:12.306800 systemd[1]: session-25.scope: Deactivated successfully. Sep 6 01:25:12.307877 systemd[1]: sshd@22-10.200.20.17:22-10.200.16.10:53950.service: Deactivated successfully. Sep 6 01:25:12.328032 systemd-logind[1436]: Session 25 logged out. Waiting for processes to exit. Sep 6 01:25:12.328907 systemd-logind[1436]: Removed session 25. Sep 6 01:25:12.303000 audit[6033]: CRED_DISP pid=6033 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:12.351715 kernel: audit: type=1106 audit(1757121912.300:1599): pid=6033 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:12.351867 kernel: audit: type=1104 audit(1757121912.303:1600): pid=6033 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:12.307000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.17:22-10.200.16.10:53950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:17.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.17:22-10.200.16.10:53964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:17.375855 systemd[1]: Started sshd@23-10.200.20.17:22-10.200.16.10:53964.service. Sep 6 01:25:17.381292 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:25:17.381393 kernel: audit: type=1130 audit(1757121917.375:1602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.17:22-10.200.16.10:53964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:17.831000 audit[6069]: USER_ACCT pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:17.832028 sshd[6069]: Accepted publickey for core from 10.200.16.10 port 53964 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:25:17.833863 sshd[6069]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:25:17.832000 audit[6069]: CRED_ACQ pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:17.879185 kernel: audit: type=1101 audit(1757121917.831:1603): pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:17.879324 kernel: audit: type=1103 audit(1757121917.832:1604): pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:17.893266 kernel: audit: type=1006 audit(1757121917.832:1605): pid=6069 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Sep 6 01:25:17.832000 audit[6069]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7de1180 a2=3 a3=1 items=0 ppid=1 pid=6069 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:17.917543 kernel: audit: type=1300 audit(1757121917.832:1605): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7de1180 a2=3 a3=1 items=0 ppid=1 pid=6069 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:17.832000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:17.926866 kernel: audit: type=1327 audit(1757121917.832:1605): proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:17.929783 systemd-logind[1436]: New session 26 of user core. Sep 6 01:25:17.929980 systemd[1]: Started session-26.scope. Sep 6 01:25:17.935000 audit[6069]: USER_START pid=6069 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:17.936000 audit[6071]: CRED_ACQ pid=6071 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:17.986343 kernel: audit: type=1105 audit(1757121917.935:1606): pid=6069 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:17.986462 kernel: audit: type=1103 audit(1757121917.936:1607): pid=6071 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:18.254969 sshd[6069]: pam_unix(sshd:session): session closed for user core Sep 6 01:25:18.255000 audit[6069]: USER_END pid=6069 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:18.259334 systemd[1]: session-26.scope: Deactivated successfully. Sep 6 01:25:18.260102 systemd[1]: sshd@23-10.200.20.17:22-10.200.16.10:53964.service: Deactivated successfully. Sep 6 01:25:18.257000 audit[6069]: CRED_DISP pid=6069 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:18.309478 kernel: audit: type=1106 audit(1757121918.255:1608): pid=6069 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:18.309605 kernel: audit: type=1104 audit(1757121918.257:1609): pid=6069 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:18.309842 systemd-logind[1436]: Session 26 logged out. Waiting for processes to exit. Sep 6 01:25:18.259000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.17:22-10.200.16.10:53964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:18.310692 systemd-logind[1436]: Removed session 26. Sep 6 01:25:23.327000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.17:22-10.200.16.10:57236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:23.328117 systemd[1]: Started sshd@24-10.200.20.17:22-10.200.16.10:57236.service. Sep 6 01:25:23.333743 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:25:23.333871 kernel: audit: type=1130 audit(1757121923.327:1611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.17:22-10.200.16.10:57236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:23.744000 audit[6081]: USER_ACCT pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:23.746141 sshd[6081]: Accepted publickey for core from 10.200.16.10 port 57236 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:25:23.747880 sshd[6081]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:25:23.746000 audit[6081]: CRED_ACQ pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:23.792060 kernel: audit: type=1101 audit(1757121923.744:1612): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:23.792190 kernel: audit: type=1103 audit(1757121923.746:1613): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:23.806148 kernel: audit: type=1006 audit(1757121923.746:1614): pid=6081 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Sep 6 01:25:23.746000 audit[6081]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd765c1f0 a2=3 a3=1 items=0 ppid=1 pid=6081 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:23.830704 kernel: audit: type=1300 audit(1757121923.746:1614): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd765c1f0 a2=3 a3=1 items=0 ppid=1 pid=6081 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:23.746000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:23.833858 systemd[1]: Started session-27.scope. Sep 6 01:25:23.839575 kernel: audit: type=1327 audit(1757121923.746:1614): proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:23.839685 systemd-logind[1436]: New session 27 of user core. Sep 6 01:25:23.843000 audit[6081]: USER_START pid=6081 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:23.845000 audit[6083]: CRED_ACQ pid=6083 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:23.891645 kernel: audit: type=1105 audit(1757121923.843:1615): pid=6081 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:23.891765 kernel: audit: type=1103 audit(1757121923.845:1616): pid=6083 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:24.164379 sshd[6081]: pam_unix(sshd:session): session closed for user core Sep 6 01:25:24.164000 audit[6081]: USER_END pid=6081 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:24.166934 systemd[1]: session-27.scope: Deactivated successfully. Sep 6 01:25:24.167584 systemd[1]: sshd@24-10.200.20.17:22-10.200.16.10:57236.service: Deactivated successfully. Sep 6 01:25:24.164000 audit[6081]: CRED_DISP pid=6081 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:24.226567 kernel: audit: type=1106 audit(1757121924.164:1617): pid=6081 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:24.226712 kernel: audit: type=1104 audit(1757121924.164:1618): pid=6081 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:24.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.17:22-10.200.16.10:57236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:24.227138 systemd-logind[1436]: Session 27 logged out. Waiting for processes to exit. Sep 6 01:25:24.228297 systemd-logind[1436]: Removed session 27. Sep 6 01:25:24.713334 systemd[1]: run-containerd-runc-k8s.io-b2488fb2309b4c1c2896b9f3d2bd7a35779dd7023a12f3f379ce22f231a3c672-runc.7vGky2.mount: Deactivated successfully. Sep 6 01:25:29.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.17:22-10.200.16.10:57240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:29.248602 systemd[1]: Started sshd@25-10.200.20.17:22-10.200.16.10:57240.service. Sep 6 01:25:29.253986 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 6 01:25:29.254079 kernel: audit: type=1130 audit(1757121929.248:1620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.17:22-10.200.16.10:57240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:29.707000 audit[6115]: USER_ACCT pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:29.708321 sshd[6115]: Accepted publickey for core from 10.200.16.10 port 57240 ssh2: RSA SHA256:61uHVL+Uw1UCTgOuoaZ58b8YSngF6bjnT9fiLryAt68 Sep 6 01:25:29.733764 kernel: audit: type=1101 audit(1757121929.707:1621): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:29.733000 audit[6115]: CRED_ACQ pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:29.734979 sshd[6115]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 6 01:25:29.773311 kernel: audit: type=1103 audit(1757121929.733:1622): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:29.773429 kernel: audit: type=1006 audit(1757121929.733:1623): pid=6115 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Sep 6 01:25:29.733000 audit[6115]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf10c970 a2=3 a3=1 items=0 ppid=1 pid=6115 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:29.799215 kernel: audit: type=1300 audit(1757121929.733:1623): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf10c970 a2=3 a3=1 items=0 ppid=1 pid=6115 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 6 01:25:29.733000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:29.808190 kernel: audit: type=1327 audit(1757121929.733:1623): proctitle=737368643A20636F7265205B707269765D Sep 6 01:25:29.811277 systemd[1]: Started session-28.scope. Sep 6 01:25:29.811665 systemd-logind[1436]: New session 28 of user core. Sep 6 01:25:29.815000 audit[6115]: USER_START pid=6115 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:29.842000 audit[6138]: CRED_ACQ pid=6138 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:29.865633 kernel: audit: type=1105 audit(1757121929.815:1624): pid=6115 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:29.865783 kernel: audit: type=1103 audit(1757121929.842:1625): pid=6138 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:30.176427 sshd[6115]: pam_unix(sshd:session): session closed for user core Sep 6 01:25:30.176000 audit[6115]: USER_END pid=6115 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:30.180017 systemd[1]: session-28.scope: Deactivated successfully. Sep 6 01:25:30.180712 systemd[1]: sshd@25-10.200.20.17:22-10.200.16.10:57240.service: Deactivated successfully. Sep 6 01:25:30.177000 audit[6115]: CRED_DISP pid=6115 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:30.225796 kernel: audit: type=1106 audit(1757121930.176:1626): pid=6115 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:30.225956 kernel: audit: type=1104 audit(1757121930.177:1627): pid=6115 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 6 01:25:30.180000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.17:22-10.200.16.10:57240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 6 01:25:30.226240 systemd-logind[1436]: Session 28 logged out. Waiting for processes to exit. Sep 6 01:25:30.227012 systemd-logind[1436]: Removed session 28.