Sep 9 00:39:00.677711 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Sep 9 00:39:00.677731 kernel: Linux version 5.15.191-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Sep 8 23:23:23 -00 2025 Sep 9 00:39:00.677739 kernel: efi: EFI v2.70 by EDK II Sep 9 00:39:00.677745 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Sep 9 00:39:00.677750 kernel: random: crng init done Sep 9 00:39:00.677756 kernel: ACPI: Early table checksum verification disabled Sep 9 00:39:00.677762 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Sep 9 00:39:00.677769 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Sep 9 00:39:00.677774 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Sep 9 00:39:00.677780 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Sep 9 00:39:00.677785 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Sep 9 00:39:00.677791 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Sep 9 00:39:00.677796 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Sep 9 00:39:00.677802 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 9 00:39:00.677809 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Sep 9 00:39:00.677815 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Sep 9 00:39:00.677821 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Sep 9 00:39:00.677827 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Sep 9 00:39:00.677832 kernel: NUMA: Failed to initialise from firmware Sep 9 00:39:00.677838 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Sep 9 00:39:00.677844 kernel: NUMA: NODE_DATA [mem 0xdcb0a900-0xdcb0ffff] Sep 9 00:39:00.677849 kernel: Zone ranges: Sep 9 00:39:00.677855 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Sep 9 00:39:00.677862 kernel: DMA32 empty Sep 9 00:39:00.677867 kernel: Normal empty Sep 9 00:39:00.677873 kernel: Movable zone start for each node Sep 9 00:39:00.677878 kernel: Early memory node ranges Sep 9 00:39:00.677884 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Sep 9 00:39:00.677890 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Sep 9 00:39:00.677896 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Sep 9 00:39:00.677901 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Sep 9 00:39:00.677935 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Sep 9 00:39:00.677941 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Sep 9 00:39:00.677947 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Sep 9 00:39:00.677953 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Sep 9 00:39:00.677960 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Sep 9 00:39:00.677965 kernel: psci: probing for conduit method from ACPI. Sep 9 00:39:00.677971 kernel: psci: PSCIv1.1 detected in firmware. Sep 9 00:39:00.677977 kernel: psci: Using standard PSCI v0.2 function IDs Sep 9 00:39:00.677983 kernel: psci: Trusted OS migration not required Sep 9 00:39:00.677991 kernel: psci: SMC Calling Convention v1.1 Sep 9 00:39:00.677997 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Sep 9 00:39:00.678004 kernel: ACPI: SRAT not present Sep 9 00:39:00.678011 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Sep 9 00:39:00.678017 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Sep 9 00:39:00.678023 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Sep 9 00:39:00.678029 kernel: Detected PIPT I-cache on CPU0 Sep 9 00:39:00.678035 kernel: CPU features: detected: GIC system register CPU interface Sep 9 00:39:00.678041 kernel: CPU features: detected: Hardware dirty bit management Sep 9 00:39:00.678047 kernel: CPU features: detected: Spectre-v4 Sep 9 00:39:00.678053 kernel: CPU features: detected: Spectre-BHB Sep 9 00:39:00.678061 kernel: CPU features: kernel page table isolation forced ON by KASLR Sep 9 00:39:00.678067 kernel: CPU features: detected: Kernel page table isolation (KPTI) Sep 9 00:39:00.678073 kernel: CPU features: detected: ARM erratum 1418040 Sep 9 00:39:00.678079 kernel: CPU features: detected: SSBS not fully self-synchronizing Sep 9 00:39:00.678085 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Sep 9 00:39:00.678092 kernel: Policy zone: DMA Sep 9 00:39:00.678099 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=32b3b664430ec28e33efa673a32f74eb733fc8145822fbe5ce810188f7f71923 Sep 9 00:39:00.678106 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Sep 9 00:39:00.678112 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Sep 9 00:39:00.678137 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Sep 9 00:39:00.678144 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Sep 9 00:39:00.678152 kernel: Memory: 2457336K/2572288K available (9792K kernel code, 2094K rwdata, 7592K rodata, 36416K init, 777K bss, 114952K reserved, 0K cma-reserved) Sep 9 00:39:00.678159 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Sep 9 00:39:00.678165 kernel: trace event string verifier disabled Sep 9 00:39:00.678171 kernel: rcu: Preemptible hierarchical RCU implementation. Sep 9 00:39:00.678178 kernel: rcu: RCU event tracing is enabled. Sep 9 00:39:00.678184 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Sep 9 00:39:00.678191 kernel: Trampoline variant of Tasks RCU enabled. Sep 9 00:39:00.678197 kernel: Tracing variant of Tasks RCU enabled. Sep 9 00:39:00.678204 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Sep 9 00:39:00.678210 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Sep 9 00:39:00.678217 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Sep 9 00:39:00.678224 kernel: GICv3: 256 SPIs implemented Sep 9 00:39:00.678231 kernel: GICv3: 0 Extended SPIs implemented Sep 9 00:39:00.678237 kernel: GICv3: Distributor has no Range Selector support Sep 9 00:39:00.678244 kernel: Root IRQ handler: gic_handle_irq Sep 9 00:39:00.678249 kernel: GICv3: 16 PPIs implemented Sep 9 00:39:00.678255 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Sep 9 00:39:00.678261 kernel: ACPI: SRAT not present Sep 9 00:39:00.678267 kernel: ITS [mem 0x08080000-0x0809ffff] Sep 9 00:39:00.678274 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Sep 9 00:39:00.678280 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Sep 9 00:39:00.678286 kernel: GICv3: using LPI property table @0x00000000400d0000 Sep 9 00:39:00.678292 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Sep 9 00:39:00.678299 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Sep 9 00:39:00.678305 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Sep 9 00:39:00.678312 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Sep 9 00:39:00.678318 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Sep 9 00:39:00.678324 kernel: arm-pv: using stolen time PV Sep 9 00:39:00.678330 kernel: Console: colour dummy device 80x25 Sep 9 00:39:00.678337 kernel: ACPI: Core revision 20210730 Sep 9 00:39:00.678343 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Sep 9 00:39:00.678350 kernel: pid_max: default: 32768 minimum: 301 Sep 9 00:39:00.678356 kernel: LSM: Security Framework initializing Sep 9 00:39:00.678364 kernel: SELinux: Initializing. Sep 9 00:39:00.678370 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 9 00:39:00.678376 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 9 00:39:00.678383 kernel: rcu: Hierarchical SRCU implementation. Sep 9 00:39:00.678389 kernel: Platform MSI: ITS@0x8080000 domain created Sep 9 00:39:00.678395 kernel: PCI/MSI: ITS@0x8080000 domain created Sep 9 00:39:00.678402 kernel: Remapping and enabling EFI services. Sep 9 00:39:00.678408 kernel: smp: Bringing up secondary CPUs ... Sep 9 00:39:00.678414 kernel: Detected PIPT I-cache on CPU1 Sep 9 00:39:00.678422 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Sep 9 00:39:00.678428 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Sep 9 00:39:00.678435 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Sep 9 00:39:00.678441 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Sep 9 00:39:00.678447 kernel: Detected PIPT I-cache on CPU2 Sep 9 00:39:00.678454 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Sep 9 00:39:00.678461 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Sep 9 00:39:00.678467 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Sep 9 00:39:00.678474 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Sep 9 00:39:00.678480 kernel: Detected PIPT I-cache on CPU3 Sep 9 00:39:00.678488 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Sep 9 00:39:00.678494 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Sep 9 00:39:00.678500 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Sep 9 00:39:00.678507 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Sep 9 00:39:00.678517 kernel: smp: Brought up 1 node, 4 CPUs Sep 9 00:39:00.678525 kernel: SMP: Total of 4 processors activated. Sep 9 00:39:00.678532 kernel: CPU features: detected: 32-bit EL0 Support Sep 9 00:39:00.678541 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Sep 9 00:39:00.678557 kernel: CPU features: detected: Common not Private translations Sep 9 00:39:00.678565 kernel: CPU features: detected: CRC32 instructions Sep 9 00:39:00.678572 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Sep 9 00:39:00.678579 kernel: CPU features: detected: LSE atomic instructions Sep 9 00:39:00.678586 kernel: CPU features: detected: Privileged Access Never Sep 9 00:39:00.678594 kernel: CPU features: detected: RAS Extension Support Sep 9 00:39:00.678600 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Sep 9 00:39:00.678615 kernel: CPU: All CPU(s) started at EL1 Sep 9 00:39:00.678622 kernel: alternatives: patching kernel code Sep 9 00:39:00.678631 kernel: devtmpfs: initialized Sep 9 00:39:00.678637 kernel: KASLR enabled Sep 9 00:39:00.678645 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Sep 9 00:39:00.678653 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Sep 9 00:39:00.678660 kernel: pinctrl core: initialized pinctrl subsystem Sep 9 00:39:00.678666 kernel: SMBIOS 3.0.0 present. Sep 9 00:39:00.678673 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Sep 9 00:39:00.678680 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Sep 9 00:39:00.678686 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Sep 9 00:39:00.678695 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Sep 9 00:39:00.678702 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Sep 9 00:39:00.678709 kernel: audit: initializing netlink subsys (disabled) Sep 9 00:39:00.678715 kernel: audit: type=2000 audit(0.037:1): state=initialized audit_enabled=0 res=1 Sep 9 00:39:00.678722 kernel: thermal_sys: Registered thermal governor 'step_wise' Sep 9 00:39:00.678729 kernel: cpuidle: using governor menu Sep 9 00:39:00.678736 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Sep 9 00:39:00.678743 kernel: ASID allocator initialised with 32768 entries Sep 9 00:39:00.678749 kernel: ACPI: bus type PCI registered Sep 9 00:39:00.678758 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Sep 9 00:39:00.678764 kernel: Serial: AMBA PL011 UART driver Sep 9 00:39:00.678771 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Sep 9 00:39:00.678777 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Sep 9 00:39:00.678784 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Sep 9 00:39:00.678791 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Sep 9 00:39:00.678797 kernel: cryptd: max_cpu_qlen set to 1000 Sep 9 00:39:00.678804 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Sep 9 00:39:00.678811 kernel: ACPI: Added _OSI(Module Device) Sep 9 00:39:00.678818 kernel: ACPI: Added _OSI(Processor Device) Sep 9 00:39:00.678825 kernel: ACPI: Added _OSI(Processor Aggregator Device) Sep 9 00:39:00.678832 kernel: ACPI: Added _OSI(Linux-Dell-Video) Sep 9 00:39:00.678838 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Sep 9 00:39:00.678845 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Sep 9 00:39:00.678851 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Sep 9 00:39:00.678858 kernel: ACPI: Interpreter enabled Sep 9 00:39:00.678864 kernel: ACPI: Using GIC for interrupt routing Sep 9 00:39:00.678871 kernel: ACPI: MCFG table detected, 1 entries Sep 9 00:39:00.678879 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Sep 9 00:39:00.678886 kernel: printk: console [ttyAMA0] enabled Sep 9 00:39:00.678898 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Sep 9 00:39:00.679055 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Sep 9 00:39:00.679124 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Sep 9 00:39:00.679190 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Sep 9 00:39:00.679251 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Sep 9 00:39:00.679313 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Sep 9 00:39:00.679322 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Sep 9 00:39:00.679329 kernel: PCI host bridge to bus 0000:00 Sep 9 00:39:00.679401 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Sep 9 00:39:00.679456 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Sep 9 00:39:00.679509 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Sep 9 00:39:00.679561 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Sep 9 00:39:00.679651 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Sep 9 00:39:00.679720 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Sep 9 00:39:00.679781 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Sep 9 00:39:00.679840 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Sep 9 00:39:00.679899 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Sep 9 00:39:00.680002 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Sep 9 00:39:00.680062 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Sep 9 00:39:00.680138 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Sep 9 00:39:00.680190 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Sep 9 00:39:00.680240 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Sep 9 00:39:00.680291 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Sep 9 00:39:00.680299 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Sep 9 00:39:00.680306 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Sep 9 00:39:00.680313 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Sep 9 00:39:00.680320 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Sep 9 00:39:00.680328 kernel: iommu: Default domain type: Translated Sep 9 00:39:00.680336 kernel: iommu: DMA domain TLB invalidation policy: strict mode Sep 9 00:39:00.680343 kernel: vgaarb: loaded Sep 9 00:39:00.680349 kernel: pps_core: LinuxPPS API ver. 1 registered Sep 9 00:39:00.680356 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Sep 9 00:39:00.680363 kernel: PTP clock support registered Sep 9 00:39:00.680369 kernel: Registered efivars operations Sep 9 00:39:00.680376 kernel: clocksource: Switched to clocksource arch_sys_counter Sep 9 00:39:00.680382 kernel: VFS: Disk quotas dquot_6.6.0 Sep 9 00:39:00.680391 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Sep 9 00:39:00.680397 kernel: pnp: PnP ACPI init Sep 9 00:39:00.680462 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Sep 9 00:39:00.680472 kernel: pnp: PnP ACPI: found 1 devices Sep 9 00:39:00.680479 kernel: NET: Registered PF_INET protocol family Sep 9 00:39:00.680486 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Sep 9 00:39:00.680493 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Sep 9 00:39:00.680499 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Sep 9 00:39:00.680508 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Sep 9 00:39:00.680515 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Sep 9 00:39:00.680521 kernel: TCP: Hash tables configured (established 32768 bind 32768) Sep 9 00:39:00.680529 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 9 00:39:00.680536 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 9 00:39:00.680542 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Sep 9 00:39:00.680549 kernel: PCI: CLS 0 bytes, default 64 Sep 9 00:39:00.680556 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Sep 9 00:39:00.680562 kernel: kvm [1]: HYP mode not available Sep 9 00:39:00.680570 kernel: Initialise system trusted keyrings Sep 9 00:39:00.680577 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Sep 9 00:39:00.680584 kernel: Key type asymmetric registered Sep 9 00:39:00.680590 kernel: Asymmetric key parser 'x509' registered Sep 9 00:39:00.680597 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Sep 9 00:39:00.680604 kernel: io scheduler mq-deadline registered Sep 9 00:39:00.680610 kernel: io scheduler kyber registered Sep 9 00:39:00.680617 kernel: io scheduler bfq registered Sep 9 00:39:00.680623 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Sep 9 00:39:00.680631 kernel: ACPI: button: Power Button [PWRB] Sep 9 00:39:00.680638 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Sep 9 00:39:00.680697 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Sep 9 00:39:00.680705 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Sep 9 00:39:00.680712 kernel: thunder_xcv, ver 1.0 Sep 9 00:39:00.680719 kernel: thunder_bgx, ver 1.0 Sep 9 00:39:00.680725 kernel: nicpf, ver 1.0 Sep 9 00:39:00.680732 kernel: nicvf, ver 1.0 Sep 9 00:39:00.680798 kernel: rtc-efi rtc-efi.0: registered as rtc0 Sep 9 00:39:00.680858 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-09-09T00:39:00 UTC (1757378340) Sep 9 00:39:00.680867 kernel: hid: raw HID events driver (C) Jiri Kosina Sep 9 00:39:00.680873 kernel: NET: Registered PF_INET6 protocol family Sep 9 00:39:00.680880 kernel: Segment Routing with IPv6 Sep 9 00:39:00.680887 kernel: In-situ OAM (IOAM) with IPv6 Sep 9 00:39:00.680893 kernel: NET: Registered PF_PACKET protocol family Sep 9 00:39:00.680900 kernel: Key type dns_resolver registered Sep 9 00:39:00.680921 kernel: registered taskstats version 1 Sep 9 00:39:00.680930 kernel: Loading compiled-in X.509 certificates Sep 9 00:39:00.680937 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.191-flatcar: 14b3f28443a1a4b809c7c0337ab8c3dc8fdb5252' Sep 9 00:39:00.680943 kernel: Key type .fscrypt registered Sep 9 00:39:00.680950 kernel: Key type fscrypt-provisioning registered Sep 9 00:39:00.680957 kernel: ima: No TPM chip found, activating TPM-bypass! Sep 9 00:39:00.680963 kernel: ima: Allocated hash algorithm: sha1 Sep 9 00:39:00.680971 kernel: ima: No architecture policies found Sep 9 00:39:00.680977 kernel: clk: Disabling unused clocks Sep 9 00:39:00.680984 kernel: Freeing unused kernel memory: 36416K Sep 9 00:39:00.680992 kernel: Run /init as init process Sep 9 00:39:00.680999 kernel: with arguments: Sep 9 00:39:00.681005 kernel: /init Sep 9 00:39:00.681012 kernel: with environment: Sep 9 00:39:00.681018 kernel: HOME=/ Sep 9 00:39:00.681025 kernel: TERM=linux Sep 9 00:39:00.681033 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Sep 9 00:39:00.681041 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 9 00:39:00.681051 systemd[1]: Detected virtualization kvm. Sep 9 00:39:00.681059 systemd[1]: Detected architecture arm64. Sep 9 00:39:00.681066 systemd[1]: Running in initrd. Sep 9 00:39:00.681073 systemd[1]: No hostname configured, using default hostname. Sep 9 00:39:00.681080 systemd[1]: Hostname set to . Sep 9 00:39:00.681087 systemd[1]: Initializing machine ID from VM UUID. Sep 9 00:39:00.681094 systemd[1]: Queued start job for default target initrd.target. Sep 9 00:39:00.681101 systemd[1]: Started systemd-ask-password-console.path. Sep 9 00:39:00.681109 systemd[1]: Reached target cryptsetup.target. Sep 9 00:39:00.681116 systemd[1]: Reached target paths.target. Sep 9 00:39:00.681123 systemd[1]: Reached target slices.target. Sep 9 00:39:00.681130 systemd[1]: Reached target swap.target. Sep 9 00:39:00.681137 systemd[1]: Reached target timers.target. Sep 9 00:39:00.681144 systemd[1]: Listening on iscsid.socket. Sep 9 00:39:00.681151 systemd[1]: Listening on iscsiuio.socket. Sep 9 00:39:00.681160 systemd[1]: Listening on systemd-journald-audit.socket. Sep 9 00:39:00.681167 systemd[1]: Listening on systemd-journald-dev-log.socket. Sep 9 00:39:00.681174 systemd[1]: Listening on systemd-journald.socket. Sep 9 00:39:00.681181 systemd[1]: Listening on systemd-networkd.socket. Sep 9 00:39:00.681188 systemd[1]: Listening on systemd-udevd-control.socket. Sep 9 00:39:00.681196 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 9 00:39:00.681203 systemd[1]: Reached target sockets.target. Sep 9 00:39:00.681210 systemd[1]: Starting kmod-static-nodes.service... Sep 9 00:39:00.681218 systemd[1]: Finished network-cleanup.service. Sep 9 00:39:00.681226 systemd[1]: Starting systemd-fsck-usr.service... Sep 9 00:39:00.681233 systemd[1]: Starting systemd-journald.service... Sep 9 00:39:00.681241 systemd[1]: Starting systemd-modules-load.service... Sep 9 00:39:00.681248 systemd[1]: Starting systemd-resolved.service... Sep 9 00:39:00.681255 systemd[1]: Starting systemd-vconsole-setup.service... Sep 9 00:39:00.681262 systemd[1]: Finished kmod-static-nodes.service. Sep 9 00:39:00.681269 systemd[1]: Finished systemd-fsck-usr.service. Sep 9 00:39:00.681276 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 9 00:39:00.681286 systemd-journald[289]: Journal started Sep 9 00:39:00.681328 systemd-journald[289]: Runtime Journal (/run/log/journal/43286a88d09140db847a76d1bd894a42) is 6.0M, max 48.7M, 42.6M free. Sep 9 00:39:00.678992 systemd-modules-load[290]: Inserted module 'overlay' Sep 9 00:39:00.684299 systemd[1]: Started systemd-journald.service. Sep 9 00:39:00.684000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:00.686657 systemd[1]: Finished systemd-vconsole-setup.service. Sep 9 00:39:00.690143 kernel: audit: type=1130 audit(1757378340.684:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:00.690166 kernel: audit: type=1130 audit(1757378340.687:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:00.687000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:00.690279 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 9 00:39:00.693794 kernel: audit: type=1130 audit(1757378340.690:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:00.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:00.694573 systemd[1]: Starting dracut-cmdline-ask.service... Sep 9 00:39:00.698730 systemd-resolved[291]: Positive Trust Anchors: Sep 9 00:39:00.698748 systemd-resolved[291]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 9 00:39:00.698776 systemd-resolved[291]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 9 00:39:00.702957 systemd-resolved[291]: Defaulting to hostname 'linux'. Sep 9 00:39:00.707268 systemd[1]: Started systemd-resolved.service. Sep 9 00:39:00.712099 kernel: audit: type=1130 audit(1757378340.706:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:00.712119 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Sep 9 00:39:00.706000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:00.708202 systemd[1]: Reached target nss-lookup.target. Sep 9 00:39:00.715563 systemd-modules-load[290]: Inserted module 'br_netfilter' Sep 9 00:39:00.716832 kernel: Bridge firewalling registered Sep 9 00:39:00.718249 systemd[1]: Finished dracut-cmdline-ask.service. Sep 9 00:39:00.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:00.721576 systemd[1]: Starting dracut-cmdline.service... Sep 9 00:39:00.722900 kernel: audit: type=1130 audit(1757378340.718:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:00.726929 kernel: SCSI subsystem initialized Sep 9 00:39:00.730314 dracut-cmdline[307]: dracut-dracut-053 Sep 9 00:39:00.732608 dracut-cmdline[307]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=32b3b664430ec28e33efa673a32f74eb733fc8145822fbe5ce810188f7f71923 Sep 9 00:39:00.738349 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Sep 9 00:39:00.738376 kernel: device-mapper: uevent: version 1.0.3 Sep 9 00:39:00.738385 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Sep 9 00:39:00.738524 systemd-modules-load[290]: Inserted module 'dm_multipath' Sep 9 00:39:00.739326 systemd[1]: Finished systemd-modules-load.service. Sep 9 00:39:00.742934 kernel: audit: type=1130 audit(1757378340.739:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:00.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:00.740955 systemd[1]: Starting systemd-sysctl.service... Sep 9 00:39:00.749762 systemd[1]: Finished systemd-sysctl.service. Sep 9 00:39:00.749000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:00.753947 kernel: audit: type=1130 audit(1757378340.749:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:00.796935 kernel: Loading iSCSI transport class v2.0-870. Sep 9 00:39:00.808949 kernel: iscsi: registered transport (tcp) Sep 9 00:39:00.823942 kernel: iscsi: registered transport (qla4xxx) Sep 9 00:39:00.823967 kernel: QLogic iSCSI HBA Driver Sep 9 00:39:00.856509 systemd[1]: Finished dracut-cmdline.service. Sep 9 00:39:00.858216 systemd[1]: Starting dracut-pre-udev.service... Sep 9 00:39:00.857000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:00.861932 kernel: audit: type=1130 audit(1757378340.857:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:00.899952 kernel: raid6: neonx8 gen() 13734 MB/s Sep 9 00:39:00.916949 kernel: raid6: neonx8 xor() 10798 MB/s Sep 9 00:39:00.933929 kernel: raid6: neonx4 gen() 13535 MB/s Sep 9 00:39:00.950929 kernel: raid6: neonx4 xor() 11050 MB/s Sep 9 00:39:00.967940 kernel: raid6: neonx2 gen() 12943 MB/s Sep 9 00:39:00.984931 kernel: raid6: neonx2 xor() 10227 MB/s Sep 9 00:39:01.001929 kernel: raid6: neonx1 gen() 10520 MB/s Sep 9 00:39:01.018931 kernel: raid6: neonx1 xor() 8752 MB/s Sep 9 00:39:01.035939 kernel: raid6: int64x8 gen() 6257 MB/s Sep 9 00:39:01.052943 kernel: raid6: int64x8 xor() 3535 MB/s Sep 9 00:39:01.070952 kernel: raid6: int64x4 gen() 7212 MB/s Sep 9 00:39:01.086948 kernel: raid6: int64x4 xor() 3847 MB/s Sep 9 00:39:01.104520 kernel: raid6: int64x2 gen() 6136 MB/s Sep 9 00:39:01.120950 kernel: raid6: int64x2 xor() 3316 MB/s Sep 9 00:39:01.137943 kernel: raid6: int64x1 gen() 5037 MB/s Sep 9 00:39:01.155212 kernel: raid6: int64x1 xor() 2642 MB/s Sep 9 00:39:01.155251 kernel: raid6: using algorithm neonx8 gen() 13734 MB/s Sep 9 00:39:01.155269 kernel: raid6: .... xor() 10798 MB/s, rmw enabled Sep 9 00:39:01.155286 kernel: raid6: using neon recovery algorithm Sep 9 00:39:01.166464 kernel: xor: measuring software checksum speed Sep 9 00:39:01.166503 kernel: 8regs : 17177 MB/sec Sep 9 00:39:01.166512 kernel: 32regs : 20712 MB/sec Sep 9 00:39:01.167137 kernel: arm64_neon : 27691 MB/sec Sep 9 00:39:01.167167 kernel: xor: using function: arm64_neon (27691 MB/sec) Sep 9 00:39:01.219964 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Sep 9 00:39:01.229892 systemd[1]: Finished dracut-pre-udev.service. Sep 9 00:39:01.229000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:01.231662 systemd[1]: Starting systemd-udevd.service... Sep 9 00:39:01.235387 kernel: audit: type=1130 audit(1757378341.229:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:01.230000 audit: BPF prog-id=7 op=LOAD Sep 9 00:39:01.230000 audit: BPF prog-id=8 op=LOAD Sep 9 00:39:01.245402 systemd-udevd[491]: Using default interface naming scheme 'v252'. Sep 9 00:39:01.248698 systemd[1]: Started systemd-udevd.service. Sep 9 00:39:01.249000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:01.251304 systemd[1]: Starting dracut-pre-trigger.service... Sep 9 00:39:01.261930 dracut-pre-trigger[503]: rd.md=0: removing MD RAID activation Sep 9 00:39:01.287474 systemd[1]: Finished dracut-pre-trigger.service. Sep 9 00:39:01.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:01.289039 systemd[1]: Starting systemd-udev-trigger.service... Sep 9 00:39:01.330483 systemd[1]: Finished systemd-udev-trigger.service. Sep 9 00:39:01.330000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:01.362003 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Sep 9 00:39:01.367162 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Sep 9 00:39:01.367176 kernel: GPT:9289727 != 19775487 Sep 9 00:39:01.367185 kernel: GPT:Alternate GPT header not at the end of the disk. Sep 9 00:39:01.367199 kernel: GPT:9289727 != 19775487 Sep 9 00:39:01.367207 kernel: GPT: Use GNU Parted to correct GPT errors. Sep 9 00:39:01.367214 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Sep 9 00:39:01.384931 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (548) Sep 9 00:39:01.386330 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Sep 9 00:39:01.389254 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Sep 9 00:39:01.390317 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Sep 9 00:39:01.396693 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Sep 9 00:39:01.400257 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 9 00:39:01.401874 systemd[1]: Starting disk-uuid.service... Sep 9 00:39:01.407455 disk-uuid[563]: Primary Header is updated. Sep 9 00:39:01.407455 disk-uuid[563]: Secondary Entries is updated. Sep 9 00:39:01.407455 disk-uuid[563]: Secondary Header is updated. Sep 9 00:39:01.410036 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Sep 9 00:39:02.415953 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Sep 9 00:39:02.416117 disk-uuid[564]: The operation has completed successfully. Sep 9 00:39:02.443491 systemd[1]: disk-uuid.service: Deactivated successfully. Sep 9 00:39:02.443790 systemd[1]: Finished disk-uuid.service. Sep 9 00:39:02.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:02.444000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:02.460177 systemd[1]: Starting verity-setup.service... Sep 9 00:39:02.472937 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Sep 9 00:39:02.494941 systemd[1]: Found device dev-mapper-usr.device. Sep 9 00:39:02.496233 systemd[1]: Mounting sysusr-usr.mount... Sep 9 00:39:02.497760 systemd[1]: Finished verity-setup.service. Sep 9 00:39:02.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:02.547921 systemd[1]: Mounted sysusr-usr.mount. Sep 9 00:39:02.548996 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Sep 9 00:39:02.548593 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Sep 9 00:39:02.549391 systemd[1]: Starting ignition-setup.service... Sep 9 00:39:02.551162 systemd[1]: Starting parse-ip-for-networkd.service... Sep 9 00:39:02.558205 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Sep 9 00:39:02.558238 kernel: BTRFS info (device vda6): using free space tree Sep 9 00:39:02.558253 kernel: BTRFS info (device vda6): has skinny extents Sep 9 00:39:02.566492 systemd[1]: mnt-oem.mount: Deactivated successfully. Sep 9 00:39:02.571936 systemd[1]: Finished ignition-setup.service. Sep 9 00:39:02.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:02.573287 systemd[1]: Starting ignition-fetch-offline.service... Sep 9 00:39:02.619316 ignition[646]: Ignition 2.14.0 Sep 9 00:39:02.619328 ignition[646]: Stage: fetch-offline Sep 9 00:39:02.619366 ignition[646]: no configs at "/usr/lib/ignition/base.d" Sep 9 00:39:02.619376 ignition[646]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 9 00:39:02.619723 ignition[646]: parsed url from cmdline: "" Sep 9 00:39:02.619727 ignition[646]: no config URL provided Sep 9 00:39:02.619733 ignition[646]: reading system config file "/usr/lib/ignition/user.ign" Sep 9 00:39:02.619741 ignition[646]: no config at "/usr/lib/ignition/user.ign" Sep 9 00:39:02.619759 ignition[646]: op(1): [started] loading QEMU firmware config module Sep 9 00:39:02.619764 ignition[646]: op(1): executing: "modprobe" "qemu_fw_cfg" Sep 9 00:39:02.623295 ignition[646]: op(1): [finished] loading QEMU firmware config module Sep 9 00:39:02.639390 systemd[1]: Finished parse-ip-for-networkd.service. Sep 9 00:39:02.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:02.640000 audit: BPF prog-id=9 op=LOAD Sep 9 00:39:02.641431 systemd[1]: Starting systemd-networkd.service... Sep 9 00:39:02.661001 systemd-networkd[741]: lo: Link UP Sep 9 00:39:02.661013 systemd-networkd[741]: lo: Gained carrier Sep 9 00:39:02.662000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:02.661620 systemd-networkd[741]: Enumeration completed Sep 9 00:39:02.661710 systemd[1]: Started systemd-networkd.service. Sep 9 00:39:02.662023 systemd-networkd[741]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 9 00:39:02.662562 systemd[1]: Reached target network.target. Sep 9 00:39:02.663394 systemd-networkd[741]: eth0: Link UP Sep 9 00:39:02.663398 systemd-networkd[741]: eth0: Gained carrier Sep 9 00:39:02.664514 systemd[1]: Starting iscsiuio.service... Sep 9 00:39:02.671604 systemd[1]: Started iscsiuio.service. Sep 9 00:39:02.672000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:02.673118 systemd[1]: Starting iscsid.service... Sep 9 00:39:02.676187 iscsid[746]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Sep 9 00:39:02.676187 iscsid[746]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Sep 9 00:39:02.676187 iscsid[746]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Sep 9 00:39:02.676187 iscsid[746]: If using hardware iscsi like qla4xxx this message can be ignored. Sep 9 00:39:02.676187 iscsid[746]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Sep 9 00:39:02.676187 iscsid[746]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Sep 9 00:39:02.681000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:02.678674 ignition[646]: parsing config with SHA512: 109b9b7cb2725c344bf8d82747b1ea23da1462240771c50b905d0f4ca1194dd1c2a2788b11e48955f2e1c32df28876b945bc2e36f7d75da0e9ae61c6e615d77c Sep 9 00:39:02.679234 systemd[1]: Started iscsid.service. Sep 9 00:39:02.683967 systemd[1]: Starting dracut-initqueue.service... Sep 9 00:39:02.688087 systemd-networkd[741]: eth0: DHCPv4 address 10.0.0.102/16, gateway 10.0.0.1 acquired from 10.0.0.1 Sep 9 00:39:02.690966 unknown[646]: fetched base config from "system" Sep 9 00:39:02.690976 unknown[646]: fetched user config from "qemu" Sep 9 00:39:02.691372 ignition[646]: fetch-offline: fetch-offline passed Sep 9 00:39:02.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:02.692251 systemd[1]: Finished ignition-fetch-offline.service. Sep 9 00:39:02.691427 ignition[646]: Ignition finished successfully Sep 9 00:39:02.693682 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Sep 9 00:39:02.694366 systemd[1]: Starting ignition-kargs.service... Sep 9 00:39:02.697573 systemd[1]: Finished dracut-initqueue.service. Sep 9 00:39:02.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:02.698636 systemd[1]: Reached target remote-fs-pre.target. Sep 9 00:39:02.699726 systemd[1]: Reached target remote-cryptsetup.target. Sep 9 00:39:02.700995 systemd[1]: Reached target remote-fs.target. Sep 9 00:39:02.702577 ignition[755]: Ignition 2.14.0 Sep 9 00:39:02.702583 ignition[755]: Stage: kargs Sep 9 00:39:02.702910 systemd[1]: Starting dracut-pre-mount.service... Sep 9 00:39:02.702666 ignition[755]: no configs at "/usr/lib/ignition/base.d" Sep 9 00:39:02.702676 ignition[755]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 9 00:39:02.706000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:02.705659 systemd[1]: Finished ignition-kargs.service. Sep 9 00:39:02.703490 ignition[755]: kargs: kargs passed Sep 9 00:39:02.707378 systemd[1]: Starting ignition-disks.service... Sep 9 00:39:02.703528 ignition[755]: Ignition finished successfully Sep 9 00:39:02.710546 systemd[1]: Finished dracut-pre-mount.service. Sep 9 00:39:02.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:02.714310 ignition[766]: Ignition 2.14.0 Sep 9 00:39:02.714319 ignition[766]: Stage: disks Sep 9 00:39:02.714408 ignition[766]: no configs at "/usr/lib/ignition/base.d" Sep 9 00:39:02.714417 ignition[766]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 9 00:39:02.716088 systemd[1]: Finished ignition-disks.service. Sep 9 00:39:02.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:02.715277 ignition[766]: disks: disks passed Sep 9 00:39:02.717464 systemd[1]: Reached target initrd-root-device.target. Sep 9 00:39:02.715315 ignition[766]: Ignition finished successfully Sep 9 00:39:02.718484 systemd[1]: Reached target local-fs-pre.target. Sep 9 00:39:02.719448 systemd[1]: Reached target local-fs.target. Sep 9 00:39:02.720454 systemd[1]: Reached target sysinit.target. Sep 9 00:39:02.721503 systemd[1]: Reached target basic.target. Sep 9 00:39:02.723194 systemd[1]: Starting systemd-fsck-root.service... Sep 9 00:39:02.733209 systemd-fsck[777]: ROOT: clean, 629/553520 files, 56027/553472 blocks Sep 9 00:39:02.736087 systemd[1]: Finished systemd-fsck-root.service. Sep 9 00:39:02.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:02.737401 systemd[1]: Mounting sysroot.mount... Sep 9 00:39:02.742555 systemd[1]: Mounted sysroot.mount. Sep 9 00:39:02.743526 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Sep 9 00:39:02.743176 systemd[1]: Reached target initrd-root-fs.target. Sep 9 00:39:02.744987 systemd[1]: Mounting sysroot-usr.mount... Sep 9 00:39:02.745681 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Sep 9 00:39:02.745719 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Sep 9 00:39:02.745743 systemd[1]: Reached target ignition-diskful.target. Sep 9 00:39:02.747363 systemd[1]: Mounted sysroot-usr.mount. Sep 9 00:39:02.748692 systemd[1]: Starting initrd-setup-root.service... Sep 9 00:39:02.752684 initrd-setup-root[787]: cut: /sysroot/etc/passwd: No such file or directory Sep 9 00:39:02.756956 initrd-setup-root[795]: cut: /sysroot/etc/group: No such file or directory Sep 9 00:39:02.759839 initrd-setup-root[803]: cut: /sysroot/etc/shadow: No such file or directory Sep 9 00:39:02.763802 initrd-setup-root[811]: cut: /sysroot/etc/gshadow: No such file or directory Sep 9 00:39:02.788700 systemd[1]: Finished initrd-setup-root.service. Sep 9 00:39:02.788000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:02.790121 systemd[1]: Starting ignition-mount.service... Sep 9 00:39:02.791256 systemd[1]: Starting sysroot-boot.service... Sep 9 00:39:02.795031 bash[828]: umount: /sysroot/usr/share/oem: not mounted. Sep 9 00:39:02.803077 ignition[830]: INFO : Ignition 2.14.0 Sep 9 00:39:02.803077 ignition[830]: INFO : Stage: mount Sep 9 00:39:02.804356 ignition[830]: INFO : no configs at "/usr/lib/ignition/base.d" Sep 9 00:39:02.804356 ignition[830]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 9 00:39:02.806636 ignition[830]: INFO : mount: mount passed Sep 9 00:39:02.806636 ignition[830]: INFO : Ignition finished successfully Sep 9 00:39:02.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:02.807000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:02.805793 systemd[1]: Finished sysroot-boot.service. Sep 9 00:39:02.807377 systemd[1]: Finished ignition-mount.service. Sep 9 00:39:03.505746 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 9 00:39:03.512258 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (838) Sep 9 00:39:03.512296 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Sep 9 00:39:03.512306 kernel: BTRFS info (device vda6): using free space tree Sep 9 00:39:03.513249 kernel: BTRFS info (device vda6): has skinny extents Sep 9 00:39:03.515851 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 9 00:39:03.517326 systemd[1]: Starting ignition-files.service... Sep 9 00:39:03.530626 ignition[858]: INFO : Ignition 2.14.0 Sep 9 00:39:03.530626 ignition[858]: INFO : Stage: files Sep 9 00:39:03.531993 ignition[858]: INFO : no configs at "/usr/lib/ignition/base.d" Sep 9 00:39:03.531993 ignition[858]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 9 00:39:03.531993 ignition[858]: DEBUG : files: compiled without relabeling support, skipping Sep 9 00:39:03.534671 ignition[858]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Sep 9 00:39:03.534671 ignition[858]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Sep 9 00:39:03.537363 ignition[858]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Sep 9 00:39:03.538426 ignition[858]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Sep 9 00:39:03.539620 unknown[858]: wrote ssh authorized keys file for user: core Sep 9 00:39:03.540580 ignition[858]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Sep 9 00:39:03.540580 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Sep 9 00:39:03.540580 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-arm64.tar.gz: attempt #1 Sep 9 00:39:03.588351 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Sep 9 00:39:04.072101 systemd-networkd[741]: eth0: Gained IPv6LL Sep 9 00:39:04.248662 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Sep 9 00:39:04.250232 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Sep 9 00:39:04.250232 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Sep 9 00:39:04.250232 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Sep 9 00:39:04.250232 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Sep 9 00:39:04.250232 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 9 00:39:04.250232 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 9 00:39:04.250232 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 9 00:39:04.250232 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 9 00:39:04.263783 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Sep 9 00:39:04.263783 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Sep 9 00:39:04.263783 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Sep 9 00:39:04.263783 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Sep 9 00:39:04.263783 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Sep 9 00:39:04.263783 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-arm64.raw: attempt #1 Sep 9 00:39:04.739749 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Sep 9 00:39:05.878250 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Sep 9 00:39:05.878250 ignition[858]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Sep 9 00:39:05.881467 ignition[858]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 9 00:39:05.881467 ignition[858]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 9 00:39:05.881467 ignition[858]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Sep 9 00:39:05.881467 ignition[858]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Sep 9 00:39:05.881467 ignition[858]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Sep 9 00:39:05.881467 ignition[858]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Sep 9 00:39:05.881467 ignition[858]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Sep 9 00:39:05.881467 ignition[858]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Sep 9 00:39:05.881467 ignition[858]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Sep 9 00:39:05.881467 ignition[858]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Sep 9 00:39:05.881467 ignition[858]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Sep 9 00:39:05.919870 ignition[858]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Sep 9 00:39:05.921998 ignition[858]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Sep 9 00:39:05.921998 ignition[858]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Sep 9 00:39:05.921998 ignition[858]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Sep 9 00:39:05.921998 ignition[858]: INFO : files: files passed Sep 9 00:39:05.921998 ignition[858]: INFO : Ignition finished successfully Sep 9 00:39:05.930778 kernel: kauditd_printk_skb: 23 callbacks suppressed Sep 9 00:39:05.930798 kernel: audit: type=1130 audit(1757378345.922:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:05.922000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:05.922002 systemd[1]: Finished ignition-files.service. Sep 9 00:39:05.924706 systemd[1]: Starting initrd-setup-root-after-ignition.service... Sep 9 00:39:05.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:05.935966 kernel: audit: type=1130 audit(1757378345.932:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:05.929695 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Sep 9 00:39:05.941850 kernel: audit: type=1130 audit(1757378345.935:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:05.941875 kernel: audit: type=1131 audit(1757378345.935:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:05.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:05.935000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:05.942024 initrd-setup-root-after-ignition[881]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Sep 9 00:39:05.930605 systemd[1]: Starting ignition-quench.service... Sep 9 00:39:05.944777 initrd-setup-root-after-ignition[884]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Sep 9 00:39:05.932384 systemd[1]: Finished initrd-setup-root-after-ignition.service. Sep 9 00:39:05.933433 systemd[1]: ignition-quench.service: Deactivated successfully. Sep 9 00:39:05.933515 systemd[1]: Finished ignition-quench.service. Sep 9 00:39:05.936783 systemd[1]: Reached target ignition-complete.target. Sep 9 00:39:05.943344 systemd[1]: Starting initrd-parse-etc.service... Sep 9 00:39:05.956125 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Sep 9 00:39:05.956238 systemd[1]: Finished initrd-parse-etc.service. Sep 9 00:39:05.961962 kernel: audit: type=1130 audit(1757378345.956:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:05.961984 kernel: audit: type=1131 audit(1757378345.956:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:05.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:05.956000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:05.957611 systemd[1]: Reached target initrd-fs.target. Sep 9 00:39:05.962529 systemd[1]: Reached target initrd.target. Sep 9 00:39:05.963552 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Sep 9 00:39:05.964426 systemd[1]: Starting dracut-pre-pivot.service... Sep 9 00:39:05.974549 systemd[1]: Finished dracut-pre-pivot.service. Sep 9 00:39:05.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:05.976067 systemd[1]: Starting initrd-cleanup.service... Sep 9 00:39:05.978738 kernel: audit: type=1130 audit(1757378345.974:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:05.984296 systemd[1]: Stopped target nss-lookup.target. Sep 9 00:39:05.985004 systemd[1]: Stopped target remote-cryptsetup.target. Sep 9 00:39:05.986161 systemd[1]: Stopped target timers.target. Sep 9 00:39:05.987173 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Sep 9 00:39:05.987000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:05.987283 systemd[1]: Stopped dracut-pre-pivot.service. Sep 9 00:39:05.991503 kernel: audit: type=1131 audit(1757378345.987:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:05.988262 systemd[1]: Stopped target initrd.target. Sep 9 00:39:05.991138 systemd[1]: Stopped target basic.target. Sep 9 00:39:05.992080 systemd[1]: Stopped target ignition-complete.target. Sep 9 00:39:05.993084 systemd[1]: Stopped target ignition-diskful.target. Sep 9 00:39:05.994104 systemd[1]: Stopped target initrd-root-device.target. Sep 9 00:39:05.995263 systemd[1]: Stopped target remote-fs.target. Sep 9 00:39:05.996351 systemd[1]: Stopped target remote-fs-pre.target. Sep 9 00:39:05.997489 systemd[1]: Stopped target sysinit.target. Sep 9 00:39:05.998499 systemd[1]: Stopped target local-fs.target. Sep 9 00:39:05.999564 systemd[1]: Stopped target local-fs-pre.target. Sep 9 00:39:06.000614 systemd[1]: Stopped target swap.target. Sep 9 00:39:06.001000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.001502 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Sep 9 00:39:06.006133 kernel: audit: type=1131 audit(1757378346.001:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.001611 systemd[1]: Stopped dracut-pre-mount.service. Sep 9 00:39:06.006000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.002682 systemd[1]: Stopped target cryptsetup.target. Sep 9 00:39:06.010142 kernel: audit: type=1131 audit(1757378346.006:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.008000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.005565 systemd[1]: dracut-initqueue.service: Deactivated successfully. Sep 9 00:39:06.005669 systemd[1]: Stopped dracut-initqueue.service. Sep 9 00:39:06.006774 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Sep 9 00:39:06.006874 systemd[1]: Stopped ignition-fetch-offline.service. Sep 9 00:39:06.009789 systemd[1]: Stopped target paths.target. Sep 9 00:39:06.010690 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Sep 9 00:39:06.014943 systemd[1]: Stopped systemd-ask-password-console.path. Sep 9 00:39:06.016257 systemd[1]: Stopped target slices.target. Sep 9 00:39:06.016867 systemd[1]: Stopped target sockets.target. Sep 9 00:39:06.017861 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Sep 9 00:39:06.018000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.017993 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Sep 9 00:39:06.020000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.019056 systemd[1]: ignition-files.service: Deactivated successfully. Sep 9 00:39:06.019151 systemd[1]: Stopped ignition-files.service. Sep 9 00:39:06.022559 iscsid[746]: iscsid shutting down. Sep 9 00:39:06.021219 systemd[1]: Stopping ignition-mount.service... Sep 9 00:39:06.023058 systemd[1]: Stopping iscsid.service... Sep 9 00:39:06.023577 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Sep 9 00:39:06.023692 systemd[1]: Stopped kmod-static-nodes.service. Sep 9 00:39:06.027653 ignition[898]: INFO : Ignition 2.14.0 Sep 9 00:39:06.027653 ignition[898]: INFO : Stage: umount Sep 9 00:39:06.027653 ignition[898]: INFO : no configs at "/usr/lib/ignition/base.d" Sep 9 00:39:06.027653 ignition[898]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 9 00:39:06.024000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.029000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.025431 systemd[1]: Stopping sysroot-boot.service... Sep 9 00:39:06.032000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.032756 ignition[898]: INFO : umount: umount passed Sep 9 00:39:06.032756 ignition[898]: INFO : Ignition finished successfully Sep 9 00:39:06.029382 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Sep 9 00:39:06.029526 systemd[1]: Stopped systemd-udev-trigger.service. Sep 9 00:39:06.036000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.030665 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Sep 9 00:39:06.030756 systemd[1]: Stopped dracut-pre-trigger.service. Sep 9 00:39:06.033754 systemd[1]: iscsid.service: Deactivated successfully. Sep 9 00:39:06.040000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.033848 systemd[1]: Stopped iscsid.service. Sep 9 00:39:06.037575 systemd[1]: sysroot-boot.mount: Deactivated successfully. Sep 9 00:39:06.039002 systemd[1]: ignition-mount.service: Deactivated successfully. Sep 9 00:39:06.039084 systemd[1]: Stopped ignition-mount.service. Sep 9 00:39:06.043979 systemd[1]: initrd-cleanup.service: Deactivated successfully. Sep 9 00:39:06.044076 systemd[1]: Finished initrd-cleanup.service. Sep 9 00:39:06.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.047000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.048136 systemd[1]: iscsid.socket: Deactivated successfully. Sep 9 00:39:06.048181 systemd[1]: Closed iscsid.socket. Sep 9 00:39:06.050000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.050467 systemd[1]: ignition-disks.service: Deactivated successfully. Sep 9 00:39:06.053000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.050513 systemd[1]: Stopped ignition-disks.service. Sep 9 00:39:06.054000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.051856 systemd[1]: ignition-kargs.service: Deactivated successfully. Sep 9 00:39:06.051907 systemd[1]: Stopped ignition-kargs.service. Sep 9 00:39:06.053933 systemd[1]: ignition-setup.service: Deactivated successfully. Sep 9 00:39:06.053973 systemd[1]: Stopped ignition-setup.service. Sep 9 00:39:06.055819 systemd[1]: Stopping iscsiuio.service... Sep 9 00:39:06.059633 systemd[1]: iscsiuio.service: Deactivated successfully. Sep 9 00:39:06.061000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.059717 systemd[1]: Stopped iscsiuio.service. Sep 9 00:39:06.061286 systemd[1]: Stopped target network.target. Sep 9 00:39:06.062312 systemd[1]: iscsiuio.socket: Deactivated successfully. Sep 9 00:39:06.062342 systemd[1]: Closed iscsiuio.socket. Sep 9 00:39:06.064082 systemd[1]: Stopping systemd-networkd.service... Sep 9 00:39:06.065692 systemd[1]: Stopping systemd-resolved.service... Sep 9 00:39:06.069807 systemd[1]: sysroot-boot.service: Deactivated successfully. Sep 9 00:39:06.069896 systemd[1]: Stopped sysroot-boot.service. Sep 9 00:39:06.071146 systemd[1]: initrd-setup-root.service: Deactivated successfully. Sep 9 00:39:06.071000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.071000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.071181 systemd[1]: Stopped initrd-setup-root.service. Sep 9 00:39:06.074593 systemd[1]: systemd-resolved.service: Deactivated successfully. Sep 9 00:39:06.074676 systemd[1]: Stopped systemd-resolved.service. Sep 9 00:39:06.075000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.076968 systemd-networkd[741]: eth0: DHCPv6 lease lost Sep 9 00:39:06.077939 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 9 00:39:06.078022 systemd[1]: Stopped systemd-networkd.service. Sep 9 00:39:06.079000 audit: BPF prog-id=6 op=UNLOAD Sep 9 00:39:06.079000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.079407 systemd[1]: systemd-networkd.socket: Deactivated successfully. Sep 9 00:39:06.079435 systemd[1]: Closed systemd-networkd.socket. Sep 9 00:39:06.080851 systemd[1]: Stopping network-cleanup.service... Sep 9 00:39:06.081851 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Sep 9 00:39:06.082000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.081905 systemd[1]: Stopped parse-ip-for-networkd.service. Sep 9 00:39:06.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.083041 systemd[1]: systemd-sysctl.service: Deactivated successfully. Sep 9 00:39:06.085000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.086000 audit: BPF prog-id=9 op=UNLOAD Sep 9 00:39:06.083075 systemd[1]: Stopped systemd-sysctl.service. Sep 9 00:39:06.084696 systemd[1]: systemd-modules-load.service: Deactivated successfully. Sep 9 00:39:06.084730 systemd[1]: Stopped systemd-modules-load.service. Sep 9 00:39:06.085648 systemd[1]: Stopping systemd-udevd.service... Sep 9 00:39:06.089718 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Sep 9 00:39:06.092580 systemd[1]: network-cleanup.service: Deactivated successfully. Sep 9 00:39:06.092659 systemd[1]: Stopped network-cleanup.service. Sep 9 00:39:06.093000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.095778 systemd[1]: systemd-udevd.service: Deactivated successfully. Sep 9 00:39:06.095898 systemd[1]: Stopped systemd-udevd.service. Sep 9 00:39:06.096000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.097241 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Sep 9 00:39:06.097276 systemd[1]: Closed systemd-udevd-control.socket. Sep 9 00:39:06.098079 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Sep 9 00:39:06.100000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.098106 systemd[1]: Closed systemd-udevd-kernel.socket. Sep 9 00:39:06.100000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.099231 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Sep 9 00:39:06.101000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.099265 systemd[1]: Stopped dracut-pre-udev.service. Sep 9 00:39:06.100286 systemd[1]: dracut-cmdline.service: Deactivated successfully. Sep 9 00:39:06.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.100317 systemd[1]: Stopped dracut-cmdline.service. Sep 9 00:39:06.101526 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Sep 9 00:39:06.101558 systemd[1]: Stopped dracut-cmdline-ask.service. Sep 9 00:39:06.103129 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Sep 9 00:39:06.103706 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Sep 9 00:39:06.103749 systemd[1]: Stopped systemd-vconsole-setup.service. Sep 9 00:39:06.109000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.109000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:06.108169 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Sep 9 00:39:06.108246 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Sep 9 00:39:06.109521 systemd[1]: Reached target initrd-switch-root.target. Sep 9 00:39:06.111198 systemd[1]: Starting initrd-switch-root.service... Sep 9 00:39:06.117077 systemd[1]: Switching root. Sep 9 00:39:06.133007 systemd-journald[289]: Journal stopped Sep 9 00:39:08.076776 systemd-journald[289]: Received SIGTERM from PID 1 (systemd). Sep 9 00:39:08.076833 kernel: SELinux: Class mctp_socket not defined in policy. Sep 9 00:39:08.076845 kernel: SELinux: Class anon_inode not defined in policy. Sep 9 00:39:08.076856 kernel: SELinux: the above unknown classes and permissions will be allowed Sep 9 00:39:08.076865 kernel: SELinux: policy capability network_peer_controls=1 Sep 9 00:39:08.076887 kernel: SELinux: policy capability open_perms=1 Sep 9 00:39:08.076898 kernel: SELinux: policy capability extended_socket_class=1 Sep 9 00:39:08.076907 kernel: SELinux: policy capability always_check_network=0 Sep 9 00:39:08.076942 kernel: SELinux: policy capability cgroup_seclabel=1 Sep 9 00:39:08.076953 kernel: SELinux: policy capability nnp_nosuid_transition=1 Sep 9 00:39:08.076962 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Sep 9 00:39:08.076977 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Sep 9 00:39:08.077002 systemd[1]: Successfully loaded SELinux policy in 31.093ms. Sep 9 00:39:08.077019 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.660ms. Sep 9 00:39:08.077033 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 9 00:39:08.077044 systemd[1]: Detected virtualization kvm. Sep 9 00:39:08.077055 systemd[1]: Detected architecture arm64. Sep 9 00:39:08.077066 systemd[1]: Detected first boot. Sep 9 00:39:08.077078 systemd[1]: Initializing machine ID from VM UUID. Sep 9 00:39:08.077088 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Sep 9 00:39:08.077099 systemd[1]: Populated /etc with preset unit settings. Sep 9 00:39:08.077111 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 9 00:39:08.077123 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 9 00:39:08.077134 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 9 00:39:08.077146 systemd[1]: initrd-switch-root.service: Deactivated successfully. Sep 9 00:39:08.077157 systemd[1]: Stopped initrd-switch-root.service. Sep 9 00:39:08.077172 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Sep 9 00:39:08.077182 systemd[1]: Created slice system-addon\x2dconfig.slice. Sep 9 00:39:08.077194 systemd[1]: Created slice system-addon\x2drun.slice. Sep 9 00:39:08.077204 systemd[1]: Created slice system-getty.slice. Sep 9 00:39:08.077215 systemd[1]: Created slice system-modprobe.slice. Sep 9 00:39:08.077226 systemd[1]: Created slice system-serial\x2dgetty.slice. Sep 9 00:39:08.077238 systemd[1]: Created slice system-system\x2dcloudinit.slice. Sep 9 00:39:08.077249 systemd[1]: Created slice system-systemd\x2dfsck.slice. Sep 9 00:39:08.077296 systemd[1]: Created slice user.slice. Sep 9 00:39:08.077310 systemd[1]: Started systemd-ask-password-console.path. Sep 9 00:39:08.077321 systemd[1]: Started systemd-ask-password-wall.path. Sep 9 00:39:08.077332 systemd[1]: Set up automount boot.automount. Sep 9 00:39:08.077343 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Sep 9 00:39:08.077353 systemd[1]: Stopped target initrd-switch-root.target. Sep 9 00:39:08.077363 systemd[1]: Stopped target initrd-fs.target. Sep 9 00:39:08.077376 systemd[1]: Stopped target initrd-root-fs.target. Sep 9 00:39:08.077387 systemd[1]: Reached target integritysetup.target. Sep 9 00:39:08.077398 systemd[1]: Reached target remote-cryptsetup.target. Sep 9 00:39:08.077409 systemd[1]: Reached target remote-fs.target. Sep 9 00:39:08.077420 systemd[1]: Reached target slices.target. Sep 9 00:39:08.077430 systemd[1]: Reached target swap.target. Sep 9 00:39:08.077441 systemd[1]: Reached target torcx.target. Sep 9 00:39:08.077451 systemd[1]: Reached target veritysetup.target. Sep 9 00:39:08.077462 systemd[1]: Listening on systemd-coredump.socket. Sep 9 00:39:08.077474 systemd[1]: Listening on systemd-initctl.socket. Sep 9 00:39:08.077486 systemd[1]: Listening on systemd-networkd.socket. Sep 9 00:39:08.077496 systemd[1]: Listening on systemd-udevd-control.socket. Sep 9 00:39:08.077507 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 9 00:39:08.077536 systemd[1]: Listening on systemd-userdbd.socket. Sep 9 00:39:08.077552 systemd[1]: Mounting dev-hugepages.mount... Sep 9 00:39:08.077563 systemd[1]: Mounting dev-mqueue.mount... Sep 9 00:39:08.077574 systemd[1]: Mounting media.mount... Sep 9 00:39:08.077584 systemd[1]: Mounting sys-kernel-debug.mount... Sep 9 00:39:08.077595 systemd[1]: Mounting sys-kernel-tracing.mount... Sep 9 00:39:08.077608 systemd[1]: Mounting tmp.mount... Sep 9 00:39:08.077619 systemd[1]: Starting flatcar-tmpfiles.service... Sep 9 00:39:08.077630 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 9 00:39:08.077641 systemd[1]: Starting kmod-static-nodes.service... Sep 9 00:39:08.077655 systemd[1]: Starting modprobe@configfs.service... Sep 9 00:39:08.077666 systemd[1]: Starting modprobe@dm_mod.service... Sep 9 00:39:08.077680 systemd[1]: Starting modprobe@drm.service... Sep 9 00:39:08.077692 systemd[1]: Starting modprobe@efi_pstore.service... Sep 9 00:39:08.077703 systemd[1]: Starting modprobe@fuse.service... Sep 9 00:39:08.077715 systemd[1]: Starting modprobe@loop.service... Sep 9 00:39:08.077727 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Sep 9 00:39:08.077738 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Sep 9 00:39:08.077749 systemd[1]: Stopped systemd-fsck-root.service. Sep 9 00:39:08.077759 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Sep 9 00:39:08.077770 systemd[1]: Stopped systemd-fsck-usr.service. Sep 9 00:39:08.077780 kernel: loop: module loaded Sep 9 00:39:08.077792 kernel: fuse: init (API version 7.34) Sep 9 00:39:08.077803 systemd[1]: Stopped systemd-journald.service. Sep 9 00:39:08.077814 systemd[1]: Starting systemd-journald.service... Sep 9 00:39:08.077825 systemd[1]: Starting systemd-modules-load.service... Sep 9 00:39:08.077836 systemd[1]: Starting systemd-network-generator.service... Sep 9 00:39:08.077847 systemd[1]: Starting systemd-remount-fs.service... Sep 9 00:39:08.077857 systemd[1]: Starting systemd-udev-trigger.service... Sep 9 00:39:08.077888 systemd[1]: verity-setup.service: Deactivated successfully. Sep 9 00:39:08.077903 systemd[1]: Stopped verity-setup.service. Sep 9 00:39:08.077931 systemd-journald[1002]: Journal started Sep 9 00:39:08.077979 systemd-journald[1002]: Runtime Journal (/run/log/journal/43286a88d09140db847a76d1bd894a42) is 6.0M, max 48.7M, 42.6M free. Sep 9 00:39:06.185000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Sep 9 00:39:06.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 9 00:39:06.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 9 00:39:06.263000 audit: BPF prog-id=10 op=LOAD Sep 9 00:39:06.263000 audit: BPF prog-id=10 op=UNLOAD Sep 9 00:39:06.263000 audit: BPF prog-id=11 op=LOAD Sep 9 00:39:06.263000 audit: BPF prog-id=11 op=UNLOAD Sep 9 00:39:06.303000 audit[932]: AVC avc: denied { associate } for pid=932 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 9 00:39:06.303000 audit[932]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=400014d89c a1=40000d0de0 a2=40000d70c0 a3=32 items=0 ppid=915 pid=932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:06.303000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 9 00:39:06.305000 audit[932]: AVC avc: denied { associate } for pid=932 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Sep 9 00:39:06.305000 audit[932]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=400014d975 a2=1ed a3=0 items=2 ppid=915 pid=932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:06.305000 audit: CWD cwd="/" Sep 9 00:39:06.305000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 9 00:39:06.305000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 9 00:39:06.305000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 9 00:39:07.970000 audit: BPF prog-id=12 op=LOAD Sep 9 00:39:07.970000 audit: BPF prog-id=3 op=UNLOAD Sep 9 00:39:07.970000 audit: BPF prog-id=13 op=LOAD Sep 9 00:39:07.970000 audit: BPF prog-id=14 op=LOAD Sep 9 00:39:07.970000 audit: BPF prog-id=4 op=UNLOAD Sep 9 00:39:07.970000 audit: BPF prog-id=5 op=UNLOAD Sep 9 00:39:07.971000 audit: BPF prog-id=15 op=LOAD Sep 9 00:39:07.971000 audit: BPF prog-id=12 op=UNLOAD Sep 9 00:39:07.971000 audit: BPF prog-id=16 op=LOAD Sep 9 00:39:07.971000 audit: BPF prog-id=17 op=LOAD Sep 9 00:39:07.971000 audit: BPF prog-id=13 op=UNLOAD Sep 9 00:39:07.971000 audit: BPF prog-id=14 op=UNLOAD Sep 9 00:39:07.972000 audit: BPF prog-id=18 op=LOAD Sep 9 00:39:07.972000 audit: BPF prog-id=15 op=UNLOAD Sep 9 00:39:07.972000 audit: BPF prog-id=19 op=LOAD Sep 9 00:39:07.972000 audit: BPF prog-id=20 op=LOAD Sep 9 00:39:07.972000 audit: BPF prog-id=16 op=UNLOAD Sep 9 00:39:07.972000 audit: BPF prog-id=17 op=UNLOAD Sep 9 00:39:07.972000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:07.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:07.976000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:07.982000 audit: BPF prog-id=18 op=UNLOAD Sep 9 00:39:08.057000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.060000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.061000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.061000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.061000 audit: BPF prog-id=21 op=LOAD Sep 9 00:39:08.061000 audit: BPF prog-id=22 op=LOAD Sep 9 00:39:08.061000 audit: BPF prog-id=23 op=LOAD Sep 9 00:39:08.061000 audit: BPF prog-id=19 op=UNLOAD Sep 9 00:39:08.061000 audit: BPF prog-id=20 op=UNLOAD Sep 9 00:39:08.075000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Sep 9 00:39:08.075000 audit[1002]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=fffffa3579b0 a2=4000 a3=1 items=0 ppid=1 pid=1002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:08.075000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Sep 9 00:39:08.076000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:07.969856 systemd[1]: Queued start job for default target multi-user.target. Sep 9 00:39:06.302552 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:06Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 9 00:39:07.969880 systemd[1]: Unnecessary job was removed for dev-vda6.device. Sep 9 00:39:06.302864 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:06Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 9 00:39:07.973424 systemd[1]: systemd-journald.service: Deactivated successfully. Sep 9 00:39:06.302896 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:06Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 9 00:39:06.302951 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:06Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Sep 9 00:39:06.302963 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:06Z" level=debug msg="skipped missing lower profile" missing profile=oem Sep 9 00:39:08.080405 systemd[1]: Started systemd-journald.service. Sep 9 00:39:08.079000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.079927 systemd[1]: Mounted dev-hugepages.mount. Sep 9 00:39:06.302993 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:06Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Sep 9 00:39:06.303008 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:06Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Sep 9 00:39:08.080675 systemd[1]: Mounted dev-mqueue.mount. Sep 9 00:39:06.303200 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:06Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Sep 9 00:39:06.303234 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:06Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 9 00:39:06.303246 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:06Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 9 00:39:06.304007 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:06Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Sep 9 00:39:06.304039 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:06Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Sep 9 00:39:06.304058 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:06Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Sep 9 00:39:06.304072 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:06Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Sep 9 00:39:06.304088 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:06Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Sep 9 00:39:06.304101 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:06Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Sep 9 00:39:07.736866 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:07Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 9 00:39:07.737143 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:07Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 9 00:39:07.737244 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:07Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 9 00:39:07.737404 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:07Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 9 00:39:07.737452 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:07Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Sep 9 00:39:07.737506 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2025-09-09T00:39:07Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Sep 9 00:39:08.081657 systemd[1]: Mounted media.mount. Sep 9 00:39:08.082401 systemd[1]: Mounted sys-kernel-debug.mount. Sep 9 00:39:08.083169 systemd[1]: Mounted sys-kernel-tracing.mount. Sep 9 00:39:08.083834 systemd[1]: Mounted tmp.mount. Sep 9 00:39:08.084963 systemd[1]: Finished kmod-static-nodes.service. Sep 9 00:39:08.084000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.085840 systemd[1]: modprobe@configfs.service: Deactivated successfully. Sep 9 00:39:08.086031 systemd[1]: Finished modprobe@configfs.service. Sep 9 00:39:08.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.085000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.086906 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 9 00:39:08.087077 systemd[1]: Finished modprobe@dm_mod.service. Sep 9 00:39:08.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.086000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.087943 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 9 00:39:08.088082 systemd[1]: Finished modprobe@drm.service. Sep 9 00:39:08.087000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.087000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.088975 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 9 00:39:08.089107 systemd[1]: Finished modprobe@efi_pstore.service. Sep 9 00:39:08.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.088000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.090070 systemd[1]: modprobe@fuse.service: Deactivated successfully. Sep 9 00:39:08.090217 systemd[1]: Finished modprobe@fuse.service. Sep 9 00:39:08.090000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.091355 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 9 00:39:08.091508 systemd[1]: Finished modprobe@loop.service. Sep 9 00:39:08.092000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.092000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.092803 systemd[1]: Finished systemd-modules-load.service. Sep 9 00:39:08.093000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.093965 systemd[1]: Finished systemd-network-generator.service. Sep 9 00:39:08.093000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.095158 systemd[1]: Finished flatcar-tmpfiles.service. Sep 9 00:39:08.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.096335 systemd[1]: Finished systemd-remount-fs.service. Sep 9 00:39:08.097000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.097747 systemd[1]: Reached target network-pre.target. Sep 9 00:39:08.099791 systemd[1]: Mounting sys-fs-fuse-connections.mount... Sep 9 00:39:08.101730 systemd[1]: Mounting sys-kernel-config.mount... Sep 9 00:39:08.102396 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Sep 9 00:39:08.104116 systemd[1]: Starting systemd-hwdb-update.service... Sep 9 00:39:08.105800 systemd[1]: Starting systemd-journal-flush.service... Sep 9 00:39:08.106688 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 9 00:39:08.107692 systemd[1]: Starting systemd-random-seed.service... Sep 9 00:39:08.108527 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 9 00:39:08.109596 systemd[1]: Starting systemd-sysctl.service... Sep 9 00:39:08.110840 systemd-journald[1002]: Time spent on flushing to /var/log/journal/43286a88d09140db847a76d1bd894a42 is 13.008ms for 997 entries. Sep 9 00:39:08.110840 systemd-journald[1002]: System Journal (/var/log/journal/43286a88d09140db847a76d1bd894a42) is 8.0M, max 195.6M, 187.6M free. Sep 9 00:39:08.181090 systemd-journald[1002]: Received client request to flush runtime journal. Sep 9 00:39:08.117000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.133000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.135000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.145000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.111551 systemd[1]: Starting systemd-sysusers.service... Sep 9 00:39:08.114386 systemd[1]: Mounted sys-fs-fuse-connections.mount. Sep 9 00:39:08.182430 udevadm[1031]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Sep 9 00:39:08.115257 systemd[1]: Mounted sys-kernel-config.mount. Sep 9 00:39:08.116588 systemd[1]: Finished systemd-udev-trigger.service. Sep 9 00:39:08.118571 systemd[1]: Starting systemd-udev-settle.service... Sep 9 00:39:08.132255 systemd[1]: Finished systemd-sysctl.service. Sep 9 00:39:08.135909 systemd[1]: Finished systemd-sysusers.service. Sep 9 00:39:08.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.144428 systemd[1]: Finished systemd-random-seed.service. Sep 9 00:39:08.145242 systemd[1]: Reached target first-boot-complete.target. Sep 9 00:39:08.182053 systemd[1]: Finished systemd-journal-flush.service. Sep 9 00:39:08.500743 systemd[1]: Finished systemd-hwdb-update.service. Sep 9 00:39:08.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.501000 audit: BPF prog-id=24 op=LOAD Sep 9 00:39:08.501000 audit: BPF prog-id=25 op=LOAD Sep 9 00:39:08.501000 audit: BPF prog-id=7 op=UNLOAD Sep 9 00:39:08.501000 audit: BPF prog-id=8 op=UNLOAD Sep 9 00:39:08.502894 systemd[1]: Starting systemd-udevd.service... Sep 9 00:39:08.518050 systemd-udevd[1034]: Using default interface naming scheme 'v252'. Sep 9 00:39:08.530965 systemd[1]: Started systemd-udevd.service. Sep 9 00:39:08.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.531000 audit: BPF prog-id=26 op=LOAD Sep 9 00:39:08.533305 systemd[1]: Starting systemd-networkd.service... Sep 9 00:39:08.549000 audit: BPF prog-id=27 op=LOAD Sep 9 00:39:08.549000 audit: BPF prog-id=28 op=LOAD Sep 9 00:39:08.549000 audit: BPF prog-id=29 op=LOAD Sep 9 00:39:08.551365 systemd[1]: Starting systemd-userdbd.service... Sep 9 00:39:08.554240 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Sep 9 00:39:08.580805 systemd[1]: Started systemd-userdbd.service. Sep 9 00:39:08.580000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.603297 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 9 00:39:08.622091 systemd-networkd[1042]: lo: Link UP Sep 9 00:39:08.622100 systemd-networkd[1042]: lo: Gained carrier Sep 9 00:39:08.622441 systemd-networkd[1042]: Enumeration completed Sep 9 00:39:08.622538 systemd-networkd[1042]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 9 00:39:08.622539 systemd[1]: Started systemd-networkd.service. Sep 9 00:39:08.622000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.623663 systemd-networkd[1042]: eth0: Link UP Sep 9 00:39:08.623671 systemd-networkd[1042]: eth0: Gained carrier Sep 9 00:39:08.636268 systemd[1]: Finished systemd-udev-settle.service. Sep 9 00:39:08.635000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.638166 systemd[1]: Starting lvm2-activation-early.service... Sep 9 00:39:08.645893 lvm[1067]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 9 00:39:08.653103 systemd-networkd[1042]: eth0: DHCPv4 address 10.0.0.102/16, gateway 10.0.0.1 acquired from 10.0.0.1 Sep 9 00:39:08.676758 systemd[1]: Finished lvm2-activation-early.service. Sep 9 00:39:08.676000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.677648 systemd[1]: Reached target cryptsetup.target. Sep 9 00:39:08.679422 systemd[1]: Starting lvm2-activation.service... Sep 9 00:39:08.682873 lvm[1068]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 9 00:39:08.715850 systemd[1]: Finished lvm2-activation.service. Sep 9 00:39:08.715000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.716705 systemd[1]: Reached target local-fs-pre.target. Sep 9 00:39:08.717417 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Sep 9 00:39:08.717444 systemd[1]: Reached target local-fs.target. Sep 9 00:39:08.718033 systemd[1]: Reached target machines.target. Sep 9 00:39:08.719808 systemd[1]: Starting ldconfig.service... Sep 9 00:39:08.720753 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 9 00:39:08.720803 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 9 00:39:08.721875 systemd[1]: Starting systemd-boot-update.service... Sep 9 00:39:08.723661 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Sep 9 00:39:08.725620 systemd[1]: Starting systemd-machine-id-commit.service... Sep 9 00:39:08.727417 systemd[1]: Starting systemd-sysext.service... Sep 9 00:39:08.728353 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1070 (bootctl) Sep 9 00:39:08.729381 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Sep 9 00:39:08.736525 systemd[1]: Unmounting usr-share-oem.mount... Sep 9 00:39:08.743212 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Sep 9 00:39:08.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.747476 systemd[1]: usr-share-oem.mount: Deactivated successfully. Sep 9 00:39:08.747663 systemd[1]: Unmounted usr-share-oem.mount. Sep 9 00:39:08.809928 kernel: loop0: detected capacity change from 0 to 207008 Sep 9 00:39:08.809852 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Sep 9 00:39:08.810465 systemd[1]: Finished systemd-machine-id-commit.service. Sep 9 00:39:08.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.820948 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Sep 9 00:39:08.833219 systemd-fsck[1081]: fsck.fat 4.2 (2021-01-31) Sep 9 00:39:08.833219 systemd-fsck[1081]: /dev/vda1: 236 files, 117310/258078 clusters Sep 9 00:39:08.834880 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Sep 9 00:39:08.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.838929 kernel: loop1: detected capacity change from 0 to 207008 Sep 9 00:39:08.839454 systemd[1]: Mounting boot.mount... Sep 9 00:39:08.845348 (sd-sysext)[1084]: Using extensions 'kubernetes'. Sep 9 00:39:08.846303 (sd-sysext)[1084]: Merged extensions into '/usr'. Sep 9 00:39:08.855778 systemd[1]: Mounted boot.mount. Sep 9 00:39:08.860497 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 9 00:39:08.861828 systemd[1]: Starting modprobe@dm_mod.service... Sep 9 00:39:08.863830 systemd[1]: Starting modprobe@efi_pstore.service... Sep 9 00:39:08.865725 systemd[1]: Starting modprobe@loop.service... Sep 9 00:39:08.866560 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 9 00:39:08.866690 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 9 00:39:08.867609 systemd[1]: Finished systemd-boot-update.service. Sep 9 00:39:08.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.868856 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 9 00:39:08.869017 systemd[1]: Finished modprobe@dm_mod.service. Sep 9 00:39:08.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.868000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.870194 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 9 00:39:08.870303 systemd[1]: Finished modprobe@efi_pstore.service. Sep 9 00:39:08.871000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.871000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.871656 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 9 00:39:08.871764 systemd[1]: Finished modprobe@loop.service. Sep 9 00:39:08.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.872000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:08.873117 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 9 00:39:08.873221 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 9 00:39:08.916478 ldconfig[1069]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Sep 9 00:39:08.919836 systemd[1]: Finished ldconfig.service. Sep 9 00:39:08.920000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:09.079207 systemd[1]: Mounting usr-share-oem.mount... Sep 9 00:39:09.084431 systemd[1]: Mounted usr-share-oem.mount. Sep 9 00:39:09.086208 systemd[1]: Finished systemd-sysext.service. Sep 9 00:39:09.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:09.088931 systemd[1]: Starting ensure-sysext.service... Sep 9 00:39:09.090599 systemd[1]: Starting systemd-tmpfiles-setup.service... Sep 9 00:39:09.095018 systemd[1]: Reloading. Sep 9 00:39:09.102620 systemd-tmpfiles[1092]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Sep 9 00:39:09.104751 systemd-tmpfiles[1092]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Sep 9 00:39:09.111319 systemd-tmpfiles[1092]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Sep 9 00:39:09.123939 /usr/lib/systemd/system-generators/torcx-generator[1112]: time="2025-09-09T00:39:09Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 9 00:39:09.123966 /usr/lib/systemd/system-generators/torcx-generator[1112]: time="2025-09-09T00:39:09Z" level=info msg="torcx already run" Sep 9 00:39:09.181790 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 9 00:39:09.181812 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 9 00:39:09.196855 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 9 00:39:09.237000 audit: BPF prog-id=30 op=LOAD Sep 9 00:39:09.237000 audit: BPF prog-id=31 op=LOAD Sep 9 00:39:09.237000 audit: BPF prog-id=24 op=UNLOAD Sep 9 00:39:09.237000 audit: BPF prog-id=25 op=UNLOAD Sep 9 00:39:09.238000 audit: BPF prog-id=32 op=LOAD Sep 9 00:39:09.238000 audit: BPF prog-id=26 op=UNLOAD Sep 9 00:39:09.238000 audit: BPF prog-id=33 op=LOAD Sep 9 00:39:09.238000 audit: BPF prog-id=27 op=UNLOAD Sep 9 00:39:09.238000 audit: BPF prog-id=34 op=LOAD Sep 9 00:39:09.238000 audit: BPF prog-id=35 op=LOAD Sep 9 00:39:09.238000 audit: BPF prog-id=28 op=UNLOAD Sep 9 00:39:09.238000 audit: BPF prog-id=29 op=UNLOAD Sep 9 00:39:09.239000 audit: BPF prog-id=36 op=LOAD Sep 9 00:39:09.239000 audit: BPF prog-id=21 op=UNLOAD Sep 9 00:39:09.239000 audit: BPF prog-id=37 op=LOAD Sep 9 00:39:09.239000 audit: BPF prog-id=38 op=LOAD Sep 9 00:39:09.239000 audit: BPF prog-id=22 op=UNLOAD Sep 9 00:39:09.239000 audit: BPF prog-id=23 op=UNLOAD Sep 9 00:39:09.243721 systemd[1]: Finished systemd-tmpfiles-setup.service. Sep 9 00:39:09.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:09.247874 systemd[1]: Starting audit-rules.service... Sep 9 00:39:09.249681 systemd[1]: Starting clean-ca-certificates.service... Sep 9 00:39:09.252000 audit: BPF prog-id=39 op=LOAD Sep 9 00:39:09.251628 systemd[1]: Starting systemd-journal-catalog-update.service... Sep 9 00:39:09.255213 systemd[1]: Starting systemd-resolved.service... Sep 9 00:39:09.255000 audit: BPF prog-id=40 op=LOAD Sep 9 00:39:09.257484 systemd[1]: Starting systemd-timesyncd.service... Sep 9 00:39:09.259373 systemd[1]: Starting systemd-update-utmp.service... Sep 9 00:39:09.260698 systemd[1]: Finished clean-ca-certificates.service. Sep 9 00:39:09.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:09.262000 audit[1163]: SYSTEM_BOOT pid=1163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Sep 9 00:39:09.266549 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 9 00:39:09.267932 systemd[1]: Starting modprobe@dm_mod.service... Sep 9 00:39:09.269730 systemd[1]: Starting modprobe@efi_pstore.service... Sep 9 00:39:09.271613 systemd[1]: Starting modprobe@loop.service... Sep 9 00:39:09.272377 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 9 00:39:09.272557 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 9 00:39:09.272689 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 9 00:39:09.273829 systemd[1]: Finished systemd-journal-catalog-update.service. Sep 9 00:39:09.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:09.275310 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 9 00:39:09.275421 systemd[1]: Finished modprobe@dm_mod.service. Sep 9 00:39:09.275000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:09.275000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:09.276506 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 9 00:39:09.276613 systemd[1]: Finished modprobe@efi_pstore.service. Sep 9 00:39:09.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:09.277000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:09.277748 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 9 00:39:09.277887 systemd[1]: Finished modprobe@loop.service. Sep 9 00:39:09.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:09.277000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:09.280539 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 9 00:39:09.281780 systemd[1]: Starting modprobe@dm_mod.service... Sep 9 00:39:09.283682 systemd[1]: Starting modprobe@efi_pstore.service... Sep 9 00:39:09.285485 systemd[1]: Starting modprobe@loop.service... Sep 9 00:39:09.286133 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 9 00:39:09.286263 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 9 00:39:09.287533 systemd[1]: Starting systemd-update-done.service... Sep 9 00:39:09.288434 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 9 00:39:09.289412 systemd[1]: Finished systemd-update-utmp.service. Sep 9 00:39:09.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:09.291000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:09.291000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:09.290591 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 9 00:39:09.290701 systemd[1]: Finished modprobe@dm_mod.service. Sep 9 00:39:09.291835 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 9 00:39:09.291970 systemd[1]: Finished modprobe@efi_pstore.service. Sep 9 00:39:09.291000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:09.291000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:09.293099 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 9 00:39:09.293214 systemd[1]: Finished modprobe@loop.service. Sep 9 00:39:09.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:09.293000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:09.294462 systemd[1]: Finished systemd-update-done.service. Sep 9 00:39:09.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:09.298360 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 9 00:39:09.299500 systemd[1]: Starting modprobe@dm_mod.service... Sep 9 00:39:09.301522 systemd[1]: Starting modprobe@drm.service... Sep 9 00:39:09.303283 systemd[1]: Starting modprobe@efi_pstore.service... Sep 9 00:39:09.305179 systemd[1]: Starting modprobe@loop.service... Sep 9 00:39:09.305930 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 9 00:39:09.306050 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 9 00:39:09.307154 systemd-timesyncd[1161]: Contacted time server 10.0.0.1:123 (10.0.0.1). Sep 9 00:39:09.307204 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 9 00:39:09.307205 systemd-timesyncd[1161]: Initial clock synchronization to Tue 2025-09-09 00:39:09.399580 UTC. Sep 9 00:39:09.308092 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 9 00:39:09.308961 systemd[1]: Started systemd-timesyncd.service. Sep 9 00:39:09.309942 systemd-resolved[1159]: Positive Trust Anchors: Sep 9 00:39:09.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:09.309957 systemd-resolved[1159]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 9 00:39:09.309987 systemd-resolved[1159]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 9 00:39:09.310509 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 9 00:39:09.310626 systemd[1]: Finished modprobe@dm_mod.service. Sep 9 00:39:09.309000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Sep 9 00:39:09.309000 audit[1177]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffdd5e4660 a2=420 a3=0 items=0 ppid=1150 pid=1177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:09.309000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Sep 9 00:39:09.311641 augenrules[1177]: No rules Sep 9 00:39:09.312009 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 9 00:39:09.312117 systemd[1]: Finished modprobe@drm.service. Sep 9 00:39:09.313387 systemd[1]: Finished audit-rules.service. Sep 9 00:39:09.314573 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 9 00:39:09.314682 systemd[1]: Finished modprobe@efi_pstore.service. Sep 9 00:39:09.316048 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 9 00:39:09.316155 systemd[1]: Finished modprobe@loop.service. Sep 9 00:39:09.317488 systemd[1]: Reached target time-set.target. Sep 9 00:39:09.318347 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 9 00:39:09.318386 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 9 00:39:09.318662 systemd[1]: Finished ensure-sysext.service. Sep 9 00:39:09.319637 systemd-resolved[1159]: Defaulting to hostname 'linux'. Sep 9 00:39:09.321065 systemd[1]: Started systemd-resolved.service. Sep 9 00:39:09.321732 systemd[1]: Reached target network.target. Sep 9 00:39:09.322411 systemd[1]: Reached target nss-lookup.target. Sep 9 00:39:09.323015 systemd[1]: Reached target sysinit.target. Sep 9 00:39:09.323815 systemd[1]: Started motdgen.path. Sep 9 00:39:09.324588 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Sep 9 00:39:09.325859 systemd[1]: Started logrotate.timer. Sep 9 00:39:09.326840 systemd[1]: Started mdadm.timer. Sep 9 00:39:09.327461 systemd[1]: Started systemd-tmpfiles-clean.timer. Sep 9 00:39:09.328300 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Sep 9 00:39:09.328326 systemd[1]: Reached target paths.target. Sep 9 00:39:09.328874 systemd[1]: Reached target timers.target. Sep 9 00:39:09.329979 systemd[1]: Listening on dbus.socket. Sep 9 00:39:09.331418 systemd[1]: Starting docker.socket... Sep 9 00:39:09.334415 systemd[1]: Listening on sshd.socket. Sep 9 00:39:09.335100 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 9 00:39:09.335527 systemd[1]: Listening on docker.socket. Sep 9 00:39:09.336368 systemd[1]: Reached target sockets.target. Sep 9 00:39:09.336969 systemd[1]: Reached target basic.target. Sep 9 00:39:09.337588 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 9 00:39:09.337616 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 9 00:39:09.338573 systemd[1]: Starting containerd.service... Sep 9 00:39:09.340321 systemd[1]: Starting dbus.service... Sep 9 00:39:09.341966 systemd[1]: Starting enable-oem-cloudinit.service... Sep 9 00:39:09.343735 systemd[1]: Starting extend-filesystems.service... Sep 9 00:39:09.344712 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Sep 9 00:39:09.345736 systemd[1]: Starting motdgen.service... Sep 9 00:39:09.346136 jq[1192]: false Sep 9 00:39:09.347532 systemd[1]: Starting prepare-helm.service... Sep 9 00:39:09.349316 systemd[1]: Starting ssh-key-proc-cmdline.service... Sep 9 00:39:09.351251 systemd[1]: Starting sshd-keygen.service... Sep 9 00:39:09.356490 systemd[1]: Starting systemd-logind.service... Sep 9 00:39:09.357287 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 9 00:39:09.357365 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Sep 9 00:39:09.357966 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Sep 9 00:39:09.358658 systemd[1]: Starting update-engine.service... Sep 9 00:39:09.360850 systemd[1]: Starting update-ssh-keys-after-ignition.service... Sep 9 00:39:09.363520 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Sep 9 00:39:09.363707 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Sep 9 00:39:09.364972 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Sep 9 00:39:09.365135 systemd[1]: Finished ssh-key-proc-cmdline.service. Sep 9 00:39:09.367937 jq[1210]: true Sep 9 00:39:09.372186 extend-filesystems[1193]: Found loop1 Sep 9 00:39:09.373119 extend-filesystems[1193]: Found vda Sep 9 00:39:09.373119 extend-filesystems[1193]: Found vda1 Sep 9 00:39:09.373119 extend-filesystems[1193]: Found vda2 Sep 9 00:39:09.373119 extend-filesystems[1193]: Found vda3 Sep 9 00:39:09.375819 tar[1213]: linux-arm64/LICENSE Sep 9 00:39:09.375819 tar[1213]: linux-arm64/helm Sep 9 00:39:09.376062 extend-filesystems[1193]: Found usr Sep 9 00:39:09.376062 extend-filesystems[1193]: Found vda4 Sep 9 00:39:09.376062 extend-filesystems[1193]: Found vda6 Sep 9 00:39:09.376062 extend-filesystems[1193]: Found vda7 Sep 9 00:39:09.376062 extend-filesystems[1193]: Found vda9 Sep 9 00:39:09.376062 extend-filesystems[1193]: Checking size of /dev/vda9 Sep 9 00:39:09.381372 systemd[1]: motdgen.service: Deactivated successfully. Sep 9 00:39:09.381538 systemd[1]: Finished motdgen.service. Sep 9 00:39:09.383824 jq[1214]: true Sep 9 00:39:09.382840 systemd[1]: Started dbus.service. Sep 9 00:39:09.382687 dbus-daemon[1191]: [system] SELinux support is enabled Sep 9 00:39:09.385434 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Sep 9 00:39:09.385461 systemd[1]: Reached target system-config.target. Sep 9 00:39:09.386237 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Sep 9 00:39:09.386259 systemd[1]: Reached target user-config.target. Sep 9 00:39:09.397349 extend-filesystems[1193]: Resized partition /dev/vda9 Sep 9 00:39:09.399411 extend-filesystems[1234]: resize2fs 1.46.5 (30-Dec-2021) Sep 9 00:39:09.411010 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Sep 9 00:39:09.423724 update_engine[1207]: I0909 00:39:09.423355 1207 main.cc:92] Flatcar Update Engine starting Sep 9 00:39:09.429199 update_engine[1207]: I0909 00:39:09.428323 1207 update_check_scheduler.cc:74] Next update check in 9m30s Sep 9 00:39:09.427629 systemd[1]: Started update-engine.service. Sep 9 00:39:09.429059 systemd-logind[1205]: Watching system buttons on /dev/input/event0 (Power Button) Sep 9 00:39:09.429328 systemd-logind[1205]: New seat seat0. Sep 9 00:39:09.430495 systemd[1]: Started locksmithd.service. Sep 9 00:39:09.434544 systemd[1]: Started systemd-logind.service. Sep 9 00:39:09.437990 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Sep 9 00:39:09.451541 bash[1241]: Updated "/home/core/.ssh/authorized_keys" Sep 9 00:39:09.440163 systemd[1]: Finished update-ssh-keys-after-ignition.service. Sep 9 00:39:09.451743 extend-filesystems[1234]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Sep 9 00:39:09.451743 extend-filesystems[1234]: old_desc_blocks = 1, new_desc_blocks = 1 Sep 9 00:39:09.451743 extend-filesystems[1234]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Sep 9 00:39:09.457031 extend-filesystems[1193]: Resized filesystem in /dev/vda9 Sep 9 00:39:09.457565 systemd[1]: extend-filesystems.service: Deactivated successfully. Sep 9 00:39:09.457725 systemd[1]: Finished extend-filesystems.service. Sep 9 00:39:09.475921 env[1216]: time="2025-09-09T00:39:09.475858320Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Sep 9 00:39:09.494071 env[1216]: time="2025-09-09T00:39:09.494028280Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Sep 9 00:39:09.494417 env[1216]: time="2025-09-09T00:39:09.494335760Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Sep 9 00:39:09.497064 locksmithd[1244]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Sep 9 00:39:09.497302 env[1216]: time="2025-09-09T00:39:09.497262000Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.191-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Sep 9 00:39:09.497302 env[1216]: time="2025-09-09T00:39:09.497298920Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Sep 9 00:39:09.497658 env[1216]: time="2025-09-09T00:39:09.497628800Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 9 00:39:09.497725 env[1216]: time="2025-09-09T00:39:09.497706920Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Sep 9 00:39:09.497753 env[1216]: time="2025-09-09T00:39:09.497728560Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Sep 9 00:39:09.497753 env[1216]: time="2025-09-09T00:39:09.497739440Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Sep 9 00:39:09.497838 env[1216]: time="2025-09-09T00:39:09.497820800Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Sep 9 00:39:09.498239 env[1216]: time="2025-09-09T00:39:09.498197560Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Sep 9 00:39:09.498428 env[1216]: time="2025-09-09T00:39:09.498400240Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 9 00:39:09.498470 env[1216]: time="2025-09-09T00:39:09.498425880Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Sep 9 00:39:09.498564 env[1216]: time="2025-09-09T00:39:09.498540520Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Sep 9 00:39:09.498593 env[1216]: time="2025-09-09T00:39:09.498562320Z" level=info msg="metadata content store policy set" policy=shared Sep 9 00:39:09.502492 env[1216]: time="2025-09-09T00:39:09.502462640Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Sep 9 00:39:09.502526 env[1216]: time="2025-09-09T00:39:09.502497800Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Sep 9 00:39:09.502526 env[1216]: time="2025-09-09T00:39:09.502510840Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Sep 9 00:39:09.502564 env[1216]: time="2025-09-09T00:39:09.502541360Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Sep 9 00:39:09.502630 env[1216]: time="2025-09-09T00:39:09.502610680Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Sep 9 00:39:09.502662 env[1216]: time="2025-09-09T00:39:09.502638920Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Sep 9 00:39:09.502662 env[1216]: time="2025-09-09T00:39:09.502652400Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Sep 9 00:39:09.503223 env[1216]: time="2025-09-09T00:39:09.503192600Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Sep 9 00:39:09.503253 env[1216]: time="2025-09-09T00:39:09.503230360Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Sep 9 00:39:09.503322 env[1216]: time="2025-09-09T00:39:09.503249000Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Sep 9 00:39:09.503348 env[1216]: time="2025-09-09T00:39:09.503328000Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Sep 9 00:39:09.503348 env[1216]: time="2025-09-09T00:39:09.503342840Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Sep 9 00:39:09.503520 env[1216]: time="2025-09-09T00:39:09.503443240Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Sep 9 00:39:09.503614 env[1216]: time="2025-09-09T00:39:09.503594840Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Sep 9 00:39:09.503979 env[1216]: time="2025-09-09T00:39:09.503956800Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Sep 9 00:39:09.504010 env[1216]: time="2025-09-09T00:39:09.503993240Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Sep 9 00:39:09.504091 env[1216]: time="2025-09-09T00:39:09.504006520Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Sep 9 00:39:09.504205 env[1216]: time="2025-09-09T00:39:09.504189080Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Sep 9 00:39:09.504232 env[1216]: time="2025-09-09T00:39:09.504208760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Sep 9 00:39:09.504307 env[1216]: time="2025-09-09T00:39:09.504289360Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Sep 9 00:39:09.504344 env[1216]: time="2025-09-09T00:39:09.504310520Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Sep 9 00:39:09.504344 env[1216]: time="2025-09-09T00:39:09.504323800Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Sep 9 00:39:09.504386 env[1216]: time="2025-09-09T00:39:09.504345240Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Sep 9 00:39:09.504386 env[1216]: time="2025-09-09T00:39:09.504356680Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Sep 9 00:39:09.504386 env[1216]: time="2025-09-09T00:39:09.504367920Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Sep 9 00:39:09.504386 env[1216]: time="2025-09-09T00:39:09.504380640Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Sep 9 00:39:09.504700 env[1216]: time="2025-09-09T00:39:09.504674840Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Sep 9 00:39:09.504726 env[1216]: time="2025-09-09T00:39:09.504709520Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Sep 9 00:39:09.504750 env[1216]: time="2025-09-09T00:39:09.504724360Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Sep 9 00:39:09.504750 env[1216]: time="2025-09-09T00:39:09.504736560Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Sep 9 00:39:09.504791 env[1216]: time="2025-09-09T00:39:09.504749880Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Sep 9 00:39:09.504835 env[1216]: time="2025-09-09T00:39:09.504760600Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Sep 9 00:39:09.504868 env[1216]: time="2025-09-09T00:39:09.504844920Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Sep 9 00:39:09.504909 env[1216]: time="2025-09-09T00:39:09.504893840Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Sep 9 00:39:09.505278 env[1216]: time="2025-09-09T00:39:09.505223480Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Sep 9 00:39:09.505823 env[1216]: time="2025-09-09T00:39:09.505290000Z" level=info msg="Connect containerd service" Sep 9 00:39:09.505823 env[1216]: time="2025-09-09T00:39:09.505392640Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Sep 9 00:39:09.506367 env[1216]: time="2025-09-09T00:39:09.506337560Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 9 00:39:09.506688 env[1216]: time="2025-09-09T00:39:09.506595520Z" level=info msg="Start subscribing containerd event" Sep 9 00:39:09.506938 env[1216]: time="2025-09-09T00:39:09.506903160Z" level=info msg="Start recovering state" Sep 9 00:39:09.507021 env[1216]: time="2025-09-09T00:39:09.506999360Z" level=info msg="Start event monitor" Sep 9 00:39:09.508901 env[1216]: time="2025-09-09T00:39:09.508692920Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Sep 9 00:39:09.508973 env[1216]: time="2025-09-09T00:39:09.508956760Z" level=info msg=serving... address=/run/containerd/containerd.sock Sep 9 00:39:09.509085 systemd[1]: Started containerd.service. Sep 9 00:39:09.509610 env[1216]: time="2025-09-09T00:39:09.509588560Z" level=info msg="containerd successfully booted in 0.034812s" Sep 9 00:39:09.509644 env[1216]: time="2025-09-09T00:39:09.509581720Z" level=info msg="Start snapshots syncer" Sep 9 00:39:09.514212 env[1216]: time="2025-09-09T00:39:09.509631920Z" level=info msg="Start cni network conf syncer for default" Sep 9 00:39:09.514245 env[1216]: time="2025-09-09T00:39:09.514212680Z" level=info msg="Start streaming server" Sep 9 00:39:09.787907 tar[1213]: linux-arm64/README.md Sep 9 00:39:09.792355 systemd[1]: Finished prepare-helm.service. Sep 9 00:39:10.538264 systemd-networkd[1042]: eth0: Gained IPv6LL Sep 9 00:39:10.539877 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 9 00:39:10.541046 systemd[1]: Reached target network-online.target. Sep 9 00:39:10.543553 systemd[1]: Starting kubelet.service... Sep 9 00:39:11.131438 systemd[1]: Started kubelet.service. Sep 9 00:39:11.504460 kubelet[1260]: E0909 00:39:11.504276 1260 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 9 00:39:11.506042 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 9 00:39:11.506169 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 9 00:39:13.074471 sshd_keygen[1211]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Sep 9 00:39:13.092079 systemd[1]: Finished sshd-keygen.service. Sep 9 00:39:13.094199 systemd[1]: Starting issuegen.service... Sep 9 00:39:13.098515 systemd[1]: issuegen.service: Deactivated successfully. Sep 9 00:39:13.098657 systemd[1]: Finished issuegen.service. Sep 9 00:39:13.100689 systemd[1]: Starting systemd-user-sessions.service... Sep 9 00:39:13.106251 systemd[1]: Finished systemd-user-sessions.service. Sep 9 00:39:13.108208 systemd[1]: Started getty@tty1.service. Sep 9 00:39:13.110010 systemd[1]: Started serial-getty@ttyAMA0.service. Sep 9 00:39:13.110834 systemd[1]: Reached target getty.target. Sep 9 00:39:13.111654 systemd[1]: Reached target multi-user.target. Sep 9 00:39:13.113469 systemd[1]: Starting systemd-update-utmp-runlevel.service... Sep 9 00:39:13.119704 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Sep 9 00:39:13.119844 systemd[1]: Finished systemd-update-utmp-runlevel.service. Sep 9 00:39:13.120786 systemd[1]: Startup finished in 543ms (kernel) + 5.600s (initrd) + 6.967s (userspace) = 13.112s. Sep 9 00:39:13.134161 systemd[1]: Created slice system-sshd.slice. Sep 9 00:39:13.135223 systemd[1]: Started sshd@0-10.0.0.102:22-10.0.0.1:49002.service. Sep 9 00:39:13.176140 sshd[1282]: Accepted publickey for core from 10.0.0.1 port 49002 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:39:13.178528 sshd[1282]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:39:13.186253 systemd[1]: Created slice user-500.slice. Sep 9 00:39:13.187377 systemd[1]: Starting user-runtime-dir@500.service... Sep 9 00:39:13.189978 systemd-logind[1205]: New session 1 of user core. Sep 9 00:39:13.195137 systemd[1]: Finished user-runtime-dir@500.service. Sep 9 00:39:13.196397 systemd[1]: Starting user@500.service... Sep 9 00:39:13.200298 (systemd)[1285]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:39:13.265434 systemd[1285]: Queued start job for default target default.target. Sep 9 00:39:13.265911 systemd[1285]: Reached target paths.target. Sep 9 00:39:13.265960 systemd[1285]: Reached target sockets.target. Sep 9 00:39:13.265972 systemd[1285]: Reached target timers.target. Sep 9 00:39:13.265984 systemd[1285]: Reached target basic.target. Sep 9 00:39:13.266027 systemd[1285]: Reached target default.target. Sep 9 00:39:13.266050 systemd[1285]: Startup finished in 59ms. Sep 9 00:39:13.266278 systemd[1]: Started user@500.service. Sep 9 00:39:13.267247 systemd[1]: Started session-1.scope. Sep 9 00:39:13.318205 systemd[1]: Started sshd@1-10.0.0.102:22-10.0.0.1:49010.service. Sep 9 00:39:13.363816 sshd[1294]: Accepted publickey for core from 10.0.0.1 port 49010 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:39:13.365450 sshd[1294]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:39:13.369893 systemd[1]: Started session-2.scope. Sep 9 00:39:13.370108 systemd-logind[1205]: New session 2 of user core. Sep 9 00:39:13.424792 sshd[1294]: pam_unix(sshd:session): session closed for user core Sep 9 00:39:13.427501 systemd[1]: sshd@1-10.0.0.102:22-10.0.0.1:49010.service: Deactivated successfully. Sep 9 00:39:13.428123 systemd[1]: session-2.scope: Deactivated successfully. Sep 9 00:39:13.428626 systemd-logind[1205]: Session 2 logged out. Waiting for processes to exit. Sep 9 00:39:13.429697 systemd[1]: Started sshd@2-10.0.0.102:22-10.0.0.1:49022.service. Sep 9 00:39:13.430422 systemd-logind[1205]: Removed session 2. Sep 9 00:39:13.470648 sshd[1300]: Accepted publickey for core from 10.0.0.1 port 49022 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:39:13.471906 sshd[1300]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:39:13.475235 systemd-logind[1205]: New session 3 of user core. Sep 9 00:39:13.476096 systemd[1]: Started session-3.scope. Sep 9 00:39:13.526992 sshd[1300]: pam_unix(sshd:session): session closed for user core Sep 9 00:39:13.529683 systemd[1]: sshd@2-10.0.0.102:22-10.0.0.1:49022.service: Deactivated successfully. Sep 9 00:39:13.530257 systemd[1]: session-3.scope: Deactivated successfully. Sep 9 00:39:13.530772 systemd-logind[1205]: Session 3 logged out. Waiting for processes to exit. Sep 9 00:39:13.531790 systemd[1]: Started sshd@3-10.0.0.102:22-10.0.0.1:49034.service. Sep 9 00:39:13.532450 systemd-logind[1205]: Removed session 3. Sep 9 00:39:13.568939 sshd[1306]: Accepted publickey for core from 10.0.0.1 port 49034 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:39:13.570520 sshd[1306]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:39:13.573909 systemd-logind[1205]: New session 4 of user core. Sep 9 00:39:13.574736 systemd[1]: Started session-4.scope. Sep 9 00:39:13.629580 sshd[1306]: pam_unix(sshd:session): session closed for user core Sep 9 00:39:13.634000 systemd[1]: sshd@3-10.0.0.102:22-10.0.0.1:49034.service: Deactivated successfully. Sep 9 00:39:13.634574 systemd[1]: session-4.scope: Deactivated successfully. Sep 9 00:39:13.635081 systemd-logind[1205]: Session 4 logged out. Waiting for processes to exit. Sep 9 00:39:13.636177 systemd[1]: Started sshd@4-10.0.0.102:22-10.0.0.1:49048.service. Sep 9 00:39:13.636913 systemd-logind[1205]: Removed session 4. Sep 9 00:39:13.675007 sshd[1313]: Accepted publickey for core from 10.0.0.1 port 49048 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:39:13.676303 sshd[1313]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:39:13.680858 systemd-logind[1205]: New session 5 of user core. Sep 9 00:39:13.681753 systemd[1]: Started session-5.scope. Sep 9 00:39:13.739564 sudo[1316]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Sep 9 00:39:13.739806 sudo[1316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 9 00:39:13.759120 dbus-daemon[1191]: avc: received setenforce notice (enforcing=1) Sep 9 00:39:13.760857 sudo[1316]: pam_unix(sudo:session): session closed for user root Sep 9 00:39:13.762876 sshd[1313]: pam_unix(sshd:session): session closed for user core Sep 9 00:39:13.766492 systemd[1]: sshd@4-10.0.0.102:22-10.0.0.1:49048.service: Deactivated successfully. Sep 9 00:39:13.767059 systemd[1]: session-5.scope: Deactivated successfully. Sep 9 00:39:13.767563 systemd-logind[1205]: Session 5 logged out. Waiting for processes to exit. Sep 9 00:39:13.768643 systemd[1]: Started sshd@5-10.0.0.102:22-10.0.0.1:49062.service. Sep 9 00:39:13.769251 systemd-logind[1205]: Removed session 5. Sep 9 00:39:13.806982 sshd[1320]: Accepted publickey for core from 10.0.0.1 port 49062 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:39:13.808324 sshd[1320]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:39:13.812029 systemd-logind[1205]: New session 6 of user core. Sep 9 00:39:13.812871 systemd[1]: Started session-6.scope. Sep 9 00:39:13.866140 sudo[1324]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Sep 9 00:39:13.866361 sudo[1324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 9 00:39:13.869092 sudo[1324]: pam_unix(sudo:session): session closed for user root Sep 9 00:39:13.873106 sudo[1323]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Sep 9 00:39:13.873317 sudo[1323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 9 00:39:13.881411 systemd[1]: Stopping audit-rules.service... Sep 9 00:39:13.880000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 9 00:39:13.882800 auditctl[1327]: No rules Sep 9 00:39:13.882916 systemd[1]: audit-rules.service: Deactivated successfully. Sep 9 00:39:13.883073 systemd[1]: Stopped audit-rules.service. Sep 9 00:39:13.883161 kernel: kauditd_printk_skb: 174 callbacks suppressed Sep 9 00:39:13.883188 kernel: audit: type=1305 audit(1757378353.880:207): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 9 00:39:13.884404 systemd[1]: Starting audit-rules.service... Sep 9 00:39:13.880000 audit[1327]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffcc28e2c0 a2=420 a3=0 items=0 ppid=1 pid=1327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:13.887491 kernel: audit: type=1300 audit(1757378353.880:207): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffcc28e2c0 a2=420 a3=0 items=0 ppid=1 pid=1327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:13.887549 kernel: audit: type=1327 audit(1757378353.880:207): proctitle=2F7362696E2F617564697463746C002D44 Sep 9 00:39:13.880000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Sep 9 00:39:13.888405 kernel: audit: type=1131 audit(1757378353.881:208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:13.881000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:13.899274 augenrules[1344]: No rules Sep 9 00:39:13.899856 systemd[1]: Finished audit-rules.service. Sep 9 00:39:13.899000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:13.901003 sudo[1323]: pam_unix(sudo:session): session closed for user root Sep 9 00:39:13.900000 audit[1323]: USER_END pid=1323 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 9 00:39:13.904892 kernel: audit: type=1130 audit(1757378353.899:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:13.905376 kernel: audit: type=1106 audit(1757378353.900:210): pid=1323 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 9 00:39:13.905398 kernel: audit: type=1104 audit(1757378353.900:211): pid=1323 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 9 00:39:13.900000 audit[1323]: CRED_DISP pid=1323 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 9 00:39:13.905103 sshd[1320]: pam_unix(sshd:session): session closed for user core Sep 9 00:39:13.908350 systemd[1]: Started sshd@6-10.0.0.102:22-10.0.0.1:49064.service. Sep 9 00:39:13.907000 audit[1320]: USER_END pid=1320 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:39:13.909339 systemd[1]: sshd@5-10.0.0.102:22-10.0.0.1:49062.service: Deactivated successfully. Sep 9 00:39:13.909909 systemd[1]: session-6.scope: Deactivated successfully. Sep 9 00:39:13.910419 systemd-logind[1205]: Session 6 logged out. Waiting for processes to exit. Sep 9 00:39:13.911051 systemd-logind[1205]: Removed session 6. Sep 9 00:39:13.907000 audit[1320]: CRED_DISP pid=1320 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:39:13.914542 kernel: audit: type=1106 audit(1757378353.907:212): pid=1320 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:39:13.914596 kernel: audit: type=1104 audit(1757378353.907:213): pid=1320 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:39:13.914630 kernel: audit: type=1130 audit(1757378353.907:214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.102:22-10.0.0.1:49064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:13.907000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.102:22-10.0.0.1:49064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:13.908000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.102:22-10.0.0.1:49062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:13.945000 audit[1349]: USER_ACCT pid=1349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:39:13.946734 sshd[1349]: Accepted publickey for core from 10.0.0.1 port 49064 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:39:13.946000 audit[1349]: CRED_ACQ pid=1349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:39:13.946000 audit[1349]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5b62e20 a2=3 a3=1 items=0 ppid=1 pid=1349 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:13.946000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 9 00:39:13.947630 sshd[1349]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:39:13.950769 systemd-logind[1205]: New session 7 of user core. Sep 9 00:39:13.951547 systemd[1]: Started session-7.scope. Sep 9 00:39:13.953000 audit[1349]: USER_START pid=1349 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:39:13.954000 audit[1352]: CRED_ACQ pid=1352 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:39:14.002000 audit[1353]: USER_ACCT pid=1353 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 9 00:39:14.003614 sudo[1353]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Sep 9 00:39:14.002000 audit[1353]: CRED_REFR pid=1353 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 9 00:39:14.004131 sudo[1353]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 9 00:39:14.003000 audit[1353]: USER_START pid=1353 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 9 00:39:14.041939 systemd[1]: Starting docker.service... Sep 9 00:39:14.097860 env[1365]: time="2025-09-09T00:39:14.097808720Z" level=info msg="Starting up" Sep 9 00:39:14.099465 env[1365]: time="2025-09-09T00:39:14.099437686Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 9 00:39:14.099465 env[1365]: time="2025-09-09T00:39:14.099461446Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 9 00:39:14.099536 env[1365]: time="2025-09-09T00:39:14.099481099Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 9 00:39:14.099536 env[1365]: time="2025-09-09T00:39:14.099491851Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 9 00:39:14.101371 env[1365]: time="2025-09-09T00:39:14.101349920Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 9 00:39:14.101500 env[1365]: time="2025-09-09T00:39:14.101483016Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 9 00:39:14.101580 env[1365]: time="2025-09-09T00:39:14.101565531Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 9 00:39:14.101644 env[1365]: time="2025-09-09T00:39:14.101620783Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 9 00:39:14.294139 env[1365]: time="2025-09-09T00:39:14.293035478Z" level=info msg="Loading containers: start." Sep 9 00:39:14.337000 audit[1399]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1399 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.337000 audit[1399]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffe57958a0 a2=0 a3=1 items=0 ppid=1365 pid=1399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.337000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Sep 9 00:39:14.339000 audit[1401]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1401 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.339000 audit[1401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffd7f4ad50 a2=0 a3=1 items=0 ppid=1365 pid=1401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.339000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Sep 9 00:39:14.341000 audit[1403]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.341000 audit[1403]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffab1e910 a2=0 a3=1 items=0 ppid=1365 pid=1403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.341000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 9 00:39:14.342000 audit[1405]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.342000 audit[1405]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe46cea60 a2=0 a3=1 items=0 ppid=1365 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.342000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 9 00:39:14.344000 audit[1407]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.344000 audit[1407]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffce1e9090 a2=0 a3=1 items=0 ppid=1365 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.344000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Sep 9 00:39:14.371000 audit[1412]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1412 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.371000 audit[1412]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff756f8e0 a2=0 a3=1 items=0 ppid=1365 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.371000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Sep 9 00:39:14.377000 audit[1414]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1414 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.377000 audit[1414]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffeec8bab0 a2=0 a3=1 items=0 ppid=1365 pid=1414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.377000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Sep 9 00:39:14.379000 audit[1416]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1416 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.379000 audit[1416]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffe1a18dc0 a2=0 a3=1 items=0 ppid=1365 pid=1416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.379000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Sep 9 00:39:14.381000 audit[1418]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.381000 audit[1418]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=fffff0d40640 a2=0 a3=1 items=0 ppid=1365 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.381000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 9 00:39:14.388000 audit[1422]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1422 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.388000 audit[1422]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff4dba890 a2=0 a3=1 items=0 ppid=1365 pid=1422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.388000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 9 00:39:14.398000 audit[1423]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1423 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.398000 audit[1423]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff8fb6160 a2=0 a3=1 items=0 ppid=1365 pid=1423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.398000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 9 00:39:14.408958 kernel: Initializing XFRM netlink socket Sep 9 00:39:14.430776 env[1365]: time="2025-09-09T00:39:14.430721670Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Sep 9 00:39:14.445000 audit[1431]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1431 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.445000 audit[1431]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffda0c3f60 a2=0 a3=1 items=0 ppid=1365 pid=1431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.445000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Sep 9 00:39:14.458000 audit[1434]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.458000 audit[1434]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=fffffd3af9c0 a2=0 a3=1 items=0 ppid=1365 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.458000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Sep 9 00:39:14.462000 audit[1437]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.462000 audit[1437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff183b750 a2=0 a3=1 items=0 ppid=1365 pid=1437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.462000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Sep 9 00:39:14.464000 audit[1439]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1439 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.464000 audit[1439]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffeedd3a00 a2=0 a3=1 items=0 ppid=1365 pid=1439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.464000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Sep 9 00:39:14.466000 audit[1441]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.466000 audit[1441]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffe6dc33e0 a2=0 a3=1 items=0 ppid=1365 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.466000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Sep 9 00:39:14.467000 audit[1443]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.467000 audit[1443]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffec966860 a2=0 a3=1 items=0 ppid=1365 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.467000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Sep 9 00:39:14.469000 audit[1445]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.469000 audit[1445]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffd4067d30 a2=0 a3=1 items=0 ppid=1365 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.469000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Sep 9 00:39:14.476000 audit[1448]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.476000 audit[1448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffca8c5c30 a2=0 a3=1 items=0 ppid=1365 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.476000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Sep 9 00:39:14.477000 audit[1450]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1450 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.477000 audit[1450]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffc8e7d810 a2=0 a3=1 items=0 ppid=1365 pid=1450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.477000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 9 00:39:14.479000 audit[1452]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1452 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.479000 audit[1452]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffc4804ba0 a2=0 a3=1 items=0 ppid=1365 pid=1452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.479000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 9 00:39:14.481000 audit[1454]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1454 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.481000 audit[1454]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc897bab0 a2=0 a3=1 items=0 ppid=1365 pid=1454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.481000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Sep 9 00:39:14.482581 systemd-networkd[1042]: docker0: Link UP Sep 9 00:39:14.489000 audit[1458]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1458 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.489000 audit[1458]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc7565ca0 a2=0 a3=1 items=0 ppid=1365 pid=1458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.489000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 9 00:39:14.498000 audit[1459]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1459 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:14.498000 audit[1459]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffccaf4800 a2=0 a3=1 items=0 ppid=1365 pid=1459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:14.498000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 9 00:39:14.500209 env[1365]: time="2025-09-09T00:39:14.500168349Z" level=info msg="Loading containers: done." Sep 9 00:39:14.513590 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck196060171-merged.mount: Deactivated successfully. Sep 9 00:39:14.518655 env[1365]: time="2025-09-09T00:39:14.518609657Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Sep 9 00:39:14.518801 env[1365]: time="2025-09-09T00:39:14.518781293Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Sep 9 00:39:14.518892 env[1365]: time="2025-09-09T00:39:14.518877903Z" level=info msg="Daemon has completed initialization" Sep 9 00:39:14.535000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:14.536468 systemd[1]: Started docker.service. Sep 9 00:39:14.538078 env[1365]: time="2025-09-09T00:39:14.537964032Z" level=info msg="API listen on /run/docker.sock" Sep 9 00:39:15.155311 env[1216]: time="2025-09-09T00:39:15.155256646Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.8\"" Sep 9 00:39:15.727461 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3638760218.mount: Deactivated successfully. Sep 9 00:39:17.220354 env[1216]: time="2025-09-09T00:39:17.220298357Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:17.221632 env[1216]: time="2025-09-09T00:39:17.221599920Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:61d628eec7e2101b908b4476f1e8e620490a9e8754184860c8eed25183acaa8a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:17.223259 env[1216]: time="2025-09-09T00:39:17.223228039Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:17.225726 env[1216]: time="2025-09-09T00:39:17.225684542Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6e1a2f9b24f69ee77d0c0edaf32b31fdbb5e1a613f4476272197e6e1e239050b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:17.226578 env[1216]: time="2025-09-09T00:39:17.226518351Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.8\" returns image reference \"sha256:61d628eec7e2101b908b4476f1e8e620490a9e8754184860c8eed25183acaa8a\"" Sep 9 00:39:17.227225 env[1216]: time="2025-09-09T00:39:17.227190991Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.8\"" Sep 9 00:39:18.641340 env[1216]: time="2025-09-09T00:39:18.641281118Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:18.642574 env[1216]: time="2025-09-09T00:39:18.642529859Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f17de36e40fc7cc372be0021b2c58ad61f05d3ebe4d430551bc5e4cd9ed2a061,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:18.644765 env[1216]: time="2025-09-09T00:39:18.644735548Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:18.646510 env[1216]: time="2025-09-09T00:39:18.646469047Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:8788ccd28ceed9e2e5f8fc31375ef5771df8ea6e518b362c9a06f3cc709cd6c7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:18.647430 env[1216]: time="2025-09-09T00:39:18.647398285Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.8\" returns image reference \"sha256:f17de36e40fc7cc372be0021b2c58ad61f05d3ebe4d430551bc5e4cd9ed2a061\"" Sep 9 00:39:18.648020 env[1216]: time="2025-09-09T00:39:18.647988099Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.8\"" Sep 9 00:39:20.046154 env[1216]: time="2025-09-09T00:39:20.046103526Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:20.051330 env[1216]: time="2025-09-09T00:39:20.051292863Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fe86d26bce3ccd5f0c4057c205b63fde1c8c752778025aea4605ffc3b0f80211,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:20.053178 env[1216]: time="2025-09-09T00:39:20.053148891Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:20.055241 env[1216]: time="2025-09-09T00:39:20.055218648Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:43c58bcbd1c7812dd19f8bfa5ae11093ebefd28699453ce86fc710869e155cd4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:20.055932 env[1216]: time="2025-09-09T00:39:20.055891649Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.8\" returns image reference \"sha256:fe86d26bce3ccd5f0c4057c205b63fde1c8c752778025aea4605ffc3b0f80211\"" Sep 9 00:39:20.056384 env[1216]: time="2025-09-09T00:39:20.056329216Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.8\"" Sep 9 00:39:21.100293 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2622865294.mount: Deactivated successfully. Sep 9 00:39:21.757180 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Sep 9 00:39:21.757345 systemd[1]: Stopped kubelet.service. Sep 9 00:39:21.758614 kernel: kauditd_printk_skb: 84 callbacks suppressed Sep 9 00:39:21.758702 kernel: audit: type=1130 audit(1757378361.756:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:21.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:21.758814 systemd[1]: Starting kubelet.service... Sep 9 00:39:21.756000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:21.762281 kernel: audit: type=1131 audit(1757378361.756:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:21.854588 systemd[1]: Started kubelet.service. Sep 9 00:39:21.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:21.857955 kernel: audit: type=1130 audit(1757378361.852:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:21.893458 kubelet[1499]: E0909 00:39:21.893415 1499 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 9 00:39:21.895850 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 9 00:39:21.895999 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 9 00:39:21.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 9 00:39:21.898941 kernel: audit: type=1131 audit(1757378361.895:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 9 00:39:21.930604 env[1216]: time="2025-09-09T00:39:21.930557281Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:21.932328 env[1216]: time="2025-09-09T00:39:21.932267421Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2cf30e39f99f8f4ee1a736a4f3175cc2d8d3f58936d8fa83ec5523658fdc7b8b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:21.933758 env[1216]: time="2025-09-09T00:39:21.933717871Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:21.935505 env[1216]: time="2025-09-09T00:39:21.935480750Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:adc1335b480ddd833aac3b0bd20f68ff0f3c3cf7a0bd337933b006d9f5cec40a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:21.935882 env[1216]: time="2025-09-09T00:39:21.935854502Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.8\" returns image reference \"sha256:2cf30e39f99f8f4ee1a736a4f3175cc2d8d3f58936d8fa83ec5523658fdc7b8b\"" Sep 9 00:39:21.936383 env[1216]: time="2025-09-09T00:39:21.936359122Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Sep 9 00:39:22.445860 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount54728091.mount: Deactivated successfully. Sep 9 00:39:23.365407 env[1216]: time="2025-09-09T00:39:23.365357172Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:23.367442 env[1216]: time="2025-09-09T00:39:23.367410187Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:23.369146 env[1216]: time="2025-09-09T00:39:23.369121587Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:23.371082 env[1216]: time="2025-09-09T00:39:23.371054558Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:23.371911 env[1216]: time="2025-09-09T00:39:23.371880999Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Sep 9 00:39:23.372347 env[1216]: time="2025-09-09T00:39:23.372322978Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Sep 9 00:39:23.808759 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount23152309.mount: Deactivated successfully. Sep 9 00:39:23.814052 env[1216]: time="2025-09-09T00:39:23.814007677Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:23.815712 env[1216]: time="2025-09-09T00:39:23.815679196Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:23.817472 env[1216]: time="2025-09-09T00:39:23.817446390Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:23.820182 env[1216]: time="2025-09-09T00:39:23.820152373Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:23.820650 env[1216]: time="2025-09-09T00:39:23.820594993Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Sep 9 00:39:23.821797 env[1216]: time="2025-09-09T00:39:23.821770183Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Sep 9 00:39:24.331586 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1844432104.mount: Deactivated successfully. Sep 9 00:39:27.286519 env[1216]: time="2025-09-09T00:39:27.286473400Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:27.288708 env[1216]: time="2025-09-09T00:39:27.288676708Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:27.290496 env[1216]: time="2025-09-09T00:39:27.290468086Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:27.292645 env[1216]: time="2025-09-09T00:39:27.292600069Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:27.293480 env[1216]: time="2025-09-09T00:39:27.293451966Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82\"" Sep 9 00:39:31.897312 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Sep 9 00:39:31.897971 systemd[1]: Stopped kubelet.service. Sep 9 00:39:31.896000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:31.899282 systemd[1]: Starting kubelet.service... Sep 9 00:39:31.896000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:31.902507 kernel: audit: type=1130 audit(1757378371.896:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:31.902567 kernel: audit: type=1131 audit(1757378371.896:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:31.908208 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Sep 9 00:39:31.908270 systemd[1]: kubelet.service: Failed with result 'signal'. Sep 9 00:39:31.908457 systemd[1]: Stopped kubelet.service. Sep 9 00:39:31.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 9 00:39:31.910499 systemd[1]: Starting kubelet.service... Sep 9 00:39:31.911955 kernel: audit: type=1130 audit(1757378371.906:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 9 00:39:31.933252 systemd[1]: Reloading. Sep 9 00:39:31.978450 /usr/lib/systemd/system-generators/torcx-generator[1558]: time="2025-09-09T00:39:31Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 9 00:39:31.978840 /usr/lib/systemd/system-generators/torcx-generator[1558]: time="2025-09-09T00:39:31Z" level=info msg="torcx already run" Sep 9 00:39:32.069526 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 9 00:39:32.069566 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 9 00:39:32.087133 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 9 00:39:32.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.149692 kernel: audit: type=1400 audit(1757378372.144:256): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.149764 kernel: audit: type=1400 audit(1757378372.144:257): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.149783 kernel: audit: type=1400 audit(1757378372.144:258): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.153556 kernel: audit: type=1400 audit(1757378372.144:259): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.153613 kernel: audit: type=1400 audit(1757378372.144:260): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.155473 kernel: audit: type=1400 audit(1757378372.144:261): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.157372 kernel: audit: type=1400 audit(1757378372.144:262): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.147000 audit: BPF prog-id=46 op=LOAD Sep 9 00:39:32.147000 audit: BPF prog-id=39 op=UNLOAD Sep 9 00:39:32.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.149000 audit: BPF prog-id=47 op=LOAD Sep 9 00:39:32.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.151000 audit: BPF prog-id=48 op=LOAD Sep 9 00:39:32.151000 audit: BPF prog-id=30 op=UNLOAD Sep 9 00:39:32.151000 audit: BPF prog-id=31 op=UNLOAD Sep 9 00:39:32.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.153000 audit: BPF prog-id=49 op=LOAD Sep 9 00:39:32.153000 audit: BPF prog-id=41 op=UNLOAD Sep 9 00:39:32.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.155000 audit: BPF prog-id=50 op=LOAD Sep 9 00:39:32.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.157000 audit: BPF prog-id=51 op=LOAD Sep 9 00:39:32.157000 audit: BPF prog-id=42 op=UNLOAD Sep 9 00:39:32.157000 audit: BPF prog-id=43 op=UNLOAD Sep 9 00:39:32.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit: BPF prog-id=52 op=LOAD Sep 9 00:39:32.159000 audit: BPF prog-id=40 op=UNLOAD Sep 9 00:39:32.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit: BPF prog-id=53 op=LOAD Sep 9 00:39:32.159000 audit: BPF prog-id=32 op=UNLOAD Sep 9 00:39:32.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.159000 audit: BPF prog-id=54 op=LOAD Sep 9 00:39:32.159000 audit: BPF prog-id=33 op=UNLOAD Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit: BPF prog-id=55 op=LOAD Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit: BPF prog-id=56 op=LOAD Sep 9 00:39:32.160000 audit: BPF prog-id=34 op=UNLOAD Sep 9 00:39:32.160000 audit: BPF prog-id=35 op=UNLOAD Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit: BPF prog-id=57 op=LOAD Sep 9 00:39:32.160000 audit: BPF prog-id=36 op=UNLOAD Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit: BPF prog-id=58 op=LOAD Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.160000 audit: BPF prog-id=59 op=LOAD Sep 9 00:39:32.160000 audit: BPF prog-id=37 op=UNLOAD Sep 9 00:39:32.160000 audit: BPF prog-id=38 op=UNLOAD Sep 9 00:39:32.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:32.162000 audit: BPF prog-id=60 op=LOAD Sep 9 00:39:32.162000 audit: BPF prog-id=44 op=UNLOAD Sep 9 00:39:32.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:32.174662 systemd[1]: Started kubelet.service. Sep 9 00:39:32.175859 systemd[1]: Stopping kubelet.service... Sep 9 00:39:32.176143 systemd[1]: kubelet.service: Deactivated successfully. Sep 9 00:39:32.176296 systemd[1]: Stopped kubelet.service. Sep 9 00:39:32.175000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:32.177695 systemd[1]: Starting kubelet.service... Sep 9 00:39:32.267824 systemd[1]: Started kubelet.service. Sep 9 00:39:32.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:32.304277 kubelet[1604]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 9 00:39:32.304277 kubelet[1604]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 9 00:39:32.304277 kubelet[1604]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 9 00:39:32.304876 kubelet[1604]: I0909 00:39:32.304339 1604 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 9 00:39:33.426172 kubelet[1604]: I0909 00:39:33.426134 1604 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Sep 9 00:39:33.426570 kubelet[1604]: I0909 00:39:33.426554 1604 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 9 00:39:33.426993 kubelet[1604]: I0909 00:39:33.426974 1604 server.go:954] "Client rotation is on, will bootstrap in background" Sep 9 00:39:33.446791 kubelet[1604]: E0909 00:39:33.446749 1604 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.102:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.102:6443: connect: connection refused" logger="UnhandledError" Sep 9 00:39:33.447742 kubelet[1604]: I0909 00:39:33.447709 1604 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 9 00:39:33.455826 kubelet[1604]: E0909 00:39:33.455791 1604 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 9 00:39:33.455911 kubelet[1604]: I0909 00:39:33.455824 1604 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 9 00:39:33.459996 kubelet[1604]: I0909 00:39:33.459968 1604 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 9 00:39:33.461175 kubelet[1604]: I0909 00:39:33.461104 1604 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 9 00:39:33.461400 kubelet[1604]: I0909 00:39:33.461199 1604 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 9 00:39:33.461511 kubelet[1604]: I0909 00:39:33.461472 1604 topology_manager.go:138] "Creating topology manager with none policy" Sep 9 00:39:33.461540 kubelet[1604]: I0909 00:39:33.461514 1604 container_manager_linux.go:304] "Creating device plugin manager" Sep 9 00:39:33.461742 kubelet[1604]: I0909 00:39:33.461724 1604 state_mem.go:36] "Initialized new in-memory state store" Sep 9 00:39:33.465243 kubelet[1604]: I0909 00:39:33.465214 1604 kubelet.go:446] "Attempting to sync node with API server" Sep 9 00:39:33.465243 kubelet[1604]: I0909 00:39:33.465242 1604 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 9 00:39:33.465334 kubelet[1604]: I0909 00:39:33.465262 1604 kubelet.go:352] "Adding apiserver pod source" Sep 9 00:39:33.465334 kubelet[1604]: I0909 00:39:33.465272 1604 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 9 00:39:33.471909 kubelet[1604]: I0909 00:39:33.471887 1604 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 9 00:39:33.472536 kubelet[1604]: I0909 00:39:33.472502 1604 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 9 00:39:33.472629 kubelet[1604]: W0909 00:39:33.472618 1604 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Sep 9 00:39:33.473557 kubelet[1604]: I0909 00:39:33.473515 1604 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 9 00:39:33.488293 kubelet[1604]: I0909 00:39:33.488254 1604 server.go:1287] "Started kubelet" Sep 9 00:39:33.488665 kubelet[1604]: W0909 00:39:33.486188 1604 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.102:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.102:6443: connect: connection refused Sep 9 00:39:33.488827 kubelet[1604]: E0909 00:39:33.488791 1604 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.102:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.102:6443: connect: connection refused" logger="UnhandledError" Sep 9 00:39:33.488902 kubelet[1604]: W0909 00:39:33.487865 1604 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.102:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.102:6443: connect: connection refused Sep 9 00:39:33.489000 kubelet[1604]: E0909 00:39:33.488984 1604 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.102:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.102:6443: connect: connection refused" logger="UnhandledError" Sep 9 00:39:33.489998 kubelet[1604]: I0909 00:39:33.489963 1604 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Sep 9 00:39:33.491889 kubelet[1604]: I0909 00:39:33.491834 1604 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 9 00:39:33.491000 audit[1604]: AVC avc: denied { mac_admin } for pid=1604 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:33.491000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 9 00:39:33.491000 audit[1604]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bf3470 a1=4000c87c98 a2=4000bf3440 a3=25 items=0 ppid=1 pid=1604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:33.491000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 9 00:39:33.491000 audit[1604]: AVC avc: denied { mac_admin } for pid=1604 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:33.491000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 9 00:39:33.491000 audit[1604]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ce6b00 a1=4000c87cb0 a2=4000bf3500 a3=25 items=0 ppid=1 pid=1604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:33.491000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 9 00:39:33.492625 kubelet[1604]: I0909 00:39:33.492181 1604 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 9 00:39:33.492625 kubelet[1604]: I0909 00:39:33.492255 1604 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 9 00:39:33.492625 kubelet[1604]: I0909 00:39:33.492329 1604 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 9 00:39:33.492625 kubelet[1604]: I0909 00:39:33.492439 1604 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 9 00:39:33.494384 kubelet[1604]: I0909 00:39:33.494356 1604 server.go:479] "Adding debug handlers to kubelet server" Sep 9 00:39:33.500724 kubelet[1604]: E0909 00:39:33.500692 1604 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 9 00:39:33.500812 kubelet[1604]: I0909 00:39:33.500737 1604 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 9 00:39:33.501226 kubelet[1604]: I0909 00:39:33.501200 1604 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 9 00:39:33.501432 kubelet[1604]: I0909 00:39:33.501414 1604 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 9 00:39:33.501509 kubelet[1604]: I0909 00:39:33.501495 1604 reconciler.go:26] "Reconciler: start to sync state" Sep 9 00:39:33.502150 kubelet[1604]: I0909 00:39:33.502128 1604 factory.go:221] Registration of the systemd container factory successfully Sep 9 00:39:33.502200 kubelet[1604]: E0909 00:39:33.502175 1604 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.102:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.102:6443: connect: connection refused" interval="200ms" Sep 9 00:39:33.502235 kubelet[1604]: I0909 00:39:33.502210 1604 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 9 00:39:33.503873 kubelet[1604]: W0909 00:39:33.503194 1604 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.102:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.102:6443: connect: connection refused Sep 9 00:39:33.503873 kubelet[1604]: E0909 00:39:33.503251 1604 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.102:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.102:6443: connect: connection refused" logger="UnhandledError" Sep 9 00:39:33.503873 kubelet[1604]: E0909 00:39:33.502230 1604 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.102:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.102:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18637651d7b83aa2 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-09-09 00:39:33.488229026 +0000 UTC m=+1.217381800,LastTimestamp:2025-09-09 00:39:33.488229026 +0000 UTC m=+1.217381800,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Sep 9 00:39:33.504100 kubelet[1604]: I0909 00:39:33.504070 1604 factory.go:221] Registration of the containerd container factory successfully Sep 9 00:39:33.504736 kubelet[1604]: E0909 00:39:33.504713 1604 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 9 00:39:33.504000 audit[1618]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1618 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:33.504000 audit[1618]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffce75cf50 a2=0 a3=1 items=0 ppid=1604 pid=1618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:33.504000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 9 00:39:33.506000 audit[1619]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1619 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:33.506000 audit[1619]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc2dbc630 a2=0 a3=1 items=0 ppid=1604 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:33.506000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 9 00:39:33.507000 audit[1621]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1621 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:33.507000 audit[1621]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd2019b30 a2=0 a3=1 items=0 ppid=1604 pid=1621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:33.507000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 9 00:39:33.509000 audit[1623]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1623 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:33.509000 audit[1623]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffcb3efee0 a2=0 a3=1 items=0 ppid=1604 pid=1623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:33.509000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 9 00:39:33.515621 kubelet[1604]: I0909 00:39:33.515603 1604 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 9 00:39:33.515621 kubelet[1604]: I0909 00:39:33.515618 1604 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 9 00:39:33.515724 kubelet[1604]: I0909 00:39:33.515635 1604 state_mem.go:36] "Initialized new in-memory state store" Sep 9 00:39:33.515000 audit[1628]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1628 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:33.515000 audit[1628]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffe97981f0 a2=0 a3=1 items=0 ppid=1604 pid=1628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:33.515000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Sep 9 00:39:33.518442 kubelet[1604]: I0909 00:39:33.518414 1604 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 9 00:39:33.517000 audit[1630]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1630 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:33.517000 audit[1630]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffcf238410 a2=0 a3=1 items=0 ppid=1604 pid=1630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:33.517000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 9 00:39:33.517000 audit[1632]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:33.517000 audit[1632]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff574c5e0 a2=0 a3=1 items=0 ppid=1604 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:33.517000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 9 00:39:33.519838 kubelet[1604]: I0909 00:39:33.519814 1604 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 9 00:39:33.519877 kubelet[1604]: I0909 00:39:33.519846 1604 status_manager.go:227] "Starting to sync pod status with apiserver" Sep 9 00:39:33.519877 kubelet[1604]: I0909 00:39:33.519870 1604 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 9 00:39:33.519943 kubelet[1604]: I0909 00:39:33.519879 1604 kubelet.go:2382] "Starting kubelet main sync loop" Sep 9 00:39:33.519943 kubelet[1604]: E0909 00:39:33.519935 1604 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 9 00:39:33.520401 kubelet[1604]: W0909 00:39:33.520368 1604 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.102:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.102:6443: connect: connection refused Sep 9 00:39:33.520489 kubelet[1604]: E0909 00:39:33.520412 1604 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.102:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.102:6443: connect: connection refused" logger="UnhandledError" Sep 9 00:39:33.521110 kubelet[1604]: I0909 00:39:33.521094 1604 policy_none.go:49] "None policy: Start" Sep 9 00:39:33.521178 kubelet[1604]: I0909 00:39:33.521114 1604 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 9 00:39:33.521178 kubelet[1604]: I0909 00:39:33.521172 1604 state_mem.go:35] "Initializing new in-memory state store" Sep 9 00:39:33.519000 audit[1635]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1635 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:33.519000 audit[1635]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff77c73d0 a2=0 a3=1 items=0 ppid=1604 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:33.519000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 9 00:39:33.521000 audit[1633]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=1633 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:33.521000 audit[1633]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe13f9df0 a2=0 a3=1 items=0 ppid=1604 pid=1633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:33.521000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 9 00:39:33.521000 audit[1636]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1636 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:33.521000 audit[1636]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc6d4a200 a2=0 a3=1 items=0 ppid=1604 pid=1636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:33.521000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 9 00:39:33.521000 audit[1637]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1637 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:33.521000 audit[1637]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=fffff15aabf0 a2=0 a3=1 items=0 ppid=1604 pid=1637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:33.521000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 9 00:39:33.522000 audit[1638]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1638 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:33.522000 audit[1638]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd07b7610 a2=0 a3=1 items=0 ppid=1604 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:33.522000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 9 00:39:33.527412 systemd[1]: Created slice kubepods.slice. Sep 9 00:39:33.531395 systemd[1]: Created slice kubepods-burstable.slice. Sep 9 00:39:33.533741 systemd[1]: Created slice kubepods-besteffort.slice. Sep 9 00:39:33.550610 kubelet[1604]: I0909 00:39:33.550589 1604 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 9 00:39:33.548000 audit[1604]: AVC avc: denied { mac_admin } for pid=1604 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:33.548000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 9 00:39:33.548000 audit[1604]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000f69560 a1=4000f76ee8 a2=4000f69530 a3=25 items=0 ppid=1 pid=1604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:33.548000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 9 00:39:33.551179 kubelet[1604]: I0909 00:39:33.551158 1604 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Sep 9 00:39:33.551362 kubelet[1604]: I0909 00:39:33.551346 1604 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 9 00:39:33.551470 kubelet[1604]: I0909 00:39:33.551434 1604 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 9 00:39:33.552109 kubelet[1604]: I0909 00:39:33.552089 1604 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 9 00:39:33.552765 kubelet[1604]: E0909 00:39:33.552481 1604 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 9 00:39:33.552878 kubelet[1604]: E0909 00:39:33.552860 1604 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Sep 9 00:39:33.627256 systemd[1]: Created slice kubepods-burstable-podb34030df8097eeadda78aaf11c8c4df5.slice. Sep 9 00:39:33.638984 kubelet[1604]: E0909 00:39:33.638955 1604 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 9 00:39:33.641858 systemd[1]: Created slice kubepods-burstable-poda88c9297c136b0f15880bf567e89a977.slice. Sep 9 00:39:33.643893 kubelet[1604]: E0909 00:39:33.643837 1604 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 9 00:39:33.645294 systemd[1]: Created slice kubepods-burstable-poda9176403b596d0b29ae8ad12d635226d.slice. Sep 9 00:39:33.646643 kubelet[1604]: E0909 00:39:33.646623 1604 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 9 00:39:33.653490 kubelet[1604]: I0909 00:39:33.653467 1604 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 9 00:39:33.654033 kubelet[1604]: E0909 00:39:33.653996 1604 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.102:6443/api/v1/nodes\": dial tcp 10.0.0.102:6443: connect: connection refused" node="localhost" Sep 9 00:39:33.702496 kubelet[1604]: I0909 00:39:33.702378 1604 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b34030df8097eeadda78aaf11c8c4df5-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"b34030df8097eeadda78aaf11c8c4df5\") " pod="kube-system/kube-apiserver-localhost" Sep 9 00:39:33.702496 kubelet[1604]: I0909 00:39:33.702441 1604 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b34030df8097eeadda78aaf11c8c4df5-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"b34030df8097eeadda78aaf11c8c4df5\") " pod="kube-system/kube-apiserver-localhost" Sep 9 00:39:33.702496 kubelet[1604]: I0909 00:39:33.702463 1604 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a88c9297c136b0f15880bf567e89a977-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"a88c9297c136b0f15880bf567e89a977\") " pod="kube-system/kube-controller-manager-localhost" Sep 9 00:39:33.702608 kubelet[1604]: I0909 00:39:33.702501 1604 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/a88c9297c136b0f15880bf567e89a977-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"a88c9297c136b0f15880bf567e89a977\") " pod="kube-system/kube-controller-manager-localhost" Sep 9 00:39:33.702608 kubelet[1604]: I0909 00:39:33.702522 1604 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a88c9297c136b0f15880bf567e89a977-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"a88c9297c136b0f15880bf567e89a977\") " pod="kube-system/kube-controller-manager-localhost" Sep 9 00:39:33.702608 kubelet[1604]: I0909 00:39:33.702538 1604 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a88c9297c136b0f15880bf567e89a977-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"a88c9297c136b0f15880bf567e89a977\") " pod="kube-system/kube-controller-manager-localhost" Sep 9 00:39:33.702608 kubelet[1604]: I0909 00:39:33.702554 1604 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b34030df8097eeadda78aaf11c8c4df5-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"b34030df8097eeadda78aaf11c8c4df5\") " pod="kube-system/kube-apiserver-localhost" Sep 9 00:39:33.702608 kubelet[1604]: I0909 00:39:33.702568 1604 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a88c9297c136b0f15880bf567e89a977-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"a88c9297c136b0f15880bf567e89a977\") " pod="kube-system/kube-controller-manager-localhost" Sep 9 00:39:33.702727 kubelet[1604]: I0909 00:39:33.702582 1604 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a9176403b596d0b29ae8ad12d635226d-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"a9176403b596d0b29ae8ad12d635226d\") " pod="kube-system/kube-scheduler-localhost" Sep 9 00:39:33.703080 kubelet[1604]: E0909 00:39:33.703042 1604 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.102:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.102:6443: connect: connection refused" interval="400ms" Sep 9 00:39:33.855486 kubelet[1604]: I0909 00:39:33.855439 1604 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 9 00:39:33.855866 kubelet[1604]: E0909 00:39:33.855836 1604 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.102:6443/api/v1/nodes\": dial tcp 10.0.0.102:6443: connect: connection refused" node="localhost" Sep 9 00:39:33.940621 kubelet[1604]: E0909 00:39:33.940574 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:33.941532 env[1216]: time="2025-09-09T00:39:33.941474195Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:b34030df8097eeadda78aaf11c8c4df5,Namespace:kube-system,Attempt:0,}" Sep 9 00:39:33.944643 kubelet[1604]: E0909 00:39:33.944618 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:33.945227 env[1216]: time="2025-09-09T00:39:33.945001044Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:a88c9297c136b0f15880bf567e89a977,Namespace:kube-system,Attempt:0,}" Sep 9 00:39:33.947781 kubelet[1604]: E0909 00:39:33.947739 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:33.948134 env[1216]: time="2025-09-09T00:39:33.948104107Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:a9176403b596d0b29ae8ad12d635226d,Namespace:kube-system,Attempt:0,}" Sep 9 00:39:34.103829 kubelet[1604]: E0909 00:39:34.103700 1604 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.102:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.102:6443: connect: connection refused" interval="800ms" Sep 9 00:39:34.257761 kubelet[1604]: I0909 00:39:34.257718 1604 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 9 00:39:34.258182 kubelet[1604]: E0909 00:39:34.258131 1604 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.102:6443/api/v1/nodes\": dial tcp 10.0.0.102:6443: connect: connection refused" node="localhost" Sep 9 00:39:34.495209 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2136387405.mount: Deactivated successfully. Sep 9 00:39:34.503414 env[1216]: time="2025-09-09T00:39:34.503361269Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:34.505438 env[1216]: time="2025-09-09T00:39:34.505336315Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:34.507355 env[1216]: time="2025-09-09T00:39:34.507324607Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:34.508823 env[1216]: time="2025-09-09T00:39:34.508794616Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:34.510597 env[1216]: time="2025-09-09T00:39:34.510566447Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:34.511606 env[1216]: time="2025-09-09T00:39:34.511579802Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:34.514825 env[1216]: time="2025-09-09T00:39:34.514798911Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:34.517301 env[1216]: time="2025-09-09T00:39:34.517272591Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:34.520268 env[1216]: time="2025-09-09T00:39:34.520236781Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:34.520964 env[1216]: time="2025-09-09T00:39:34.520938310Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:34.521654 env[1216]: time="2025-09-09T00:39:34.521626152Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:34.522883 env[1216]: time="2025-09-09T00:39:34.522761965Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:34.545774 env[1216]: time="2025-09-09T00:39:34.545685633Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 9 00:39:34.545774 env[1216]: time="2025-09-09T00:39:34.545754945Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 9 00:39:34.545774 env[1216]: time="2025-09-09T00:39:34.545769152Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 9 00:39:34.546070 env[1216]: time="2025-09-09T00:39:34.546005302Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f0fea7f94ae7bf2b89bd721511ab0503e45faf77a7c439270134fe8f7a052c26 pid=1654 runtime=io.containerd.runc.v2 Sep 9 00:39:34.547397 env[1216]: time="2025-09-09T00:39:34.547154641Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 9 00:39:34.547397 env[1216]: time="2025-09-09T00:39:34.547187697Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 9 00:39:34.547397 env[1216]: time="2025-09-09T00:39:34.547199903Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 9 00:39:34.547397 env[1216]: time="2025-09-09T00:39:34.547335286Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d9441d9a5cc80949a4fda3939c9e516aa53a2b3cf1d5c209856e34fdfc6bd153 pid=1669 runtime=io.containerd.runc.v2 Sep 9 00:39:34.548349 env[1216]: time="2025-09-09T00:39:34.548228745Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 9 00:39:34.548349 env[1216]: time="2025-09-09T00:39:34.548305381Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 9 00:39:34.548443 env[1216]: time="2025-09-09T00:39:34.548316186Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 9 00:39:34.548623 env[1216]: time="2025-09-09T00:39:34.548564983Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/39a2a83f51609012fd943c84c3de15e889237345ff371a334d6d9aeb543fb0eb pid=1666 runtime=io.containerd.runc.v2 Sep 9 00:39:34.561023 systemd[1]: Started cri-containerd-d9441d9a5cc80949a4fda3939c9e516aa53a2b3cf1d5c209856e34fdfc6bd153.scope. Sep 9 00:39:34.562017 systemd[1]: Started cri-containerd-f0fea7f94ae7bf2b89bd721511ab0503e45faf77a7c439270134fe8f7a052c26.scope. Sep 9 00:39:34.566961 kubelet[1604]: W0909 00:39:34.566800 1604 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.102:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.102:6443: connect: connection refused Sep 9 00:39:34.566961 kubelet[1604]: E0909 00:39:34.566839 1604 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.102:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.102:6443: connect: connection refused" logger="UnhandledError" Sep 9 00:39:34.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.581000 audit: BPF prog-id=61 op=LOAD Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=1669 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439343431643961356363383039343961346664613339333963396535 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=1669 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439343431643961356363383039343961346664613339333963396535 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit: BPF prog-id=62 op=LOAD Sep 9 00:39:34.582000 audit[1694]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=1669 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439343431643961356363383039343961346664613339333963396535 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit: BPF prog-id=63 op=LOAD Sep 9 00:39:34.582000 audit[1694]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=1669 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439343431643961356363383039343961346664613339333963396535 Sep 9 00:39:34.582000 audit: BPF prog-id=63 op=UNLOAD Sep 9 00:39:34.582000 audit: BPF prog-id=62 op=UNLOAD Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.582000 audit: BPF prog-id=64 op=LOAD Sep 9 00:39:34.582000 audit[1694]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=1669 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439343431643961356363383039343961346664613339333963396535 Sep 9 00:39:34.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.585000 audit: BPF prog-id=65 op=LOAD Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1654 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630666561376639346165376266326238396264373231353131616230 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1654 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630666561376639346165376266326238396264373231353131616230 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit: BPF prog-id=66 op=LOAD Sep 9 00:39:34.586000 audit[1684]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1654 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630666561376639346165376266326238396264373231353131616230 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit: BPF prog-id=67 op=LOAD Sep 9 00:39:34.586000 audit[1684]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1654 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630666561376639346165376266326238396264373231353131616230 Sep 9 00:39:34.586000 audit: BPF prog-id=67 op=UNLOAD Sep 9 00:39:34.586000 audit: BPF prog-id=66 op=UNLOAD Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.586000 audit: BPF prog-id=68 op=LOAD Sep 9 00:39:34.586000 audit[1684]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1654 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630666561376639346165376266326238396264373231353131616230 Sep 9 00:39:34.589762 systemd[1]: Started cri-containerd-39a2a83f51609012fd943c84c3de15e889237345ff371a334d6d9aeb543fb0eb.scope. Sep 9 00:39:34.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit: BPF prog-id=69 op=LOAD Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=1666 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339613261383366353136303930313266643934336338346333646531 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=1666 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339613261383366353136303930313266643934336338346333646531 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit: BPF prog-id=70 op=LOAD Sep 9 00:39:34.607000 audit[1695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=1666 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339613261383366353136303930313266643934336338346333646531 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit: BPF prog-id=71 op=LOAD Sep 9 00:39:34.607000 audit[1695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=1666 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339613261383366353136303930313266643934336338346333646531 Sep 9 00:39:34.607000 audit: BPF prog-id=71 op=UNLOAD Sep 9 00:39:34.607000 audit: BPF prog-id=70 op=UNLOAD Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.607000 audit: BPF prog-id=72 op=LOAD Sep 9 00:39:34.607000 audit[1695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=1666 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339613261383366353136303930313266643934336338346333646531 Sep 9 00:39:34.614924 env[1216]: time="2025-09-09T00:39:34.614867269Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:a88c9297c136b0f15880bf567e89a977,Namespace:kube-system,Attempt:0,} returns sandbox id \"d9441d9a5cc80949a4fda3939c9e516aa53a2b3cf1d5c209856e34fdfc6bd153\"" Sep 9 00:39:34.615972 kubelet[1604]: E0909 00:39:34.615892 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:34.617809 env[1216]: time="2025-09-09T00:39:34.617774192Z" level=info msg="CreateContainer within sandbox \"d9441d9a5cc80949a4fda3939c9e516aa53a2b3cf1d5c209856e34fdfc6bd153\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Sep 9 00:39:34.626156 env[1216]: time="2025-09-09T00:39:34.626126388Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:b34030df8097eeadda78aaf11c8c4df5,Namespace:kube-system,Attempt:0,} returns sandbox id \"f0fea7f94ae7bf2b89bd721511ab0503e45faf77a7c439270134fe8f7a052c26\"" Sep 9 00:39:34.626905 kubelet[1604]: E0909 00:39:34.626761 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:34.628642 env[1216]: time="2025-09-09T00:39:34.628600868Z" level=info msg="CreateContainer within sandbox \"f0fea7f94ae7bf2b89bd721511ab0503e45faf77a7c439270134fe8f7a052c26\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Sep 9 00:39:34.634330 env[1216]: time="2025-09-09T00:39:34.633373666Z" level=info msg="CreateContainer within sandbox \"d9441d9a5cc80949a4fda3939c9e516aa53a2b3cf1d5c209856e34fdfc6bd153\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"99c708d5f1ac2b31d69d55d10d137142271f65f9ed5bfd9f859eb026cd79d2d1\"" Sep 9 00:39:34.634330 env[1216]: time="2025-09-09T00:39:34.633378908Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:a9176403b596d0b29ae8ad12d635226d,Namespace:kube-system,Attempt:0,} returns sandbox id \"39a2a83f51609012fd943c84c3de15e889237345ff371a334d6d9aeb543fb0eb\"" Sep 9 00:39:34.634447 env[1216]: time="2025-09-09T00:39:34.634432602Z" level=info msg="StartContainer for \"99c708d5f1ac2b31d69d55d10d137142271f65f9ed5bfd9f859eb026cd79d2d1\"" Sep 9 00:39:34.634809 kubelet[1604]: E0909 00:39:34.634628 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:34.636843 env[1216]: time="2025-09-09T00:39:34.636792749Z" level=info msg="CreateContainer within sandbox \"39a2a83f51609012fd943c84c3de15e889237345ff371a334d6d9aeb543fb0eb\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Sep 9 00:39:34.642478 env[1216]: time="2025-09-09T00:39:34.642425189Z" level=info msg="CreateContainer within sandbox \"f0fea7f94ae7bf2b89bd721511ab0503e45faf77a7c439270134fe8f7a052c26\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"b6f1b4d2aa12ba8507f373aa4b74b05bd2692cb76072c7fa5146b143a1b15dff\"" Sep 9 00:39:34.642957 env[1216]: time="2025-09-09T00:39:34.642892769Z" level=info msg="StartContainer for \"b6f1b4d2aa12ba8507f373aa4b74b05bd2692cb76072c7fa5146b143a1b15dff\"" Sep 9 00:39:34.650071 env[1216]: time="2025-09-09T00:39:34.649879244Z" level=info msg="CreateContainer within sandbox \"39a2a83f51609012fd943c84c3de15e889237345ff371a334d6d9aeb543fb0eb\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"dd16ceb3c84c36599ffebb2217d82d820f646ff057e3b1129fb2cdb37753036a\"" Sep 9 00:39:34.650575 env[1216]: time="2025-09-09T00:39:34.650532150Z" level=info msg="StartContainer for \"dd16ceb3c84c36599ffebb2217d82d820f646ff057e3b1129fb2cdb37753036a\"" Sep 9 00:39:34.652668 systemd[1]: Started cri-containerd-99c708d5f1ac2b31d69d55d10d137142271f65f9ed5bfd9f859eb026cd79d2d1.scope. Sep 9 00:39:34.663647 systemd[1]: Started cri-containerd-b6f1b4d2aa12ba8507f373aa4b74b05bd2692cb76072c7fa5146b143a1b15dff.scope. Sep 9 00:39:34.670784 systemd[1]: Started cri-containerd-dd16ceb3c84c36599ffebb2217d82d820f646ff057e3b1129fb2cdb37753036a.scope. Sep 9 00:39:34.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit: BPF prog-id=73 op=LOAD Sep 9 00:39:34.672000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit[1775]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1669 pid=1775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939633730386435663161633262333164363964353564313064313337 Sep 9 00:39:34.672000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit[1775]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1669 pid=1775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939633730386435663161633262333164363964353564313064313337 Sep 9 00:39:34.672000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.672000 audit: BPF prog-id=74 op=LOAD Sep 9 00:39:34.672000 audit[1775]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1669 pid=1775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939633730386435663161633262333164363964353564313064313337 Sep 9 00:39:34.673000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.673000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.673000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.673000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.673000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.673000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.673000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.673000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.673000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.673000 audit: BPF prog-id=75 op=LOAD Sep 9 00:39:34.673000 audit[1775]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1669 pid=1775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939633730386435663161633262333164363964353564313064313337 Sep 9 00:39:34.673000 audit: BPF prog-id=75 op=UNLOAD Sep 9 00:39:34.673000 audit: BPF prog-id=74 op=UNLOAD Sep 9 00:39:34.673000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.673000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.673000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.673000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.673000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.673000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.673000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.673000 audit[1775]: AVC avc: denied { perfmon } for pid=1775 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.673000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.673000 audit[1775]: AVC avc: denied { bpf } for pid=1775 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.673000 audit: BPF prog-id=76 op=LOAD Sep 9 00:39:34.673000 audit[1775]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1669 pid=1775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939633730386435663161633262333164363964353564313064313337 Sep 9 00:39:34.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.681000 audit: BPF prog-id=77 op=LOAD Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1654 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.682000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236663162346432616131326261383530376633373361613462373462 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1654 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.682000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236663162346432616131326261383530376633373361613462373462 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit: BPF prog-id=78 op=LOAD Sep 9 00:39:34.682000 audit[1791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1654 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.682000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236663162346432616131326261383530376633373361613462373462 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit: BPF prog-id=79 op=LOAD Sep 9 00:39:34.682000 audit[1791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1654 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.682000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236663162346432616131326261383530376633373361613462373462 Sep 9 00:39:34.682000 audit: BPF prog-id=79 op=UNLOAD Sep 9 00:39:34.682000 audit: BPF prog-id=78 op=UNLOAD Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { perfmon } for pid=1791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit[1791]: AVC avc: denied { bpf } for pid=1791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.682000 audit: BPF prog-id=80 op=LOAD Sep 9 00:39:34.682000 audit[1791]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1654 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.682000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236663162346432616131326261383530376633373361613462373462 Sep 9 00:39:34.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.693000 audit: BPF prog-id=81 op=LOAD Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1666 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464313663656233633834633336353939666665626232323137643832 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1666 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464313663656233633834633336353939666665626232323137643832 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit: BPF prog-id=82 op=LOAD Sep 9 00:39:34.694000 audit[1818]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1666 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464313663656233633834633336353939666665626232323137643832 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit: BPF prog-id=83 op=LOAD Sep 9 00:39:34.694000 audit[1818]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1666 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464313663656233633834633336353939666665626232323137643832 Sep 9 00:39:34.694000 audit: BPF prog-id=83 op=UNLOAD Sep 9 00:39:34.694000 audit: BPF prog-id=82 op=UNLOAD Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:34.694000 audit: BPF prog-id=84 op=LOAD Sep 9 00:39:34.694000 audit[1818]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1666 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:34.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464313663656233633834633336353939666665626232323137643832 Sep 9 00:39:34.705716 env[1216]: time="2025-09-09T00:39:34.705673324Z" level=info msg="StartContainer for \"99c708d5f1ac2b31d69d55d10d137142271f65f9ed5bfd9f859eb026cd79d2d1\" returns successfully" Sep 9 00:39:34.718492 kubelet[1604]: W0909 00:39:34.714762 1604 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.102:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.102:6443: connect: connection refused Sep 9 00:39:34.718492 kubelet[1604]: E0909 00:39:34.714831 1604 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.102:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.102:6443: connect: connection refused" logger="UnhandledError" Sep 9 00:39:34.718661 env[1216]: time="2025-09-09T00:39:34.718049406Z" level=info msg="StartContainer for \"b6f1b4d2aa12ba8507f373aa4b74b05bd2692cb76072c7fa5146b143a1b15dff\" returns successfully" Sep 9 00:39:34.718752 kubelet[1604]: W0909 00:39:34.718707 1604 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.102:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.102:6443: connect: connection refused Sep 9 00:39:34.718840 kubelet[1604]: E0909 00:39:34.718810 1604 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.102:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.102:6443: connect: connection refused" logger="UnhandledError" Sep 9 00:39:34.725158 env[1216]: time="2025-09-09T00:39:34.725114079Z" level=info msg="StartContainer for \"dd16ceb3c84c36599ffebb2217d82d820f646ff057e3b1129fb2cdb37753036a\" returns successfully" Sep 9 00:39:35.059725 kubelet[1604]: I0909 00:39:35.059366 1604 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 9 00:39:35.527892 kubelet[1604]: E0909 00:39:35.527548 1604 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 9 00:39:35.527892 kubelet[1604]: E0909 00:39:35.527680 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:35.529375 kubelet[1604]: E0909 00:39:35.529355 1604 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 9 00:39:35.529607 kubelet[1604]: E0909 00:39:35.529593 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:35.531392 kubelet[1604]: E0909 00:39:35.531349 1604 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 9 00:39:35.531488 kubelet[1604]: E0909 00:39:35.531464 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:35.928000 audit[1805]: AVC avc: denied { watch } for pid=1805 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:39:35.928000 audit[1805]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=400044a020 a2=fc6 a3=0 items=0 ppid=1669 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 key=(null) Sep 9 00:39:35.928000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 9 00:39:35.928000 audit[1805]: AVC avc: denied { watch } for pid=1805 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:39:35.928000 audit[1805]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40008a8000 a2=fc6 a3=0 items=0 ppid=1669 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 key=(null) Sep 9 00:39:35.928000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 9 00:39:36.255000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:39:36.255000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=40071716b0 a2=fc6 a3=0 items=0 ppid=1654 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 key=(null) Sep 9 00:39:36.255000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313032002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 9 00:39:36.260000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:39:36.260000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4001436ac0 a2=fc6 a3=0 items=0 ppid=1654 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 key=(null) Sep 9 00:39:36.260000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313032002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 9 00:39:36.260000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:39:36.260000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=400359a9c0 a2=fc6 a3=0 items=0 ppid=1654 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 key=(null) Sep 9 00:39:36.260000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313032002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 9 00:39:36.261000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:39:36.261000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4003506090 a2=fc6 a3=0 items=0 ppid=1654 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 key=(null) Sep 9 00:39:36.261000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313032002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 9 00:39:36.268000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:39:36.268000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=5b a1=4009e78420 a2=fc6 a3=0 items=0 ppid=1654 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 key=(null) Sep 9 00:39:36.268000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313032002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 9 00:39:36.268000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:39:36.268000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=5b a1=4003689b60 a2=fc6 a3=0 items=0 ppid=1654 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 key=(null) Sep 9 00:39:36.268000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313032002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 9 00:39:36.340899 kubelet[1604]: E0909 00:39:36.340850 1604 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Sep 9 00:39:36.459997 kubelet[1604]: E0909 00:39:36.459866 1604 event.go:359] "Server rejected event (will not retry!)" err="namespaces \"default\" not found" event="&Event{ObjectMeta:{localhost.18637651d7b83aa2 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-09-09 00:39:33.488229026 +0000 UTC m=+1.217381800,LastTimestamp:2025-09-09 00:39:33.488229026 +0000 UTC m=+1.217381800,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Sep 9 00:39:36.526355 kubelet[1604]: I0909 00:39:36.526239 1604 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Sep 9 00:39:36.526355 kubelet[1604]: E0909 00:39:36.526272 1604 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Sep 9 00:39:36.533023 kubelet[1604]: E0909 00:39:36.532979 1604 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 9 00:39:36.533129 kubelet[1604]: E0909 00:39:36.533106 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:36.533266 kubelet[1604]: E0909 00:39:36.533247 1604 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 9 00:39:36.533436 kubelet[1604]: E0909 00:39:36.533420 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:36.539221 kubelet[1604]: E0909 00:39:36.539188 1604 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 9 00:39:36.639574 kubelet[1604]: E0909 00:39:36.639534 1604 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 9 00:39:36.740789 kubelet[1604]: E0909 00:39:36.740743 1604 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 9 00:39:36.841727 kubelet[1604]: E0909 00:39:36.841619 1604 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 9 00:39:36.942498 kubelet[1604]: E0909 00:39:36.942463 1604 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 9 00:39:37.043528 kubelet[1604]: E0909 00:39:37.043477 1604 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 9 00:39:37.144442 kubelet[1604]: E0909 00:39:37.144339 1604 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 9 00:39:37.245064 kubelet[1604]: E0909 00:39:37.245027 1604 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 9 00:39:37.346060 kubelet[1604]: E0909 00:39:37.346023 1604 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 9 00:39:37.446892 kubelet[1604]: E0909 00:39:37.446722 1604 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 9 00:39:37.547591 kubelet[1604]: E0909 00:39:37.547558 1604 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 9 00:39:37.602858 kubelet[1604]: I0909 00:39:37.602824 1604 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Sep 9 00:39:37.635025 kubelet[1604]: I0909 00:39:37.634986 1604 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Sep 9 00:39:37.640173 kubelet[1604]: I0909 00:39:37.640142 1604 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Sep 9 00:39:38.487787 kubelet[1604]: I0909 00:39:38.487712 1604 apiserver.go:52] "Watching apiserver" Sep 9 00:39:38.490259 kubelet[1604]: E0909 00:39:38.490238 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:38.490320 kubelet[1604]: E0909 00:39:38.490288 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:38.490799 kubelet[1604]: E0909 00:39:38.490772 1604 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:38.501747 kubelet[1604]: I0909 00:39:38.501721 1604 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Sep 9 00:39:38.711685 systemd[1]: Reloading. Sep 9 00:39:38.749578 /usr/lib/systemd/system-generators/torcx-generator[1907]: time="2025-09-09T00:39:38Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 9 00:39:38.749610 /usr/lib/systemd/system-generators/torcx-generator[1907]: time="2025-09-09T00:39:38Z" level=info msg="torcx already run" Sep 9 00:39:38.804348 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 9 00:39:38.804367 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 9 00:39:38.819931 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 9 00:39:38.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.881591 kernel: kauditd_printk_skb: 592 callbacks suppressed Sep 9 00:39:38.881653 kernel: audit: type=1400 audit(1757378378.877:557): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.881672 kernel: audit: type=1400 audit(1757378378.878:558): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.885411 kernel: audit: type=1400 audit(1757378378.878:559): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.885447 kernel: audit: type=1400 audit(1757378378.878:560): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.890869 kernel: audit: type=1400 audit(1757378378.878:561): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.891000 kernel: audit: type=1400 audit(1757378378.878:562): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.894947 kernel: audit: type=1400 audit(1757378378.878:563): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.895012 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Sep 9 00:39:38.895042 kernel: audit: type=1400 audit(1757378378.878:564): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.897421 kernel: audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 Sep 9 00:39:38.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.881000 audit: BPF prog-id=85 op=LOAD Sep 9 00:39:38.881000 audit: BPF prog-id=46 op=UNLOAD Sep 9 00:39:38.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.882000 audit: BPF prog-id=86 op=LOAD Sep 9 00:39:38.882000 audit: BPF prog-id=81 op=UNLOAD Sep 9 00:39:38.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.885000 audit: BPF prog-id=87 op=LOAD Sep 9 00:39:38.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.887000 audit: BPF prog-id=88 op=LOAD Sep 9 00:39:38.887000 audit: BPF prog-id=47 op=UNLOAD Sep 9 00:39:38.887000 audit: BPF prog-id=48 op=UNLOAD Sep 9 00:39:38.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.890000 audit: BPF prog-id=89 op=LOAD Sep 9 00:39:38.890000 audit: BPF prog-id=61 op=UNLOAD Sep 9 00:39:38.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.893000 audit: BPF prog-id=90 op=LOAD Sep 9 00:39:38.893000 audit: BPF prog-id=49 op=UNLOAD Sep 9 00:39:38.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.898000 audit: BPF prog-id=91 op=LOAD Sep 9 00:39:38.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.898000 audit: BPF prog-id=92 op=LOAD Sep 9 00:39:38.898000 audit: BPF prog-id=50 op=UNLOAD Sep 9 00:39:38.898000 audit: BPF prog-id=51 op=UNLOAD Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit: BPF prog-id=93 op=LOAD Sep 9 00:39:38.899000 audit: BPF prog-id=52 op=UNLOAD Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit: BPF prog-id=94 op=LOAD Sep 9 00:39:38.899000 audit: BPF prog-id=53 op=UNLOAD Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit: BPF prog-id=95 op=LOAD Sep 9 00:39:38.902000 audit: BPF prog-id=54 op=UNLOAD Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit: BPF prog-id=96 op=LOAD Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit: BPF prog-id=97 op=LOAD Sep 9 00:39:38.902000 audit: BPF prog-id=55 op=UNLOAD Sep 9 00:39:38.902000 audit: BPF prog-id=56 op=UNLOAD Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.903000 audit: BPF prog-id=98 op=LOAD Sep 9 00:39:38.903000 audit: BPF prog-id=57 op=UNLOAD Sep 9 00:39:38.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.903000 audit: BPF prog-id=99 op=LOAD Sep 9 00:39:38.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.903000 audit: BPF prog-id=100 op=LOAD Sep 9 00:39:38.903000 audit: BPF prog-id=58 op=UNLOAD Sep 9 00:39:38.903000 audit: BPF prog-id=59 op=UNLOAD Sep 9 00:39:38.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.906000 audit: BPF prog-id=101 op=LOAD Sep 9 00:39:38.906000 audit: BPF prog-id=69 op=UNLOAD Sep 9 00:39:38.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.907000 audit: BPF prog-id=102 op=LOAD Sep 9 00:39:38.907000 audit: BPF prog-id=65 op=UNLOAD Sep 9 00:39:38.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.908000 audit: BPF prog-id=103 op=LOAD Sep 9 00:39:38.908000 audit: BPF prog-id=60 op=UNLOAD Sep 9 00:39:38.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.909000 audit: BPF prog-id=104 op=LOAD Sep 9 00:39:38.909000 audit: BPF prog-id=77 op=UNLOAD Sep 9 00:39:38.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:38.910000 audit: BPF prog-id=105 op=LOAD Sep 9 00:39:38.910000 audit: BPF prog-id=73 op=UNLOAD Sep 9 00:39:38.933096 systemd[1]: Stopping kubelet.service... Sep 9 00:39:38.959240 systemd[1]: kubelet.service: Deactivated successfully. Sep 9 00:39:38.959433 systemd[1]: Stopped kubelet.service. Sep 9 00:39:38.958000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:38.959489 systemd[1]: kubelet.service: Consumed 1.574s CPU time. Sep 9 00:39:38.961233 systemd[1]: Starting kubelet.service... Sep 9 00:39:39.066707 systemd[1]: Started kubelet.service. Sep 9 00:39:39.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:39.105270 kubelet[1947]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 9 00:39:39.105613 kubelet[1947]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 9 00:39:39.105668 kubelet[1947]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 9 00:39:39.105837 kubelet[1947]: I0909 00:39:39.105798 1947 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 9 00:39:39.116593 kubelet[1947]: I0909 00:39:39.116542 1947 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Sep 9 00:39:39.116593 kubelet[1947]: I0909 00:39:39.116580 1947 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 9 00:39:39.119136 kubelet[1947]: I0909 00:39:39.119110 1947 server.go:954] "Client rotation is on, will bootstrap in background" Sep 9 00:39:39.120522 kubelet[1947]: I0909 00:39:39.120504 1947 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Sep 9 00:39:39.125967 kubelet[1947]: I0909 00:39:39.125930 1947 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 9 00:39:39.129218 kubelet[1947]: E0909 00:39:39.129191 1947 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 9 00:39:39.129326 kubelet[1947]: I0909 00:39:39.129309 1947 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 9 00:39:39.132800 kubelet[1947]: I0909 00:39:39.132752 1947 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 9 00:39:39.133190 kubelet[1947]: I0909 00:39:39.133153 1947 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 9 00:39:39.133421 kubelet[1947]: I0909 00:39:39.133259 1947 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 9 00:39:39.133569 kubelet[1947]: I0909 00:39:39.133555 1947 topology_manager.go:138] "Creating topology manager with none policy" Sep 9 00:39:39.133626 kubelet[1947]: I0909 00:39:39.133617 1947 container_manager_linux.go:304] "Creating device plugin manager" Sep 9 00:39:39.133718 kubelet[1947]: I0909 00:39:39.133708 1947 state_mem.go:36] "Initialized new in-memory state store" Sep 9 00:39:39.133935 kubelet[1947]: I0909 00:39:39.133906 1947 kubelet.go:446] "Attempting to sync node with API server" Sep 9 00:39:39.134043 kubelet[1947]: I0909 00:39:39.134032 1947 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 9 00:39:39.134112 kubelet[1947]: I0909 00:39:39.134103 1947 kubelet.go:352] "Adding apiserver pod source" Sep 9 00:39:39.134263 kubelet[1947]: I0909 00:39:39.134252 1947 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 9 00:39:39.135760 kubelet[1947]: I0909 00:39:39.135739 1947 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 9 00:39:39.136383 kubelet[1947]: I0909 00:39:39.136363 1947 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 9 00:39:39.136844 kubelet[1947]: I0909 00:39:39.136823 1947 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 9 00:39:39.136964 kubelet[1947]: I0909 00:39:39.136953 1947 server.go:1287] "Started kubelet" Sep 9 00:39:39.137809 kubelet[1947]: I0909 00:39:39.137770 1947 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Sep 9 00:39:39.143000 audit[1947]: AVC avc: denied { mac_admin } for pid=1947 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:39.143000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 9 00:39:39.143000 audit[1947]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400099c900 a1=4000687c80 a2=400099c8d0 a3=25 items=0 ppid=1 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:39.143000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 9 00:39:39.151498 kubelet[1947]: I0909 00:39:39.138119 1947 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 9 00:39:39.151771 kubelet[1947]: I0909 00:39:39.151753 1947 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 9 00:39:39.152351 kubelet[1947]: I0909 00:39:39.145300 1947 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 9 00:39:39.152000 audit[1947]: AVC avc: denied { mac_admin } for pid=1947 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:39.152000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 9 00:39:39.152000 audit[1947]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40008affa0 a1=40008bedb0 a2=40008bb500 a3=25 items=0 ppid=1 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:39.152000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 9 00:39:39.152767 kubelet[1947]: I0909 00:39:39.152033 1947 server.go:479] "Adding debug handlers to kubelet server" Sep 9 00:39:39.152897 kubelet[1947]: I0909 00:39:39.152874 1947 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 9 00:39:39.157038 kubelet[1947]: I0909 00:39:39.157014 1947 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 9 00:39:39.157221 kubelet[1947]: E0909 00:39:39.152342 1947 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 9 00:39:39.157273 kubelet[1947]: I0909 00:39:39.157262 1947 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 9 00:39:39.157378 kubelet[1947]: I0909 00:39:39.157358 1947 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 9 00:39:39.157691 kubelet[1947]: I0909 00:39:39.157663 1947 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 9 00:39:39.157855 kubelet[1947]: I0909 00:39:39.157838 1947 reconciler.go:26] "Reconciler: start to sync state" Sep 9 00:39:39.158304 kubelet[1947]: I0909 00:39:39.158278 1947 factory.go:221] Registration of the systemd container factory successfully Sep 9 00:39:39.158411 kubelet[1947]: I0909 00:39:39.158386 1947 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 9 00:39:39.160218 kubelet[1947]: I0909 00:39:39.160168 1947 factory.go:221] Registration of the containerd container factory successfully Sep 9 00:39:39.174908 kubelet[1947]: I0909 00:39:39.174828 1947 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 9 00:39:39.177201 kubelet[1947]: I0909 00:39:39.177176 1947 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 9 00:39:39.177201 kubelet[1947]: I0909 00:39:39.177202 1947 status_manager.go:227] "Starting to sync pod status with apiserver" Sep 9 00:39:39.177315 kubelet[1947]: I0909 00:39:39.177219 1947 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 9 00:39:39.177315 kubelet[1947]: I0909 00:39:39.177227 1947 kubelet.go:2382] "Starting kubelet main sync loop" Sep 9 00:39:39.177315 kubelet[1947]: E0909 00:39:39.177285 1947 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 9 00:39:39.198454 kubelet[1947]: I0909 00:39:39.198428 1947 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 9 00:39:39.198454 kubelet[1947]: I0909 00:39:39.198448 1947 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 9 00:39:39.198581 kubelet[1947]: I0909 00:39:39.198467 1947 state_mem.go:36] "Initialized new in-memory state store" Sep 9 00:39:39.198635 kubelet[1947]: I0909 00:39:39.198619 1947 state_mem.go:88] "Updated default CPUSet" cpuSet="" Sep 9 00:39:39.198663 kubelet[1947]: I0909 00:39:39.198635 1947 state_mem.go:96] "Updated CPUSet assignments" assignments={} Sep 9 00:39:39.198663 kubelet[1947]: I0909 00:39:39.198654 1947 policy_none.go:49] "None policy: Start" Sep 9 00:39:39.198663 kubelet[1947]: I0909 00:39:39.198663 1947 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 9 00:39:39.198740 kubelet[1947]: I0909 00:39:39.198672 1947 state_mem.go:35] "Initializing new in-memory state store" Sep 9 00:39:39.198774 kubelet[1947]: I0909 00:39:39.198762 1947 state_mem.go:75] "Updated machine memory state" Sep 9 00:39:39.202139 kubelet[1947]: I0909 00:39:39.202108 1947 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 9 00:39:39.201000 audit[1947]: AVC avc: denied { mac_admin } for pid=1947 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:39.201000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 9 00:39:39.201000 audit[1947]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a7f5f0 a1=4000fb2918 a2=4000a7f5c0 a3=25 items=0 ppid=1 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:39.201000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 9 00:39:39.202380 kubelet[1947]: I0909 00:39:39.202174 1947 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Sep 9 00:39:39.202380 kubelet[1947]: I0909 00:39:39.202304 1947 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 9 00:39:39.202380 kubelet[1947]: I0909 00:39:39.202317 1947 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 9 00:39:39.202687 kubelet[1947]: I0909 00:39:39.202623 1947 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 9 00:39:39.203476 kubelet[1947]: E0909 00:39:39.203190 1947 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 9 00:39:39.271000 audit[1805]: AVC avc: denied { watch } for pid=1805 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 9 00:39:39.271000 audit[1805]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000358440 a2=fc6 a3=0 items=0 ppid=1669 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 key=(null) Sep 9 00:39:39.271000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 9 00:39:39.278339 kubelet[1947]: I0909 00:39:39.278306 1947 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Sep 9 00:39:39.278639 kubelet[1947]: I0909 00:39:39.278619 1947 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Sep 9 00:39:39.278814 kubelet[1947]: I0909 00:39:39.278642 1947 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Sep 9 00:39:39.284176 kubelet[1947]: E0909 00:39:39.284143 1947 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Sep 9 00:39:39.285090 kubelet[1947]: E0909 00:39:39.285055 1947 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Sep 9 00:39:39.287237 kubelet[1947]: E0909 00:39:39.287164 1947 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Sep 9 00:39:39.306987 kubelet[1947]: I0909 00:39:39.306963 1947 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 9 00:39:39.316192 kubelet[1947]: I0909 00:39:39.316165 1947 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Sep 9 00:39:39.316407 kubelet[1947]: I0909 00:39:39.316383 1947 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Sep 9 00:39:39.360545 kubelet[1947]: I0909 00:39:39.360432 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a88c9297c136b0f15880bf567e89a977-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"a88c9297c136b0f15880bf567e89a977\") " pod="kube-system/kube-controller-manager-localhost" Sep 9 00:39:39.360726 kubelet[1947]: I0909 00:39:39.360706 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a88c9297c136b0f15880bf567e89a977-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"a88c9297c136b0f15880bf567e89a977\") " pod="kube-system/kube-controller-manager-localhost" Sep 9 00:39:39.360859 kubelet[1947]: I0909 00:39:39.360830 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a88c9297c136b0f15880bf567e89a977-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"a88c9297c136b0f15880bf567e89a977\") " pod="kube-system/kube-controller-manager-localhost" Sep 9 00:39:39.361020 kubelet[1947]: I0909 00:39:39.360998 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b34030df8097eeadda78aaf11c8c4df5-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"b34030df8097eeadda78aaf11c8c4df5\") " pod="kube-system/kube-apiserver-localhost" Sep 9 00:39:39.361131 kubelet[1947]: I0909 00:39:39.361118 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/a88c9297c136b0f15880bf567e89a977-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"a88c9297c136b0f15880bf567e89a977\") " pod="kube-system/kube-controller-manager-localhost" Sep 9 00:39:39.361258 kubelet[1947]: I0909 00:39:39.361244 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a88c9297c136b0f15880bf567e89a977-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"a88c9297c136b0f15880bf567e89a977\") " pod="kube-system/kube-controller-manager-localhost" Sep 9 00:39:39.361373 kubelet[1947]: I0909 00:39:39.361361 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a9176403b596d0b29ae8ad12d635226d-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"a9176403b596d0b29ae8ad12d635226d\") " pod="kube-system/kube-scheduler-localhost" Sep 9 00:39:39.361484 kubelet[1947]: I0909 00:39:39.361468 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b34030df8097eeadda78aaf11c8c4df5-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"b34030df8097eeadda78aaf11c8c4df5\") " pod="kube-system/kube-apiserver-localhost" Sep 9 00:39:39.361607 kubelet[1947]: I0909 00:39:39.361594 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b34030df8097eeadda78aaf11c8c4df5-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"b34030df8097eeadda78aaf11c8c4df5\") " pod="kube-system/kube-apiserver-localhost" Sep 9 00:39:39.585308 kubelet[1947]: E0909 00:39:39.585267 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:39.585425 kubelet[1947]: E0909 00:39:39.585270 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:39.587572 kubelet[1947]: E0909 00:39:39.587546 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:40.134972 kubelet[1947]: I0909 00:39:40.134926 1947 apiserver.go:52] "Watching apiserver" Sep 9 00:39:40.158662 kubelet[1947]: I0909 00:39:40.158623 1947 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Sep 9 00:39:40.188327 kubelet[1947]: E0909 00:39:40.188296 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:40.188864 kubelet[1947]: I0909 00:39:40.188848 1947 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Sep 9 00:39:40.190702 kubelet[1947]: I0909 00:39:40.189146 1947 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Sep 9 00:39:40.195710 kubelet[1947]: E0909 00:39:40.195679 1947 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Sep 9 00:39:40.195866 kubelet[1947]: E0909 00:39:40.195850 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:40.198663 kubelet[1947]: E0909 00:39:40.198483 1947 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Sep 9 00:39:40.198663 kubelet[1947]: E0909 00:39:40.198622 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:40.206919 kubelet[1947]: I0909 00:39:40.206863 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=3.206848873 podStartE2EDuration="3.206848873s" podCreationTimestamp="2025-09-09 00:39:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-09 00:39:40.198098512 +0000 UTC m=+1.127209447" watchObservedRunningTime="2025-09-09 00:39:40.206848873 +0000 UTC m=+1.135959808" Sep 9 00:39:40.215375 kubelet[1947]: I0909 00:39:40.215266 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=3.2152531619999998 podStartE2EDuration="3.215253162s" podCreationTimestamp="2025-09-09 00:39:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-09 00:39:40.207167821 +0000 UTC m=+1.136278756" watchObservedRunningTime="2025-09-09 00:39:40.215253162 +0000 UTC m=+1.144364097" Sep 9 00:39:40.224266 kubelet[1947]: I0909 00:39:40.224216 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=3.224203686 podStartE2EDuration="3.224203686s" podCreationTimestamp="2025-09-09 00:39:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-09 00:39:40.215494533 +0000 UTC m=+1.144605468" watchObservedRunningTime="2025-09-09 00:39:40.224203686 +0000 UTC m=+1.153314621" Sep 9 00:39:40.399000 audit[1805]: AVC avc: denied { watch } for pid=1805 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:39:40.399000 audit[1805]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000cc0020 a2=fc6 a3=0 items=0 ppid=1669 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 key=(null) Sep 9 00:39:40.399000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 9 00:39:40.399000 audit[1805]: AVC avc: denied { watch } for pid=1805 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:39:40.399000 audit[1805]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000cc0060 a2=fc6 a3=0 items=0 ppid=1669 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 key=(null) Sep 9 00:39:40.399000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 9 00:39:40.399000 audit[1805]: AVC avc: denied { watch } for pid=1805 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:39:40.399000 audit[1805]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000cc00a0 a2=fc6 a3=0 items=0 ppid=1669 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 key=(null) Sep 9 00:39:40.399000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 9 00:39:40.400000 audit[1805]: AVC avc: denied { watch } for pid=1805 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:39:40.400000 audit[1805]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000cc00e0 a2=fc6 a3=0 items=0 ppid=1669 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 key=(null) Sep 9 00:39:40.400000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 9 00:39:41.189984 kubelet[1947]: E0909 00:39:41.189942 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:41.190321 kubelet[1947]: E0909 00:39:41.190118 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:41.190321 kubelet[1947]: E0909 00:39:41.190306 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:42.191365 kubelet[1947]: E0909 00:39:42.191332 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:43.917163 kubelet[1947]: I0909 00:39:43.917131 1947 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Sep 9 00:39:43.917806 env[1216]: time="2025-09-09T00:39:43.917707927Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Sep 9 00:39:43.918077 kubelet[1947]: I0909 00:39:43.917902 1947 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Sep 9 00:39:44.244355 kubelet[1947]: E0909 00:39:44.244251 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:44.460615 kubelet[1947]: E0909 00:39:44.460583 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:44.568889 systemd[1]: Created slice kubepods-besteffort-podecdbd86c_ffee_4129_9594_42d9568f5cd4.slice. Sep 9 00:39:44.600080 kubelet[1947]: I0909 00:39:44.600033 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/ecdbd86c-ffee-4129-9594-42d9568f5cd4-lib-modules\") pod \"kube-proxy-lpxtk\" (UID: \"ecdbd86c-ffee-4129-9594-42d9568f5cd4\") " pod="kube-system/kube-proxy-lpxtk" Sep 9 00:39:44.600080 kubelet[1947]: I0909 00:39:44.600089 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/ecdbd86c-ffee-4129-9594-42d9568f5cd4-kube-proxy\") pod \"kube-proxy-lpxtk\" (UID: \"ecdbd86c-ffee-4129-9594-42d9568f5cd4\") " pod="kube-system/kube-proxy-lpxtk" Sep 9 00:39:44.600244 kubelet[1947]: I0909 00:39:44.600110 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/ecdbd86c-ffee-4129-9594-42d9568f5cd4-xtables-lock\") pod \"kube-proxy-lpxtk\" (UID: \"ecdbd86c-ffee-4129-9594-42d9568f5cd4\") " pod="kube-system/kube-proxy-lpxtk" Sep 9 00:39:44.600244 kubelet[1947]: I0909 00:39:44.600129 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tn6hw\" (UniqueName: \"kubernetes.io/projected/ecdbd86c-ffee-4129-9594-42d9568f5cd4-kube-api-access-tn6hw\") pod \"kube-proxy-lpxtk\" (UID: \"ecdbd86c-ffee-4129-9594-42d9568f5cd4\") " pod="kube-system/kube-proxy-lpxtk" Sep 9 00:39:44.708814 kubelet[1947]: I0909 00:39:44.708759 1947 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Sep 9 00:39:44.877250 kubelet[1947]: E0909 00:39:44.877152 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:44.877866 env[1216]: time="2025-09-09T00:39:44.877807226Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-lpxtk,Uid:ecdbd86c-ffee-4129-9594-42d9568f5cd4,Namespace:kube-system,Attempt:0,}" Sep 9 00:39:44.893207 env[1216]: time="2025-09-09T00:39:44.893143714Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 9 00:39:44.893207 env[1216]: time="2025-09-09T00:39:44.893181399Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 9 00:39:44.893318 env[1216]: time="2025-09-09T00:39:44.893209163Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 9 00:39:44.893430 env[1216]: time="2025-09-09T00:39:44.893391146Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d83e96cba29fb4e7071cabd1670266bab71aa834f43d7e642b765ffa572ca831 pid=2007 runtime=io.containerd.runc.v2 Sep 9 00:39:44.913201 systemd[1]: Started cri-containerd-d83e96cba29fb4e7071cabd1670266bab71aa834f43d7e642b765ffa572ca831.scope. Sep 9 00:39:44.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.933978 kernel: kauditd_printk_skb: 265 callbacks suppressed Sep 9 00:39:44.934044 kernel: audit: type=1400 audit(1757378384.929:810): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.934062 kernel: audit: type=1400 audit(1757378384.929:811): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.936224 kernel: audit: type=1400 audit(1757378384.929:812): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.941431 kernel: audit: type=1400 audit(1757378384.929:813): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.945498 kernel: audit: type=1400 audit(1757378384.929:814): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.947156 systemd[1]: Created slice kubepods-besteffort-pod7ae547bd_4c1c_45d2_b31d_ae34c378d2aa.slice. Sep 9 00:39:44.949082 kernel: audit: type=1400 audit(1757378384.929:815): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.951420 kernel: audit: type=1400 audit(1757378384.929:816): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.954357 kernel: audit: type=1400 audit(1757378384.929:817): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.957626 kernel: audit: type=1400 audit(1757378384.929:818): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.959874 kernel: audit: type=1400 audit(1757378384.930:819): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.930000 audit: BPF prog-id=106 op=LOAD Sep 9 00:39:44.937000 audit[2018]: AVC avc: denied { bpf } for pid=2018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.937000 audit[2018]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2007 pid=2018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:44.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438336539366362613239666234653730373163616264313637303236 Sep 9 00:39:44.937000 audit[2018]: AVC avc: denied { perfmon } for pid=2018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.937000 audit[2018]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2007 pid=2018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:44.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438336539366362613239666234653730373163616264313637303236 Sep 9 00:39:44.937000 audit[2018]: AVC avc: denied { bpf } for pid=2018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.937000 audit[2018]: AVC avc: denied { bpf } for pid=2018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.937000 audit[2018]: AVC avc: denied { bpf } for pid=2018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.937000 audit[2018]: AVC avc: denied { perfmon } for pid=2018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.937000 audit[2018]: AVC avc: denied { perfmon } for pid=2018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.937000 audit[2018]: AVC avc: denied { perfmon } for pid=2018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.937000 audit[2018]: AVC avc: denied { perfmon } for pid=2018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.937000 audit[2018]: AVC avc: denied { perfmon } for pid=2018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.937000 audit[2018]: AVC avc: denied { bpf } for pid=2018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.937000 audit[2018]: AVC avc: denied { bpf } for pid=2018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.937000 audit: BPF prog-id=107 op=LOAD Sep 9 00:39:44.937000 audit[2018]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2007 pid=2018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:44.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438336539366362613239666234653730373163616264313637303236 Sep 9 00:39:44.937000 audit[2018]: AVC avc: denied { bpf } for pid=2018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.937000 audit[2018]: AVC avc: denied { bpf } for pid=2018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.937000 audit[2018]: AVC avc: denied { perfmon } for pid=2018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.937000 audit[2018]: AVC avc: denied { perfmon } for pid=2018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.937000 audit[2018]: AVC avc: denied { perfmon } for pid=2018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.937000 audit[2018]: AVC avc: denied { perfmon } for pid=2018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.937000 audit[2018]: AVC avc: denied { perfmon } for pid=2018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.937000 audit[2018]: AVC avc: denied { bpf } for pid=2018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.937000 audit[2018]: AVC avc: denied { bpf } for pid=2018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.937000 audit: BPF prog-id=108 op=LOAD Sep 9 00:39:44.937000 audit[2018]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2007 pid=2018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:44.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438336539366362613239666234653730373163616264313637303236 Sep 9 00:39:44.938000 audit: BPF prog-id=108 op=UNLOAD Sep 9 00:39:44.938000 audit: BPF prog-id=107 op=UNLOAD Sep 9 00:39:44.938000 audit[2018]: AVC avc: denied { bpf } for pid=2018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.938000 audit[2018]: AVC avc: denied { bpf } for pid=2018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.938000 audit[2018]: AVC avc: denied { bpf } for pid=2018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.938000 audit[2018]: AVC avc: denied { perfmon } for pid=2018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.938000 audit[2018]: AVC avc: denied { perfmon } for pid=2018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.938000 audit[2018]: AVC avc: denied { perfmon } for pid=2018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.938000 audit[2018]: AVC avc: denied { perfmon } for pid=2018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.938000 audit[2018]: AVC avc: denied { perfmon } for pid=2018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.938000 audit[2018]: AVC avc: denied { bpf } for pid=2018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.938000 audit[2018]: AVC avc: denied { bpf } for pid=2018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:44.938000 audit: BPF prog-id=109 op=LOAD Sep 9 00:39:44.938000 audit[2018]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2007 pid=2018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:44.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438336539366362613239666234653730373163616264313637303236 Sep 9 00:39:44.963648 env[1216]: time="2025-09-09T00:39:44.963565833Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-lpxtk,Uid:ecdbd86c-ffee-4129-9594-42d9568f5cd4,Namespace:kube-system,Attempt:0,} returns sandbox id \"d83e96cba29fb4e7071cabd1670266bab71aa834f43d7e642b765ffa572ca831\"" Sep 9 00:39:44.964480 kubelet[1947]: E0909 00:39:44.964410 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:44.966862 env[1216]: time="2025-09-09T00:39:44.966827292Z" level=info msg="CreateContainer within sandbox \"d83e96cba29fb4e7071cabd1670266bab71aa834f43d7e642b765ffa572ca831\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Sep 9 00:39:44.978750 env[1216]: time="2025-09-09T00:39:44.978712977Z" level=info msg="CreateContainer within sandbox \"d83e96cba29fb4e7071cabd1670266bab71aa834f43d7e642b765ffa572ca831\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"a1cc2649ca92b91a45fadc1fe64f55d3aea634dfcadba59806d63ea907089752\"" Sep 9 00:39:44.979208 env[1216]: time="2025-09-09T00:39:44.979185918Z" level=info msg="StartContainer for \"a1cc2649ca92b91a45fadc1fe64f55d3aea634dfcadba59806d63ea907089752\"" Sep 9 00:39:44.993468 systemd[1]: Started cri-containerd-a1cc2649ca92b91a45fadc1fe64f55d3aea634dfcadba59806d63ea907089752.scope. Sep 9 00:39:45.003931 kubelet[1947]: I0909 00:39:45.003801 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/7ae547bd-4c1c-45d2-b31d-ae34c378d2aa-var-lib-calico\") pod \"tigera-operator-755d956888-p87tr\" (UID: \"7ae547bd-4c1c-45d2-b31d-ae34c378d2aa\") " pod="tigera-operator/tigera-operator-755d956888-p87tr" Sep 9 00:39:45.003931 kubelet[1947]: I0909 00:39:45.003848 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xsv85\" (UniqueName: \"kubernetes.io/projected/7ae547bd-4c1c-45d2-b31d-ae34c378d2aa-kube-api-access-xsv85\") pod \"tigera-operator-755d956888-p87tr\" (UID: \"7ae547bd-4c1c-45d2-b31d-ae34c378d2aa\") " pod="tigera-operator/tigera-operator-755d956888-p87tr" Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { perfmon } for pid=2048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2007 pid=2048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.010000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131636332363439636139326239316134356661646331666536346635 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { bpf } for pid=2048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { bpf } for pid=2048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { bpf } for pid=2048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { perfmon } for pid=2048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { perfmon } for pid=2048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { perfmon } for pid=2048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { perfmon } for pid=2048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { perfmon } for pid=2048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { bpf } for pid=2048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { bpf } for pid=2048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit: BPF prog-id=110 op=LOAD Sep 9 00:39:45.010000 audit[2048]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2007 pid=2048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.010000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131636332363439636139326239316134356661646331666536346635 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { bpf } for pid=2048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { bpf } for pid=2048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { perfmon } for pid=2048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { perfmon } for pid=2048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { perfmon } for pid=2048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { perfmon } for pid=2048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { perfmon } for pid=2048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { bpf } for pid=2048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { bpf } for pid=2048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit: BPF prog-id=111 op=LOAD Sep 9 00:39:45.010000 audit[2048]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2007 pid=2048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.010000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131636332363439636139326239316134356661646331666536346635 Sep 9 00:39:45.010000 audit: BPF prog-id=111 op=UNLOAD Sep 9 00:39:45.010000 audit: BPF prog-id=110 op=UNLOAD Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { bpf } for pid=2048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { bpf } for pid=2048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { bpf } for pid=2048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { perfmon } for pid=2048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { perfmon } for pid=2048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { perfmon } for pid=2048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { perfmon } for pid=2048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { perfmon } for pid=2048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { bpf } for pid=2048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit[2048]: AVC avc: denied { bpf } for pid=2048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.010000 audit: BPF prog-id=112 op=LOAD Sep 9 00:39:45.010000 audit[2048]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2007 pid=2048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.010000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131636332363439636139326239316134356661646331666536346635 Sep 9 00:39:45.022425 env[1216]: time="2025-09-09T00:39:45.022381471Z" level=info msg="StartContainer for \"a1cc2649ca92b91a45fadc1fe64f55d3aea634dfcadba59806d63ea907089752\" returns successfully" Sep 9 00:39:45.160000 audit[2110]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2110 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.160000 audit[2110]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffed229b50 a2=0 a3=1 items=0 ppid=2059 pid=2110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.160000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 9 00:39:45.161000 audit[2111]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2111 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.161000 audit[2111]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffff329520 a2=0 a3=1 items=0 ppid=2059 pid=2111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.161000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 9 00:39:45.162000 audit[2112]: NETFILTER_CFG table=mangle:40 family=10 entries=1 op=nft_register_chain pid=2112 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.162000 audit[2112]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe416bdd0 a2=0 a3=1 items=0 ppid=2059 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.162000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 9 00:39:45.162000 audit[2114]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=2114 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.162000 audit[2114]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff42ebf50 a2=0 a3=1 items=0 ppid=2059 pid=2114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.162000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 9 00:39:45.166000 audit[2115]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2115 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.166000 audit[2115]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffed616a30 a2=0 a3=1 items=0 ppid=2059 pid=2115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.166000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 9 00:39:45.167000 audit[2116]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2116 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.167000 audit[2116]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd81e9630 a2=0 a3=1 items=0 ppid=2059 pid=2116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.167000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 9 00:39:45.196857 kubelet[1947]: E0909 00:39:45.196548 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:45.196857 kubelet[1947]: E0909 00:39:45.196638 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:45.196857 kubelet[1947]: E0909 00:39:45.196715 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:45.205507 kubelet[1947]: I0909 00:39:45.205248 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-lpxtk" podStartSLOduration=1.205234016 podStartE2EDuration="1.205234016s" podCreationTimestamp="2025-09-09 00:39:44 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-09 00:39:45.20476772 +0000 UTC m=+6.133878655" watchObservedRunningTime="2025-09-09 00:39:45.205234016 +0000 UTC m=+6.134344951" Sep 9 00:39:45.251219 env[1216]: time="2025-09-09T00:39:45.251169550Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-p87tr,Uid:7ae547bd-4c1c-45d2-b31d-ae34c378d2aa,Namespace:tigera-operator,Attempt:0,}" Sep 9 00:39:45.264447 env[1216]: time="2025-09-09T00:39:45.264374472Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 9 00:39:45.264907 env[1216]: time="2025-09-09T00:39:45.264839368Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 9 00:39:45.264955 env[1216]: time="2025-09-09T00:39:45.264904536Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 9 00:39:45.265115 env[1216]: time="2025-09-09T00:39:45.265080638Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/03abda5602d62d425f8a387c36301f843c40fe63980872f10c2b30a0fb146045 pid=2125 runtime=io.containerd.runc.v2 Sep 9 00:39:45.266000 audit[2135]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2135 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.266000 audit[2135]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc5963c60 a2=0 a3=1 items=0 ppid=2059 pid=2135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.266000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 9 00:39:45.268000 audit[2142]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2142 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.268000 audit[2142]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffea70ce30 a2=0 a3=1 items=0 ppid=2059 pid=2142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.268000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Sep 9 00:39:45.271000 audit[2147]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2147 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.271000 audit[2147]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc745d0e0 a2=0 a3=1 items=0 ppid=2059 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.271000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Sep 9 00:39:45.272000 audit[2149]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2149 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.272000 audit[2149]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffd510690 a2=0 a3=1 items=0 ppid=2059 pid=2149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.272000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 9 00:39:45.276608 systemd[1]: Started cri-containerd-03abda5602d62d425f8a387c36301f843c40fe63980872f10c2b30a0fb146045.scope. Sep 9 00:39:45.277000 audit[2151]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2151 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.277000 audit[2151]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdb171dd0 a2=0 a3=1 items=0 ppid=2059 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.277000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 9 00:39:45.279000 audit[2154]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.279000 audit[2154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffcc59d50 a2=0 a3=1 items=0 ppid=2059 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.279000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 9 00:39:45.282000 audit[2163]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2163 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.282000 audit[2163]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffdb6c2150 a2=0 a3=1 items=0 ppid=2059 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.282000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 9 00:39:45.285000 audit[2166]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2166 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.285000 audit[2166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffde8b6a30 a2=0 a3=1 items=0 ppid=2059 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.285000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Sep 9 00:39:45.286000 audit[2167]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.286000 audit[2167]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe53013f0 a2=0 a3=1 items=0 ppid=2059 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.286000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 9 00:39:45.288000 audit[2169]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2169 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.288000 audit[2169]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffef76e190 a2=0 a3=1 items=0 ppid=2059 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.288000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 9 00:39:45.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.290000 audit: BPF prog-id=113 op=LOAD Sep 9 00:39:45.291000 audit[2170]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.291000 audit[2170]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe6820700 a2=0 a3=1 items=0 ppid=2059 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.291000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 9 00:39:45.291000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.291000 audit[2134]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2125 pid=2134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033616264613536303264363264343235663861333837633336333031 Sep 9 00:39:45.291000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.291000 audit[2134]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2125 pid=2134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033616264613536303264363264343235663861333837633336333031 Sep 9 00:39:45.291000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.291000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.291000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.291000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.291000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.291000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.291000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.291000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.291000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.291000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.291000 audit: BPF prog-id=114 op=LOAD Sep 9 00:39:45.291000 audit[2134]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2125 pid=2134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033616264613536303264363264343235663861333837633336333031 Sep 9 00:39:45.291000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.291000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.291000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.291000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.291000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.291000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.291000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.291000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.291000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.291000 audit: BPF prog-id=115 op=LOAD Sep 9 00:39:45.291000 audit[2134]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2125 pid=2134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033616264613536303264363264343235663861333837633336333031 Sep 9 00:39:45.291000 audit: BPF prog-id=115 op=UNLOAD Sep 9 00:39:45.292000 audit: BPF prog-id=114 op=UNLOAD Sep 9 00:39:45.292000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.292000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.292000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.292000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.292000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.292000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.292000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.292000 audit[2134]: AVC avc: denied { perfmon } for pid=2134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.292000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.292000 audit[2134]: AVC avc: denied { bpf } for pid=2134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:45.292000 audit: BPF prog-id=116 op=LOAD Sep 9 00:39:45.292000 audit[2134]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2125 pid=2134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.292000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033616264613536303264363264343235663861333837633336333031 Sep 9 00:39:45.293000 audit[2172]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2172 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.293000 audit[2172]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd85ae350 a2=0 a3=1 items=0 ppid=2059 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.293000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 9 00:39:45.296000 audit[2175]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.296000 audit[2175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc42e2070 a2=0 a3=1 items=0 ppid=2059 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.296000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 9 00:39:45.300000 audit[2178]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2178 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.300000 audit[2178]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdca9e270 a2=0 a3=1 items=0 ppid=2059 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.300000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 9 00:39:45.303000 audit[2180]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.303000 audit[2180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe4760f90 a2=0 a3=1 items=0 ppid=2059 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.303000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 9 00:39:45.306000 audit[2187]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.306000 audit[2187]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffc26c1fb0 a2=0 a3=1 items=0 ppid=2059 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.306000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 9 00:39:45.309770 env[1216]: time="2025-09-09T00:39:45.309725374Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-p87tr,Uid:7ae547bd-4c1c-45d2-b31d-ae34c378d2aa,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"03abda5602d62d425f8a387c36301f843c40fe63980872f10c2b30a0fb146045\"" Sep 9 00:39:45.309000 audit[2190]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2190 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.309000 audit[2190]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffca15ea00 a2=0 a3=1 items=0 ppid=2059 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.309000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 9 00:39:45.311584 env[1216]: time="2025-09-09T00:39:45.311554116Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\"" Sep 9 00:39:45.311000 audit[2191]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.311000 audit[2191]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdd0362c0 a2=0 a3=1 items=0 ppid=2059 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.311000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 9 00:39:45.313000 audit[2193]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2193 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 9 00:39:45.313000 audit[2193]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffdc180770 a2=0 a3=1 items=0 ppid=2059 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.313000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 9 00:39:45.334000 audit[2199]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2199 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:39:45.334000 audit[2199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc6716cf0 a2=0 a3=1 items=0 ppid=2059 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.334000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:39:45.346000 audit[2199]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2199 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:39:45.346000 audit[2199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffc6716cf0 a2=0 a3=1 items=0 ppid=2059 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.346000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:39:45.348000 audit[2204]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2204 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.348000 audit[2204]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffff3eef30 a2=0 a3=1 items=0 ppid=2059 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.348000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 9 00:39:45.351000 audit[2206]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2206 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.351000 audit[2206]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffffa341e0 a2=0 a3=1 items=0 ppid=2059 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.351000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Sep 9 00:39:45.354000 audit[2209]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2209 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.354000 audit[2209]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc792afd0 a2=0 a3=1 items=0 ppid=2059 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.354000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Sep 9 00:39:45.355000 audit[2210]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2210 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.355000 audit[2210]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff1226bd0 a2=0 a3=1 items=0 ppid=2059 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.355000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 9 00:39:45.357000 audit[2212]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2212 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.357000 audit[2212]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc8ed0480 a2=0 a3=1 items=0 ppid=2059 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.357000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 9 00:39:45.358000 audit[2213]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2213 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.358000 audit[2213]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd3770580 a2=0 a3=1 items=0 ppid=2059 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.358000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 9 00:39:45.360000 audit[2215]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2215 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.360000 audit[2215]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd9961080 a2=0 a3=1 items=0 ppid=2059 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.360000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Sep 9 00:39:45.363000 audit[2218]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2218 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.363000 audit[2218]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffff98b9e20 a2=0 a3=1 items=0 ppid=2059 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.363000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 9 00:39:45.365000 audit[2219]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.365000 audit[2219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdbb8a9a0 a2=0 a3=1 items=0 ppid=2059 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.365000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 9 00:39:45.367000 audit[2221]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.367000 audit[2221]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdfb9ef30 a2=0 a3=1 items=0 ppid=2059 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.367000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 9 00:39:45.368000 audit[2222]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.368000 audit[2222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd2846f10 a2=0 a3=1 items=0 ppid=2059 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.368000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 9 00:39:45.370000 audit[2224]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.370000 audit[2224]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe92f2480 a2=0 a3=1 items=0 ppid=2059 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.370000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 9 00:39:45.373000 audit[2227]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.373000 audit[2227]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc48420f0 a2=0 a3=1 items=0 ppid=2059 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.373000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 9 00:39:45.377000 audit[2230]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2230 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.377000 audit[2230]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe4f9db90 a2=0 a3=1 items=0 ppid=2059 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.377000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Sep 9 00:39:45.378000 audit[2231]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.378000 audit[2231]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdbee5aa0 a2=0 a3=1 items=0 ppid=2059 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.378000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 9 00:39:45.380000 audit[2233]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2233 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.380000 audit[2233]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffff007ebd0 a2=0 a3=1 items=0 ppid=2059 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.380000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 9 00:39:45.383000 audit[2236]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.383000 audit[2236]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd60959d0 a2=0 a3=1 items=0 ppid=2059 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.383000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 9 00:39:45.384000 audit[2237]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.384000 audit[2237]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffea5469f0 a2=0 a3=1 items=0 ppid=2059 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.384000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 9 00:39:45.386000 audit[2239]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2239 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.386000 audit[2239]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffcb487610 a2=0 a3=1 items=0 ppid=2059 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.386000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 9 00:39:45.387000 audit[2240]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.387000 audit[2240]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff0da5060 a2=0 a3=1 items=0 ppid=2059 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.387000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 9 00:39:45.390000 audit[2242]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.390000 audit[2242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc575c7d0 a2=0 a3=1 items=0 ppid=2059 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.390000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 9 00:39:45.393000 audit[2245]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2245 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 9 00:39:45.393000 audit[2245]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc3734d70 a2=0 a3=1 items=0 ppid=2059 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.393000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 9 00:39:45.395000 audit[2247]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 9 00:39:45.395000 audit[2247]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffc7496ad0 a2=0 a3=1 items=0 ppid=2059 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.395000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:39:45.396000 audit[2247]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 9 00:39:45.396000 audit[2247]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffc7496ad0 a2=0 a3=1 items=0 ppid=2059 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:45.396000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:39:46.198697 kubelet[1947]: E0909 00:39:46.198670 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:46.488452 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount112526088.mount: Deactivated successfully. Sep 9 00:39:47.293114 env[1216]: time="2025-09-09T00:39:47.293066280Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:47.294523 env[1216]: time="2025-09-09T00:39:47.294487715Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:47.296007 env[1216]: time="2025-09-09T00:39:47.295978997Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:47.297786 env[1216]: time="2025-09-09T00:39:47.297759830Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:00a7a9b62f9b9a4e0856128b078539783b8352b07f707bff595cb604cc580f6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:39:47.298379 env[1216]: time="2025-09-09T00:39:47.298335932Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\" returns image reference \"sha256:dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f\"" Sep 9 00:39:47.301627 env[1216]: time="2025-09-09T00:39:47.301591446Z" level=info msg="CreateContainer within sandbox \"03abda5602d62d425f8a387c36301f843c40fe63980872f10c2b30a0fb146045\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Sep 9 00:39:47.310851 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3512813072.mount: Deactivated successfully. Sep 9 00:39:47.314465 env[1216]: time="2025-09-09T00:39:47.314424119Z" level=info msg="CreateContainer within sandbox \"03abda5602d62d425f8a387c36301f843c40fe63980872f10c2b30a0fb146045\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"7639bb8a756a598fa2203ccd05b496eaaa63a931891b6008535f98721663c015\"" Sep 9 00:39:47.315159 env[1216]: time="2025-09-09T00:39:47.315129356Z" level=info msg="StartContainer for \"7639bb8a756a598fa2203ccd05b496eaaa63a931891b6008535f98721663c015\"" Sep 9 00:39:47.343417 systemd[1]: Started cri-containerd-7639bb8a756a598fa2203ccd05b496eaaa63a931891b6008535f98721663c015.scope. Sep 9 00:39:47.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.359000 audit: BPF prog-id=117 op=LOAD Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2125 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:47.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736333962623861373536613539386661323230336363643035623439 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2125 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:47.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736333962623861373536613539386661323230336363643035623439 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit: BPF prog-id=118 op=LOAD Sep 9 00:39:47.360000 audit[2256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2125 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:47.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736333962623861373536613539386661323230336363643035623439 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit: BPF prog-id=119 op=LOAD Sep 9 00:39:47.360000 audit[2256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2125 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:47.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736333962623861373536613539386661323230336363643035623439 Sep 9 00:39:47.360000 audit: BPF prog-id=119 op=UNLOAD Sep 9 00:39:47.360000 audit: BPF prog-id=118 op=UNLOAD Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:47.360000 audit: BPF prog-id=120 op=LOAD Sep 9 00:39:47.360000 audit[2256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2125 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:47.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736333962623861373536613539386661323230336363643035623439 Sep 9 00:39:47.373719 env[1216]: time="2025-09-09T00:39:47.373673872Z" level=info msg="StartContainer for \"7639bb8a756a598fa2203ccd05b496eaaa63a931891b6008535f98721663c015\" returns successfully" Sep 9 00:39:48.309341 systemd[1]: run-containerd-runc-k8s.io-7639bb8a756a598fa2203ccd05b496eaaa63a931891b6008535f98721663c015-runc.c0D7Z6.mount: Deactivated successfully. Sep 9 00:39:50.291996 kubelet[1947]: E0909 00:39:50.291962 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:50.300615 kubelet[1947]: I0909 00:39:50.300553 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-755d956888-p87tr" podStartSLOduration=4.312118042 podStartE2EDuration="6.300536524s" podCreationTimestamp="2025-09-09 00:39:44 +0000 UTC" firstStartedPulling="2025-09-09 00:39:45.310908718 +0000 UTC m=+6.240019653" lastFinishedPulling="2025-09-09 00:39:47.2993272 +0000 UTC m=+8.228438135" observedRunningTime="2025-09-09 00:39:48.211100831 +0000 UTC m=+9.140211806" watchObservedRunningTime="2025-09-09 00:39:50.300536524 +0000 UTC m=+11.229647459" Sep 9 00:39:52.651237 sudo[1353]: pam_unix(sudo:session): session closed for user root Sep 9 00:39:52.657984 kernel: kauditd_printk_skb: 357 callbacks suppressed Sep 9 00:39:52.658075 kernel: audit: type=1106 audit(1757378392.650:921): pid=1353 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 9 00:39:52.658101 kernel: audit: type=1104 audit(1757378392.650:922): pid=1353 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 9 00:39:52.650000 audit[1353]: USER_END pid=1353 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 9 00:39:52.650000 audit[1353]: CRED_DISP pid=1353 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 9 00:39:52.660482 sshd[1349]: pam_unix(sshd:session): session closed for user core Sep 9 00:39:52.661000 audit[1349]: USER_END pid=1349 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:39:52.663598 systemd[1]: session-7.scope: Deactivated successfully. Sep 9 00:39:52.663769 systemd[1]: session-7.scope: Consumed 6.227s CPU time. Sep 9 00:39:52.664203 systemd[1]: sshd@6-10.0.0.102:22-10.0.0.1:49064.service: Deactivated successfully. Sep 9 00:39:52.666082 systemd-logind[1205]: Session 7 logged out. Waiting for processes to exit. Sep 9 00:39:52.661000 audit[1349]: CRED_DISP pid=1349 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:39:52.669078 kernel: audit: type=1106 audit(1757378392.661:923): pid=1349 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:39:52.669156 kernel: audit: type=1104 audit(1757378392.661:924): pid=1349 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:39:52.669263 systemd-logind[1205]: Removed session 7. Sep 9 00:39:52.663000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.102:22-10.0.0.1:49064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:52.672039 kernel: audit: type=1131 audit(1757378392.663:925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.102:22-10.0.0.1:49064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:39:53.817284 kernel: audit: type=1325 audit(1757378393.808:926): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2343 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:39:53.817487 kernel: audit: type=1300 audit(1757378393.808:926): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffcec6dee0 a2=0 a3=1 items=0 ppid=2059 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:53.817518 kernel: audit: type=1327 audit(1757378393.808:926): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:39:53.808000 audit[2343]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2343 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:39:53.808000 audit[2343]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffcec6dee0 a2=0 a3=1 items=0 ppid=2059 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:53.808000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:39:53.817000 audit[2343]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2343 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:39:53.821943 kernel: audit: type=1325 audit(1757378393.817:927): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2343 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:39:53.817000 audit[2343]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcec6dee0 a2=0 a3=1 items=0 ppid=2059 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:53.817000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:39:53.828959 kernel: audit: type=1300 audit(1757378393.817:927): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcec6dee0 a2=0 a3=1 items=0 ppid=2059 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:53.838000 audit[2345]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2345 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:39:53.838000 audit[2345]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffefb53c70 a2=0 a3=1 items=0 ppid=2059 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:53.838000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:39:53.843000 audit[2345]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2345 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:39:53.843000 audit[2345]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffefb53c70 a2=0 a3=1 items=0 ppid=2059 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:53.843000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:39:55.010048 update_engine[1207]: I0909 00:39:55.009974 1207 update_attempter.cc:509] Updating boot flags... Sep 9 00:39:59.229865 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 9 00:39:59.230071 kernel: audit: type=1325 audit(1757378399.222:930): table=filter:93 family=2 entries=17 op=nft_register_rule pid=2362 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:39:59.230102 kernel: audit: type=1300 audit(1757378399.222:930): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffd2a934c0 a2=0 a3=1 items=0 ppid=2059 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:59.222000 audit[2362]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2362 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:39:59.222000 audit[2362]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffd2a934c0 a2=0 a3=1 items=0 ppid=2059 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:59.222000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:39:59.232319 kernel: audit: type=1327 audit(1757378399.222:930): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:39:59.233000 audit[2362]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2362 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:39:59.233000 audit[2362]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd2a934c0 a2=0 a3=1 items=0 ppid=2059 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:59.240568 kernel: audit: type=1325 audit(1757378399.233:931): table=nat:94 family=2 entries=12 op=nft_register_rule pid=2362 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:39:59.240634 kernel: audit: type=1300 audit(1757378399.233:931): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd2a934c0 a2=0 a3=1 items=0 ppid=2059 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:59.233000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:39:59.244343 kernel: audit: type=1327 audit(1757378399.233:931): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:39:59.261000 audit[2364]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2364 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:39:59.268829 kernel: audit: type=1325 audit(1757378399.261:932): table=filter:95 family=2 entries=18 op=nft_register_rule pid=2364 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:39:59.269049 kernel: audit: type=1300 audit(1757378399.261:932): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff7d3b5f0 a2=0 a3=1 items=0 ppid=2059 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:59.261000 audit[2364]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff7d3b5f0 a2=0 a3=1 items=0 ppid=2059 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:59.261000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:39:59.271992 kernel: audit: type=1327 audit(1757378399.261:932): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:39:59.278000 audit[2364]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2364 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:39:59.281934 kernel: audit: type=1325 audit(1757378399.278:933): table=nat:96 family=2 entries=12 op=nft_register_rule pid=2364 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:39:59.278000 audit[2364]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff7d3b5f0 a2=0 a3=1 items=0 ppid=2059 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:59.278000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:39:59.328196 systemd[1]: Created slice kubepods-besteffort-podca82f1e0_1720_40c2_b7e0_79f67fe16d9c.slice. Sep 9 00:39:59.410585 kubelet[1947]: I0909 00:39:59.410336 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/ca82f1e0-1720-40c2-b7e0-79f67fe16d9c-typha-certs\") pod \"calico-typha-74dd94c8d4-d6tw5\" (UID: \"ca82f1e0-1720-40c2-b7e0-79f67fe16d9c\") " pod="calico-system/calico-typha-74dd94c8d4-d6tw5" Sep 9 00:39:59.410585 kubelet[1947]: I0909 00:39:59.410389 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ca82f1e0-1720-40c2-b7e0-79f67fe16d9c-tigera-ca-bundle\") pod \"calico-typha-74dd94c8d4-d6tw5\" (UID: \"ca82f1e0-1720-40c2-b7e0-79f67fe16d9c\") " pod="calico-system/calico-typha-74dd94c8d4-d6tw5" Sep 9 00:39:59.410585 kubelet[1947]: I0909 00:39:59.410414 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-znhfm\" (UniqueName: \"kubernetes.io/projected/ca82f1e0-1720-40c2-b7e0-79f67fe16d9c-kube-api-access-znhfm\") pod \"calico-typha-74dd94c8d4-d6tw5\" (UID: \"ca82f1e0-1720-40c2-b7e0-79f67fe16d9c\") " pod="calico-system/calico-typha-74dd94c8d4-d6tw5" Sep 9 00:39:59.630825 kubelet[1947]: E0909 00:39:59.630780 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:59.631341 env[1216]: time="2025-09-09T00:39:59.631305110Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-74dd94c8d4-d6tw5,Uid:ca82f1e0-1720-40c2-b7e0-79f67fe16d9c,Namespace:calico-system,Attempt:0,}" Sep 9 00:39:59.650985 env[1216]: time="2025-09-09T00:39:59.650567360Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 9 00:39:59.650985 env[1216]: time="2025-09-09T00:39:59.650601602Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 9 00:39:59.650985 env[1216]: time="2025-09-09T00:39:59.650620003Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 9 00:39:59.650985 env[1216]: time="2025-09-09T00:39:59.650778412Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/143492db54364215839377ce301fe8639340b48558474b44a753c01870aaf4b5 pid=2375 runtime=io.containerd.runc.v2 Sep 9 00:39:59.666101 systemd[1]: Started cri-containerd-143492db54364215839377ce301fe8639340b48558474b44a753c01870aaf4b5.scope. Sep 9 00:39:59.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit: BPF prog-id=121 op=LOAD Sep 9 00:39:59.687000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[2386]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000117b38 a2=10 a3=0 items=0 ppid=2375 pid=2386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:59.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134333439326462353433363432313538333933373763653330316665 Sep 9 00:39:59.687000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[2386]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001175a0 a2=3c a3=0 items=0 ppid=2375 pid=2386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:59.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134333439326462353433363432313538333933373763653330316665 Sep 9 00:39:59.687000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit: BPF prog-id=122 op=LOAD Sep 9 00:39:59.687000 audit[2386]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001178e0 a2=78 a3=0 items=0 ppid=2375 pid=2386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:59.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134333439326462353433363432313538333933373763653330316665 Sep 9 00:39:59.687000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.687000 audit: BPF prog-id=123 op=LOAD Sep 9 00:39:59.687000 audit[2386]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000117670 a2=78 a3=0 items=0 ppid=2375 pid=2386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:59.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134333439326462353433363432313538333933373763653330316665 Sep 9 00:39:59.687000 audit: BPF prog-id=123 op=UNLOAD Sep 9 00:39:59.688000 audit: BPF prog-id=122 op=UNLOAD Sep 9 00:39:59.688000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.688000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.688000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.688000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.688000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.688000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.688000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.688000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.688000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.688000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:39:59.688000 audit: BPF prog-id=124 op=LOAD Sep 9 00:39:59.688000 audit[2386]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000117b40 a2=78 a3=0 items=0 ppid=2375 pid=2386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:39:59.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134333439326462353433363432313538333933373763653330316665 Sep 9 00:39:59.721727 systemd[1]: Created slice kubepods-besteffort-podd3085e5c_bea8_45e3_bd8d_11f1aea41722.slice. Sep 9 00:39:59.729435 env[1216]: time="2025-09-09T00:39:59.729391304Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-74dd94c8d4-d6tw5,Uid:ca82f1e0-1720-40c2-b7e0-79f67fe16d9c,Namespace:calico-system,Attempt:0,} returns sandbox id \"143492db54364215839377ce301fe8639340b48558474b44a753c01870aaf4b5\"" Sep 9 00:39:59.730087 kubelet[1947]: E0909 00:39:59.730064 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:39:59.731018 env[1216]: time="2025-09-09T00:39:59.730968516Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\"" Sep 9 00:39:59.813718 kubelet[1947]: I0909 00:39:59.813673 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/d3085e5c-bea8-45e3-bd8d-11f1aea41722-cni-bin-dir\") pod \"calico-node-xcckb\" (UID: \"d3085e5c-bea8-45e3-bd8d-11f1aea41722\") " pod="calico-system/calico-node-xcckb" Sep 9 00:39:59.813718 kubelet[1947]: I0909 00:39:59.813715 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/d3085e5c-bea8-45e3-bd8d-11f1aea41722-node-certs\") pod \"calico-node-xcckb\" (UID: \"d3085e5c-bea8-45e3-bd8d-11f1aea41722\") " pod="calico-system/calico-node-xcckb" Sep 9 00:39:59.813896 kubelet[1947]: I0909 00:39:59.813733 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-b8mfp\" (UniqueName: \"kubernetes.io/projected/d3085e5c-bea8-45e3-bd8d-11f1aea41722-kube-api-access-b8mfp\") pod \"calico-node-xcckb\" (UID: \"d3085e5c-bea8-45e3-bd8d-11f1aea41722\") " pod="calico-system/calico-node-xcckb" Sep 9 00:39:59.813896 kubelet[1947]: I0909 00:39:59.813752 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/d3085e5c-bea8-45e3-bd8d-11f1aea41722-cni-log-dir\") pod \"calico-node-xcckb\" (UID: \"d3085e5c-bea8-45e3-bd8d-11f1aea41722\") " pod="calico-system/calico-node-xcckb" Sep 9 00:39:59.813896 kubelet[1947]: I0909 00:39:59.813768 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/d3085e5c-bea8-45e3-bd8d-11f1aea41722-policysync\") pod \"calico-node-xcckb\" (UID: \"d3085e5c-bea8-45e3-bd8d-11f1aea41722\") " pod="calico-system/calico-node-xcckb" Sep 9 00:39:59.813896 kubelet[1947]: I0909 00:39:59.813784 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d3085e5c-bea8-45e3-bd8d-11f1aea41722-xtables-lock\") pod \"calico-node-xcckb\" (UID: \"d3085e5c-bea8-45e3-bd8d-11f1aea41722\") " pod="calico-system/calico-node-xcckb" Sep 9 00:39:59.813896 kubelet[1947]: I0909 00:39:59.813799 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/d3085e5c-bea8-45e3-bd8d-11f1aea41722-var-lib-calico\") pod \"calico-node-xcckb\" (UID: \"d3085e5c-bea8-45e3-bd8d-11f1aea41722\") " pod="calico-system/calico-node-xcckb" Sep 9 00:39:59.814060 kubelet[1947]: I0909 00:39:59.813817 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/d3085e5c-bea8-45e3-bd8d-11f1aea41722-cni-net-dir\") pod \"calico-node-xcckb\" (UID: \"d3085e5c-bea8-45e3-bd8d-11f1aea41722\") " pod="calico-system/calico-node-xcckb" Sep 9 00:39:59.814060 kubelet[1947]: I0909 00:39:59.813832 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d3085e5c-bea8-45e3-bd8d-11f1aea41722-lib-modules\") pod \"calico-node-xcckb\" (UID: \"d3085e5c-bea8-45e3-bd8d-11f1aea41722\") " pod="calico-system/calico-node-xcckb" Sep 9 00:39:59.814060 kubelet[1947]: I0909 00:39:59.813855 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d3085e5c-bea8-45e3-bd8d-11f1aea41722-tigera-ca-bundle\") pod \"calico-node-xcckb\" (UID: \"d3085e5c-bea8-45e3-bd8d-11f1aea41722\") " pod="calico-system/calico-node-xcckb" Sep 9 00:39:59.814060 kubelet[1947]: I0909 00:39:59.813868 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/d3085e5c-bea8-45e3-bd8d-11f1aea41722-flexvol-driver-host\") pod \"calico-node-xcckb\" (UID: \"d3085e5c-bea8-45e3-bd8d-11f1aea41722\") " pod="calico-system/calico-node-xcckb" Sep 9 00:39:59.814060 kubelet[1947]: I0909 00:39:59.813889 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/d3085e5c-bea8-45e3-bd8d-11f1aea41722-var-run-calico\") pod \"calico-node-xcckb\" (UID: \"d3085e5c-bea8-45e3-bd8d-11f1aea41722\") " pod="calico-system/calico-node-xcckb" Sep 9 00:39:59.916749 kubelet[1947]: E0909 00:39:59.916651 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:39:59.916749 kubelet[1947]: W0909 00:39:59.916676 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:39:59.917850 kubelet[1947]: E0909 00:39:59.917832 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:39:59.917954 kubelet[1947]: W0909 00:39:59.917940 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:39:59.920086 kubelet[1947]: E0909 00:39:59.920042 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:39:59.920505 kubelet[1947]: E0909 00:39:59.920268 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:39:59.920585 kubelet[1947]: E0909 00:39:59.920516 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:39:59.920651 kubelet[1947]: W0909 00:39:59.920637 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:39:59.920722 kubelet[1947]: E0909 00:39:59.920710 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:39:59.927948 kubelet[1947]: E0909 00:39:59.927924 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:39:59.927948 kubelet[1947]: W0909 00:39:59.927940 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:39:59.928050 kubelet[1947]: E0909 00:39:59.927957 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:39:59.995076 kubelet[1947]: E0909 00:39:59.995034 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bbwbd" podUID="98779d2b-0a70-471f-9d22-2046c220906c" Sep 9 00:39:59.995282 kubelet[1947]: E0909 00:39:59.995255 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:39:59.995282 kubelet[1947]: W0909 00:39:59.995274 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:39:59.995378 kubelet[1947]: E0909 00:39:59.995290 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:39:59.995584 kubelet[1947]: E0909 00:39:59.995556 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:39:59.995652 kubelet[1947]: W0909 00:39:59.995576 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:39:59.995652 kubelet[1947]: E0909 00:39:59.995618 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:39:59.995801 kubelet[1947]: E0909 00:39:59.995784 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:39:59.995801 kubelet[1947]: W0909 00:39:59.995797 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:39:59.995877 kubelet[1947]: E0909 00:39:59.995807 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:39:59.996087 kubelet[1947]: E0909 00:39:59.996057 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:39:59.996087 kubelet[1947]: W0909 00:39:59.996073 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:39:59.996087 kubelet[1947]: E0909 00:39:59.996083 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:39:59.996481 kubelet[1947]: E0909 00:39:59.996375 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:39:59.996481 kubelet[1947]: W0909 00:39:59.996471 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:39:59.996481 kubelet[1947]: E0909 00:39:59.996484 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:39:59.996757 kubelet[1947]: E0909 00:39:59.996731 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:39:59.996757 kubelet[1947]: W0909 00:39:59.996746 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:39:59.996757 kubelet[1947]: E0909 00:39:59.996757 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:39:59.997085 kubelet[1947]: E0909 00:39:59.997061 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:39:59.997085 kubelet[1947]: W0909 00:39:59.997077 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:39:59.997209 kubelet[1947]: E0909 00:39:59.997088 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:39:59.998409 kubelet[1947]: E0909 00:39:59.998384 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:39:59.998409 kubelet[1947]: W0909 00:39:59.998400 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:39:59.998409 kubelet[1947]: E0909 00:39:59.998412 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:39:59.998641 kubelet[1947]: E0909 00:39:59.998616 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:39:59.998641 kubelet[1947]: W0909 00:39:59.998631 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:39:59.998641 kubelet[1947]: E0909 00:39:59.998640 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:39:59.998905 kubelet[1947]: E0909 00:39:59.998879 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:39:59.998905 kubelet[1947]: W0909 00:39:59.998895 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:39:59.998905 kubelet[1947]: E0909 00:39:59.998905 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:39:59.999238 kubelet[1947]: E0909 00:39:59.999212 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:39:59.999238 kubelet[1947]: W0909 00:39:59.999228 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:39:59.999238 kubelet[1947]: E0909 00:39:59.999239 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:39:59.999409 kubelet[1947]: E0909 00:39:59.999388 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:39:59.999409 kubelet[1947]: W0909 00:39:59.999404 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:39:59.999472 kubelet[1947]: E0909 00:39:59.999412 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:39:59.999603 kubelet[1947]: E0909 00:39:59.999578 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:39:59.999603 kubelet[1947]: W0909 00:39:59.999593 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:39:59.999603 kubelet[1947]: E0909 00:39:59.999603 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:39:59.999791 kubelet[1947]: E0909 00:39:59.999765 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:39:59.999791 kubelet[1947]: W0909 00:39:59.999778 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:39:59.999791 kubelet[1947]: E0909 00:39:59.999787 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.000050 kubelet[1947]: E0909 00:40:00.000025 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.000050 kubelet[1947]: W0909 00:40:00.000044 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.000139 kubelet[1947]: E0909 00:40:00.000057 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.000263 kubelet[1947]: E0909 00:40:00.000235 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.000263 kubelet[1947]: W0909 00:40:00.000249 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.000263 kubelet[1947]: E0909 00:40:00.000258 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.000700 kubelet[1947]: E0909 00:40:00.000626 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.000700 kubelet[1947]: W0909 00:40:00.000687 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.000700 kubelet[1947]: E0909 00:40:00.000700 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.001971 kubelet[1947]: E0909 00:40:00.001936 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.001971 kubelet[1947]: W0909 00:40:00.001952 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.001971 kubelet[1947]: E0909 00:40:00.001964 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.002317 kubelet[1947]: E0909 00:40:00.002192 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.002371 kubelet[1947]: W0909 00:40:00.002316 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.002371 kubelet[1947]: E0909 00:40:00.002331 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.003058 kubelet[1947]: E0909 00:40:00.003026 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.003058 kubelet[1947]: W0909 00:40:00.003041 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.003058 kubelet[1947]: E0909 00:40:00.003053 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.015325 kubelet[1947]: E0909 00:40:00.015291 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.015325 kubelet[1947]: W0909 00:40:00.015314 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.015325 kubelet[1947]: E0909 00:40:00.015329 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.015473 kubelet[1947]: I0909 00:40:00.015355 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/98779d2b-0a70-471f-9d22-2046c220906c-registration-dir\") pod \"csi-node-driver-bbwbd\" (UID: \"98779d2b-0a70-471f-9d22-2046c220906c\") " pod="calico-system/csi-node-driver-bbwbd" Sep 9 00:40:00.015517 kubelet[1947]: E0909 00:40:00.015501 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.015517 kubelet[1947]: W0909 00:40:00.015512 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.015578 kubelet[1947]: E0909 00:40:00.015522 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.015578 kubelet[1947]: I0909 00:40:00.015536 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/98779d2b-0a70-471f-9d22-2046c220906c-socket-dir\") pod \"csi-node-driver-bbwbd\" (UID: \"98779d2b-0a70-471f-9d22-2046c220906c\") " pod="calico-system/csi-node-driver-bbwbd" Sep 9 00:40:00.015680 kubelet[1947]: E0909 00:40:00.015668 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.015680 kubelet[1947]: W0909 00:40:00.015680 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.015737 kubelet[1947]: E0909 00:40:00.015695 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.015737 kubelet[1947]: I0909 00:40:00.015710 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/98779d2b-0a70-471f-9d22-2046c220906c-varrun\") pod \"csi-node-driver-bbwbd\" (UID: \"98779d2b-0a70-471f-9d22-2046c220906c\") " pod="calico-system/csi-node-driver-bbwbd" Sep 9 00:40:00.015904 kubelet[1947]: E0909 00:40:00.015886 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.015952 kubelet[1947]: W0909 00:40:00.015903 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.015952 kubelet[1947]: E0909 00:40:00.015937 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.016106 kubelet[1947]: E0909 00:40:00.016094 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.016106 kubelet[1947]: W0909 00:40:00.016106 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.016169 kubelet[1947]: E0909 00:40:00.016116 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.016292 kubelet[1947]: E0909 00:40:00.016279 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.016292 kubelet[1947]: W0909 00:40:00.016291 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.016361 kubelet[1947]: E0909 00:40:00.016305 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.016561 kubelet[1947]: E0909 00:40:00.016541 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.016561 kubelet[1947]: W0909 00:40:00.016554 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.016631 kubelet[1947]: E0909 00:40:00.016566 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.016814 kubelet[1947]: E0909 00:40:00.016782 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.016863 kubelet[1947]: W0909 00:40:00.016800 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.016891 kubelet[1947]: E0909 00:40:00.016871 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.016928 kubelet[1947]: I0909 00:40:00.016891 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/98779d2b-0a70-471f-9d22-2046c220906c-kubelet-dir\") pod \"csi-node-driver-bbwbd\" (UID: \"98779d2b-0a70-471f-9d22-2046c220906c\") " pod="calico-system/csi-node-driver-bbwbd" Sep 9 00:40:00.017217 kubelet[1947]: E0909 00:40:00.017200 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.017217 kubelet[1947]: W0909 00:40:00.017216 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.017371 kubelet[1947]: E0909 00:40:00.017352 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.017407 kubelet[1947]: I0909 00:40:00.017384 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vtrlh\" (UniqueName: \"kubernetes.io/projected/98779d2b-0a70-471f-9d22-2046c220906c-kube-api-access-vtrlh\") pod \"csi-node-driver-bbwbd\" (UID: \"98779d2b-0a70-471f-9d22-2046c220906c\") " pod="calico-system/csi-node-driver-bbwbd" Sep 9 00:40:00.017474 kubelet[1947]: E0909 00:40:00.017464 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.017474 kubelet[1947]: W0909 00:40:00.017473 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.017571 kubelet[1947]: E0909 00:40:00.017545 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.017636 kubelet[1947]: E0909 00:40:00.017613 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.017636 kubelet[1947]: W0909 00:40:00.017630 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.017702 kubelet[1947]: E0909 00:40:00.017643 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.017825 kubelet[1947]: E0909 00:40:00.017808 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.017825 kubelet[1947]: W0909 00:40:00.017819 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.017899 kubelet[1947]: E0909 00:40:00.017832 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.018034 kubelet[1947]: E0909 00:40:00.018016 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.018034 kubelet[1947]: W0909 00:40:00.018029 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.018105 kubelet[1947]: E0909 00:40:00.018039 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.018234 kubelet[1947]: E0909 00:40:00.018218 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.018234 kubelet[1947]: W0909 00:40:00.018229 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.018354 kubelet[1947]: E0909 00:40:00.018238 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.018540 kubelet[1947]: E0909 00:40:00.018518 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.018540 kubelet[1947]: W0909 00:40:00.018534 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.018675 kubelet[1947]: E0909 00:40:00.018546 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.026328 env[1216]: time="2025-09-09T00:40:00.026252291Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-xcckb,Uid:d3085e5c-bea8-45e3-bd8d-11f1aea41722,Namespace:calico-system,Attempt:0,}" Sep 9 00:40:00.040497 env[1216]: time="2025-09-09T00:40:00.040428205Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 9 00:40:00.040497 env[1216]: time="2025-09-09T00:40:00.040476168Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 9 00:40:00.040652 env[1216]: time="2025-09-09T00:40:00.040620456Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 9 00:40:00.040875 env[1216]: time="2025-09-09T00:40:00.040836148Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2b864782bb16a1ea95e9ef2f0f23bab53cacc3ee697bf7a5bf2e00281301c129 pid=2457 runtime=io.containerd.runc.v2 Sep 9 00:40:00.049998 systemd[1]: Started cri-containerd-2b864782bb16a1ea95e9ef2f0f23bab53cacc3ee697bf7a5bf2e00281301c129.scope. Sep 9 00:40:00.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit: BPF prog-id=125 op=LOAD Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2457 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:00.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262383634373832626231366131656139356539656632663066323362 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2457 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:00.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262383634373832626231366131656139356539656632663066323362 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit: BPF prog-id=126 op=LOAD Sep 9 00:40:00.065000 audit[2466]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2457 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:00.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262383634373832626231366131656139356539656632663066323362 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit: BPF prog-id=127 op=LOAD Sep 9 00:40:00.065000 audit[2466]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2457 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:00.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262383634373832626231366131656139356539656632663066323362 Sep 9 00:40:00.065000 audit: BPF prog-id=127 op=UNLOAD Sep 9 00:40:00.065000 audit: BPF prog-id=126 op=UNLOAD Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:00.065000 audit: BPF prog-id=128 op=LOAD Sep 9 00:40:00.065000 audit[2466]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2457 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:00.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262383634373832626231366131656139356539656632663066323362 Sep 9 00:40:00.079672 env[1216]: time="2025-09-09T00:40:00.079639201Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-xcckb,Uid:d3085e5c-bea8-45e3-bd8d-11f1aea41722,Namespace:calico-system,Attempt:0,} returns sandbox id \"2b864782bb16a1ea95e9ef2f0f23bab53cacc3ee697bf7a5bf2e00281301c129\"" Sep 9 00:40:00.118888 kubelet[1947]: E0909 00:40:00.118448 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.118888 kubelet[1947]: W0909 00:40:00.118472 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.118888 kubelet[1947]: E0909 00:40:00.118491 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.118888 kubelet[1947]: E0909 00:40:00.118699 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.118888 kubelet[1947]: W0909 00:40:00.118707 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.118888 kubelet[1947]: E0909 00:40:00.118718 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.119215 kubelet[1947]: E0909 00:40:00.118949 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.119215 kubelet[1947]: W0909 00:40:00.118958 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.119215 kubelet[1947]: E0909 00:40:00.118970 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.119215 kubelet[1947]: E0909 00:40:00.119174 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.119215 kubelet[1947]: W0909 00:40:00.119183 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.119215 kubelet[1947]: E0909 00:40:00.119191 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.119463 kubelet[1947]: E0909 00:40:00.119379 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.119463 kubelet[1947]: W0909 00:40:00.119393 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.119463 kubelet[1947]: E0909 00:40:00.119402 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.119652 kubelet[1947]: E0909 00:40:00.119638 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.119652 kubelet[1947]: W0909 00:40:00.119650 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.120945 kubelet[1947]: E0909 00:40:00.119662 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.120945 kubelet[1947]: E0909 00:40:00.119834 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.120945 kubelet[1947]: W0909 00:40:00.119841 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.120945 kubelet[1947]: E0909 00:40:00.119902 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.120945 kubelet[1947]: E0909 00:40:00.119976 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.120945 kubelet[1947]: W0909 00:40:00.119982 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.120945 kubelet[1947]: E0909 00:40:00.120054 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.120945 kubelet[1947]: E0909 00:40:00.120518 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.120945 kubelet[1947]: W0909 00:40:00.120530 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.120945 kubelet[1947]: E0909 00:40:00.120629 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.124237 kubelet[1947]: E0909 00:40:00.120739 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.124237 kubelet[1947]: W0909 00:40:00.120746 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.124237 kubelet[1947]: E0909 00:40:00.120814 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.124237 kubelet[1947]: E0909 00:40:00.120963 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.124237 kubelet[1947]: W0909 00:40:00.120970 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.124237 kubelet[1947]: E0909 00:40:00.121046 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.124237 kubelet[1947]: E0909 00:40:00.121147 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.124237 kubelet[1947]: W0909 00:40:00.121154 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.124237 kubelet[1947]: E0909 00:40:00.121207 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.124237 kubelet[1947]: E0909 00:40:00.121414 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.126380 kubelet[1947]: W0909 00:40:00.121436 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.126380 kubelet[1947]: E0909 00:40:00.121513 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.126380 kubelet[1947]: E0909 00:40:00.121742 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.126380 kubelet[1947]: W0909 00:40:00.121750 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.126380 kubelet[1947]: E0909 00:40:00.121759 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.126380 kubelet[1947]: E0909 00:40:00.121937 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.126380 kubelet[1947]: W0909 00:40:00.121945 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.126380 kubelet[1947]: E0909 00:40:00.121971 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.126380 kubelet[1947]: E0909 00:40:00.122114 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.126380 kubelet[1947]: W0909 00:40:00.122122 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.126598 kubelet[1947]: E0909 00:40:00.122180 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.126598 kubelet[1947]: E0909 00:40:00.122283 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.126598 kubelet[1947]: W0909 00:40:00.122290 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.126598 kubelet[1947]: E0909 00:40:00.122337 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.126598 kubelet[1947]: E0909 00:40:00.122505 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.126598 kubelet[1947]: W0909 00:40:00.122515 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.126598 kubelet[1947]: E0909 00:40:00.122572 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.126598 kubelet[1947]: E0909 00:40:00.122739 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.126598 kubelet[1947]: W0909 00:40:00.122747 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.126598 kubelet[1947]: E0909 00:40:00.122757 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.127269 kubelet[1947]: E0909 00:40:00.123000 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.127269 kubelet[1947]: W0909 00:40:00.123010 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.127269 kubelet[1947]: E0909 00:40:00.123023 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.127269 kubelet[1947]: E0909 00:40:00.123640 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.127269 kubelet[1947]: W0909 00:40:00.123652 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.127269 kubelet[1947]: E0909 00:40:00.123670 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.127269 kubelet[1947]: E0909 00:40:00.123986 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.127269 kubelet[1947]: W0909 00:40:00.124020 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.127269 kubelet[1947]: E0909 00:40:00.124040 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.127269 kubelet[1947]: E0909 00:40:00.124257 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.127488 kubelet[1947]: W0909 00:40:00.124266 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.127488 kubelet[1947]: E0909 00:40:00.124275 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.127488 kubelet[1947]: E0909 00:40:00.124514 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.127488 kubelet[1947]: W0909 00:40:00.124523 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.127488 kubelet[1947]: E0909 00:40:00.124534 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.127488 kubelet[1947]: E0909 00:40:00.124814 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.127488 kubelet[1947]: W0909 00:40:00.124824 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.127488 kubelet[1947]: E0909 00:40:00.124834 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.142038 kubelet[1947]: E0909 00:40:00.142014 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:00.142038 kubelet[1947]: W0909 00:40:00.142035 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:00.142162 kubelet[1947]: E0909 00:40:00.142053 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:00.293000 audit[2518]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2518 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:00.293000 audit[2518]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffd4f76360 a2=0 a3=1 items=0 ppid=2059 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:00.293000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:00.306000 audit[2518]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2518 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:00.306000 audit[2518]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd4f76360 a2=0 a3=1 items=0 ppid=2059 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:00.306000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:00.754615 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount855961125.mount: Deactivated successfully. Sep 9 00:40:01.177786 kubelet[1947]: E0909 00:40:01.177645 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bbwbd" podUID="98779d2b-0a70-471f-9d22-2046c220906c" Sep 9 00:40:01.448022 env[1216]: time="2025-09-09T00:40:01.447909182Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:01.449589 env[1216]: time="2025-09-09T00:40:01.449556430Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6a1496fdc48cc0b9ab3c10aef777497484efac5df9efbfbbdf9775e9583645cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:01.451334 env[1216]: time="2025-09-09T00:40:01.451309524Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:01.452562 env[1216]: time="2025-09-09T00:40:01.452526069Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:f4a3d61ffda9c98a53adeb412c5af404ca3727a3cc2d0b4ef28d197bdd47ecaa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:01.453076 env[1216]: time="2025-09-09T00:40:01.453042256Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\" returns image reference \"sha256:6a1496fdc48cc0b9ab3c10aef777497484efac5df9efbfbbdf9775e9583645cb\"" Sep 9 00:40:01.458029 env[1216]: time="2025-09-09T00:40:01.458002842Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\"" Sep 9 00:40:01.472467 env[1216]: time="2025-09-09T00:40:01.472425213Z" level=info msg="CreateContainer within sandbox \"143492db54364215839377ce301fe8639340b48558474b44a753c01870aaf4b5\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Sep 9 00:40:01.483558 env[1216]: time="2025-09-09T00:40:01.483521607Z" level=info msg="CreateContainer within sandbox \"143492db54364215839377ce301fe8639340b48558474b44a753c01870aaf4b5\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"254b2a2fb39ffe11510802a24bb063aae515f220ca2d5cc5343678043e7de313\"" Sep 9 00:40:01.484597 env[1216]: time="2025-09-09T00:40:01.484305329Z" level=info msg="StartContainer for \"254b2a2fb39ffe11510802a24bb063aae515f220ca2d5cc5343678043e7de313\"" Sep 9 00:40:01.503483 systemd[1]: Started cri-containerd-254b2a2fb39ffe11510802a24bb063aae515f220ca2d5cc5343678043e7de313.scope. Sep 9 00:40:01.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.517000 audit: BPF prog-id=129 op=LOAD Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2375 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:01.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235346232613266623339666665313135313038303261323462623036 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2375 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:01.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235346232613266623339666665313135313038303261323462623036 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit: BPF prog-id=130 op=LOAD Sep 9 00:40:01.518000 audit[2528]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2375 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:01.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235346232613266623339666665313135313038303261323462623036 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit: BPF prog-id=131 op=LOAD Sep 9 00:40:01.518000 audit[2528]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2375 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:01.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235346232613266623339666665313135313038303261323462623036 Sep 9 00:40:01.518000 audit: BPF prog-id=131 op=UNLOAD Sep 9 00:40:01.518000 audit: BPF prog-id=130 op=UNLOAD Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:01.518000 audit: BPF prog-id=132 op=LOAD Sep 9 00:40:01.518000 audit[2528]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2375 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:01.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235346232613266623339666665313135313038303261323462623036 Sep 9 00:40:01.539111 env[1216]: time="2025-09-09T00:40:01.539069579Z" level=info msg="StartContainer for \"254b2a2fb39ffe11510802a24bb063aae515f220ca2d5cc5343678043e7de313\" returns successfully" Sep 9 00:40:02.234067 kubelet[1947]: E0909 00:40:02.234021 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:40:02.254736 kubelet[1947]: I0909 00:40:02.254677 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-74dd94c8d4-d6tw5" podStartSLOduration=1.5275952959999999 podStartE2EDuration="3.254660825s" podCreationTimestamp="2025-09-09 00:39:59 +0000 UTC" firstStartedPulling="2025-09-09 00:39:59.730664538 +0000 UTC m=+20.659775473" lastFinishedPulling="2025-09-09 00:40:01.457730067 +0000 UTC m=+22.386841002" observedRunningTime="2025-09-09 00:40:02.252835932 +0000 UTC m=+23.181946867" watchObservedRunningTime="2025-09-09 00:40:02.254660825 +0000 UTC m=+23.183771760" Sep 9 00:40:02.317621 kubelet[1947]: E0909 00:40:02.317583 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.317825 kubelet[1947]: W0909 00:40:02.317809 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.317939 kubelet[1947]: E0909 00:40:02.317907 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.318373 kubelet[1947]: E0909 00:40:02.318313 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.318474 kubelet[1947]: W0909 00:40:02.318460 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.318555 kubelet[1947]: E0909 00:40:02.318542 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.318995 kubelet[1947]: E0909 00:40:02.318977 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.319122 kubelet[1947]: W0909 00:40:02.319097 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.319279 kubelet[1947]: E0909 00:40:02.319265 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.319710 kubelet[1947]: E0909 00:40:02.319693 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.319807 kubelet[1947]: W0909 00:40:02.319793 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.321638 kubelet[1947]: E0909 00:40:02.319854 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.322094 kubelet[1947]: E0909 00:40:02.322075 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.322311 kubelet[1947]: W0909 00:40:02.322292 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.322407 kubelet[1947]: E0909 00:40:02.322395 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.322770 kubelet[1947]: E0909 00:40:02.322750 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.323012 kubelet[1947]: W0909 00:40:02.322996 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.323155 kubelet[1947]: E0909 00:40:02.323139 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.323475 kubelet[1947]: E0909 00:40:02.323462 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.323572 kubelet[1947]: W0909 00:40:02.323559 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.324433 kubelet[1947]: E0909 00:40:02.323695 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.324789 kubelet[1947]: E0909 00:40:02.324773 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.324878 kubelet[1947]: W0909 00:40:02.324864 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.324983 kubelet[1947]: E0909 00:40:02.324972 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.325240 kubelet[1947]: E0909 00:40:02.325225 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.325359 kubelet[1947]: W0909 00:40:02.325345 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.325433 kubelet[1947]: E0909 00:40:02.325408 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.325691 kubelet[1947]: E0909 00:40:02.325677 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.325782 kubelet[1947]: W0909 00:40:02.325768 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.325859 kubelet[1947]: E0909 00:40:02.325848 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.326173 kubelet[1947]: E0909 00:40:02.326121 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.326273 kubelet[1947]: W0909 00:40:02.326257 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.326334 kubelet[1947]: E0909 00:40:02.326323 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.326590 kubelet[1947]: E0909 00:40:02.326576 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.326668 kubelet[1947]: W0909 00:40:02.326655 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.326729 kubelet[1947]: E0909 00:40:02.326717 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.326971 kubelet[1947]: E0909 00:40:02.326957 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.327056 kubelet[1947]: W0909 00:40:02.327041 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.327130 kubelet[1947]: E0909 00:40:02.327116 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.327344 kubelet[1947]: E0909 00:40:02.327331 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.327412 kubelet[1947]: W0909 00:40:02.327400 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.327474 kubelet[1947]: E0909 00:40:02.327463 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.327669 kubelet[1947]: E0909 00:40:02.327657 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.327747 kubelet[1947]: W0909 00:40:02.327735 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.327805 kubelet[1947]: E0909 00:40:02.327790 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.347005 kubelet[1947]: E0909 00:40:02.346983 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.347126 kubelet[1947]: W0909 00:40:02.347110 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.347200 kubelet[1947]: E0909 00:40:02.347187 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.347498 kubelet[1947]: E0909 00:40:02.347481 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.347580 kubelet[1947]: W0909 00:40:02.347567 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.347648 kubelet[1947]: E0909 00:40:02.347637 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.347881 kubelet[1947]: E0909 00:40:02.347843 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.347881 kubelet[1947]: W0909 00:40:02.347863 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.347881 kubelet[1947]: E0909 00:40:02.347882 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.348106 kubelet[1947]: E0909 00:40:02.348062 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.348106 kubelet[1947]: W0909 00:40:02.348081 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.348106 kubelet[1947]: E0909 00:40:02.348097 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.348335 kubelet[1947]: E0909 00:40:02.348323 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.348335 kubelet[1947]: W0909 00:40:02.348333 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.348409 kubelet[1947]: E0909 00:40:02.348347 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.348514 kubelet[1947]: E0909 00:40:02.348502 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.348514 kubelet[1947]: W0909 00:40:02.348511 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.348570 kubelet[1947]: E0909 00:40:02.348523 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.348673 kubelet[1947]: E0909 00:40:02.348655 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.348673 kubelet[1947]: W0909 00:40:02.348672 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.348729 kubelet[1947]: E0909 00:40:02.348681 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.348848 kubelet[1947]: E0909 00:40:02.348838 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.348882 kubelet[1947]: W0909 00:40:02.348848 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.348882 kubelet[1947]: E0909 00:40:02.348870 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.349035 kubelet[1947]: E0909 00:40:02.349025 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.349035 kubelet[1947]: W0909 00:40:02.349035 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.349097 kubelet[1947]: E0909 00:40:02.349081 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.349181 kubelet[1947]: E0909 00:40:02.349172 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.349212 kubelet[1947]: W0909 00:40:02.349181 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.349212 kubelet[1947]: E0909 00:40:02.349194 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.349325 kubelet[1947]: E0909 00:40:02.349316 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.349325 kubelet[1947]: W0909 00:40:02.349325 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.349377 kubelet[1947]: E0909 00:40:02.349337 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.349484 kubelet[1947]: E0909 00:40:02.349475 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.349513 kubelet[1947]: W0909 00:40:02.349484 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.349513 kubelet[1947]: E0909 00:40:02.349496 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.349718 kubelet[1947]: E0909 00:40:02.349705 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.349718 kubelet[1947]: W0909 00:40:02.349718 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.349786 kubelet[1947]: E0909 00:40:02.349734 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.349926 kubelet[1947]: E0909 00:40:02.349909 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.349926 kubelet[1947]: W0909 00:40:02.349926 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.349990 kubelet[1947]: E0909 00:40:02.349938 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.350107 kubelet[1947]: E0909 00:40:02.350092 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.350107 kubelet[1947]: W0909 00:40:02.350107 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.350175 kubelet[1947]: E0909 00:40:02.350120 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.350295 kubelet[1947]: E0909 00:40:02.350283 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.350327 kubelet[1947]: W0909 00:40:02.350296 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.350327 kubelet[1947]: E0909 00:40:02.350305 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.350783 kubelet[1947]: E0909 00:40:02.350768 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.350783 kubelet[1947]: W0909 00:40:02.350782 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.350884 kubelet[1947]: E0909 00:40:02.350870 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.350966 kubelet[1947]: E0909 00:40:02.350956 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 9 00:40:02.350966 kubelet[1947]: W0909 00:40:02.350966 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 9 00:40:02.351028 kubelet[1947]: E0909 00:40:02.350974 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 9 00:40:02.788317 env[1216]: time="2025-09-09T00:40:02.788256959Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:02.790347 env[1216]: time="2025-09-09T00:40:02.790322825Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:29e6f31ad72882b1b817dd257df6b7981e4d7d31d872b7fe2cf102c6e2af27a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:02.792078 env[1216]: time="2025-09-09T00:40:02.792047233Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:02.793570 env[1216]: time="2025-09-09T00:40:02.793544070Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:81bdfcd9dbd36624dc35354e8c181c75631ba40e6c7df5820f5f56cea36f0ef9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:02.794036 env[1216]: time="2025-09-09T00:40:02.794013814Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\" returns image reference \"sha256:29e6f31ad72882b1b817dd257df6b7981e4d7d31d872b7fe2cf102c6e2af27a5\"" Sep 9 00:40:02.801097 env[1216]: time="2025-09-09T00:40:02.801068095Z" level=info msg="CreateContainer within sandbox \"2b864782bb16a1ea95e9ef2f0f23bab53cacc3ee697bf7a5bf2e00281301c129\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Sep 9 00:40:02.817644 env[1216]: time="2025-09-09T00:40:02.817610861Z" level=info msg="CreateContainer within sandbox \"2b864782bb16a1ea95e9ef2f0f23bab53cacc3ee697bf7a5bf2e00281301c129\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"6e3d29127c0ec21db34f68302536ffdf7a699ff9ba9ff8b5a50882481345aea8\"" Sep 9 00:40:02.819246 env[1216]: time="2025-09-09T00:40:02.819196262Z" level=info msg="StartContainer for \"6e3d29127c0ec21db34f68302536ffdf7a699ff9ba9ff8b5a50882481345aea8\"" Sep 9 00:40:02.843689 systemd[1]: Started cri-containerd-6e3d29127c0ec21db34f68302536ffdf7a699ff9ba9ff8b5a50882481345aea8.scope. Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { perfmon } for pid=2602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2457 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:02.857000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665336432393132376330656332316462333466363833303235333666 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { bpf } for pid=2602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { bpf } for pid=2602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { bpf } for pid=2602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { perfmon } for pid=2602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { perfmon } for pid=2602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { perfmon } for pid=2602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { perfmon } for pid=2602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { perfmon } for pid=2602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { bpf } for pid=2602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { bpf } for pid=2602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit: BPF prog-id=133 op=LOAD Sep 9 00:40:02.857000 audit[2602]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2457 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:02.857000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665336432393132376330656332316462333466363833303235333666 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { bpf } for pid=2602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { bpf } for pid=2602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { perfmon } for pid=2602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { perfmon } for pid=2602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { perfmon } for pid=2602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { perfmon } for pid=2602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { perfmon } for pid=2602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { bpf } for pid=2602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { bpf } for pid=2602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit: BPF prog-id=134 op=LOAD Sep 9 00:40:02.857000 audit[2602]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2457 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:02.857000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665336432393132376330656332316462333466363833303235333666 Sep 9 00:40:02.857000 audit: BPF prog-id=134 op=UNLOAD Sep 9 00:40:02.857000 audit: BPF prog-id=133 op=UNLOAD Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { bpf } for pid=2602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { bpf } for pid=2602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { bpf } for pid=2602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { perfmon } for pid=2602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { perfmon } for pid=2602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { perfmon } for pid=2602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { perfmon } for pid=2602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { perfmon } for pid=2602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { bpf } for pid=2602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit[2602]: AVC avc: denied { bpf } for pid=2602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:02.857000 audit: BPF prog-id=135 op=LOAD Sep 9 00:40:02.857000 audit[2602]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2457 pid=2602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:02.857000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665336432393132376330656332316462333466363833303235333666 Sep 9 00:40:02.869077 env[1216]: time="2025-09-09T00:40:02.868808640Z" level=info msg="StartContainer for \"6e3d29127c0ec21db34f68302536ffdf7a699ff9ba9ff8b5a50882481345aea8\" returns successfully" Sep 9 00:40:02.885503 systemd[1]: cri-containerd-6e3d29127c0ec21db34f68302536ffdf7a699ff9ba9ff8b5a50882481345aea8.scope: Deactivated successfully. Sep 9 00:40:02.891000 audit: BPF prog-id=135 op=UNLOAD Sep 9 00:40:02.901629 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6e3d29127c0ec21db34f68302536ffdf7a699ff9ba9ff8b5a50882481345aea8-rootfs.mount: Deactivated successfully. Sep 9 00:40:02.974849 env[1216]: time="2025-09-09T00:40:02.974798861Z" level=info msg="shim disconnected" id=6e3d29127c0ec21db34f68302536ffdf7a699ff9ba9ff8b5a50882481345aea8 Sep 9 00:40:02.974849 env[1216]: time="2025-09-09T00:40:02.974848624Z" level=warning msg="cleaning up after shim disconnected" id=6e3d29127c0ec21db34f68302536ffdf7a699ff9ba9ff8b5a50882481345aea8 namespace=k8s.io Sep 9 00:40:02.975162 env[1216]: time="2025-09-09T00:40:02.974861104Z" level=info msg="cleaning up dead shim" Sep 9 00:40:02.981150 env[1216]: time="2025-09-09T00:40:02.981110304Z" level=warning msg="cleanup warnings time=\"2025-09-09T00:40:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2641 runtime=io.containerd.runc.v2\n" Sep 9 00:40:03.178585 kubelet[1947]: E0909 00:40:03.178266 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bbwbd" podUID="98779d2b-0a70-471f-9d22-2046c220906c" Sep 9 00:40:03.235692 kubelet[1947]: I0909 00:40:03.235002 1947 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 9 00:40:03.235692 kubelet[1947]: E0909 00:40:03.235391 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:40:03.236164 env[1216]: time="2025-09-09T00:40:03.236109631Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\"" Sep 9 00:40:05.177834 kubelet[1947]: E0909 00:40:05.177531 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bbwbd" podUID="98779d2b-0a70-471f-9d22-2046c220906c" Sep 9 00:40:05.951101 env[1216]: time="2025-09-09T00:40:05.951055324Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:05.952736 env[1216]: time="2025-09-09T00:40:05.952698118Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7077a1dc632ee598cbfa626f9e3c9bca5b20c0d1e1e557995890125b2e8d2e23,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:05.955663 env[1216]: time="2025-09-09T00:40:05.955625970Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:05.957521 env[1216]: time="2025-09-09T00:40:05.957494974Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:73d1e391050490d54e5bee8ff2b1a50a8be1746c98dc530361b00e8c0ab63f87,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:05.958783 env[1216]: time="2025-09-09T00:40:05.958697388Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\" returns image reference \"sha256:7077a1dc632ee598cbfa626f9e3c9bca5b20c0d1e1e557995890125b2e8d2e23\"" Sep 9 00:40:05.964937 env[1216]: time="2025-09-09T00:40:05.964872266Z" level=info msg="CreateContainer within sandbox \"2b864782bb16a1ea95e9ef2f0f23bab53cacc3ee697bf7a5bf2e00281301c129\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Sep 9 00:40:05.976727 env[1216]: time="2025-09-09T00:40:05.976676076Z" level=info msg="CreateContainer within sandbox \"2b864782bb16a1ea95e9ef2f0f23bab53cacc3ee697bf7a5bf2e00281301c129\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"64ec280350d208551398f04094385299bc353dee472868f44cb582cee39885d4\"" Sep 9 00:40:05.977126 env[1216]: time="2025-09-09T00:40:05.977102976Z" level=info msg="StartContainer for \"64ec280350d208551398f04094385299bc353dee472868f44cb582cee39885d4\"" Sep 9 00:40:05.994719 systemd[1]: run-containerd-runc-k8s.io-64ec280350d208551398f04094385299bc353dee472868f44cb582cee39885d4-runc.OggtO9.mount: Deactivated successfully. Sep 9 00:40:05.998013 systemd[1]: Started cri-containerd-64ec280350d208551398f04094385299bc353dee472868f44cb582cee39885d4.scope. Sep 9 00:40:06.011000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.013459 kernel: kauditd_printk_skb: 223 callbacks suppressed Sep 9 00:40:06.013529 kernel: audit: type=1400 audit(1757378406.011:997): avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.011000 audit[2666]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2457 pid=2666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:06.018412 kernel: audit: type=1300 audit(1757378406.011:997): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2457 pid=2666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:06.018474 kernel: audit: type=1327 audit(1757378406.011:997): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634656332383033353064323038353531333938663034303934333835 Sep 9 00:40:06.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634656332383033353064323038353531333938663034303934333835 Sep 9 00:40:06.012000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.023039 kernel: audit: type=1400 audit(1757378406.012:998): avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.023099 kernel: audit: type=1400 audit(1757378406.012:998): avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.012000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.012000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.026821 kernel: audit: type=1400 audit(1757378406.012:998): avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.026869 kernel: audit: type=1400 audit(1757378406.012:998): avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.012000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.028689 kernel: audit: type=1400 audit(1757378406.012:998): avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.012000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.030553 kernel: audit: type=1400 audit(1757378406.012:998): avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.012000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.032841 kernel: audit: type=1400 audit(1757378406.012:998): avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.012000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.012000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.012000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.012000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.012000 audit: BPF prog-id=136 op=LOAD Sep 9 00:40:06.012000 audit[2666]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2457 pid=2666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:06.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634656332383033353064323038353531333938663034303934333835 Sep 9 00:40:06.012000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.012000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.012000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.012000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.012000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.012000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.012000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.012000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.012000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.012000 audit: BPF prog-id=137 op=LOAD Sep 9 00:40:06.012000 audit[2666]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2457 pid=2666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:06.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634656332383033353064323038353531333938663034303934333835 Sep 9 00:40:06.014000 audit: BPF prog-id=137 op=UNLOAD Sep 9 00:40:06.014000 audit: BPF prog-id=136 op=UNLOAD Sep 9 00:40:06.014000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.014000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.014000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.014000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.014000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.014000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.014000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.014000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.014000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.014000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:06.014000 audit: BPF prog-id=138 op=LOAD Sep 9 00:40:06.014000 audit[2666]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2457 pid=2666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:06.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634656332383033353064323038353531333938663034303934333835 Sep 9 00:40:06.036620 env[1216]: time="2025-09-09T00:40:06.036583185Z" level=info msg="StartContainer for \"64ec280350d208551398f04094385299bc353dee472868f44cb582cee39885d4\" returns successfully" Sep 9 00:40:06.553851 env[1216]: time="2025-09-09T00:40:06.553795383Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 9 00:40:06.555755 systemd[1]: cri-containerd-64ec280350d208551398f04094385299bc353dee472868f44cb582cee39885d4.scope: Deactivated successfully. Sep 9 00:40:06.558000 audit: BPF prog-id=138 op=UNLOAD Sep 9 00:40:06.572253 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-64ec280350d208551398f04094385299bc353dee472868f44cb582cee39885d4-rootfs.mount: Deactivated successfully. Sep 9 00:40:06.635202 kubelet[1947]: I0909 00:40:06.635156 1947 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Sep 9 00:40:06.678821 systemd[1]: Created slice kubepods-burstable-pod40967913_0d9d_4904_ba55_627e610389c1.slice. Sep 9 00:40:06.681096 env[1216]: time="2025-09-09T00:40:06.681042994Z" level=info msg="shim disconnected" id=64ec280350d208551398f04094385299bc353dee472868f44cb582cee39885d4 Sep 9 00:40:06.681096 env[1216]: time="2025-09-09T00:40:06.681090196Z" level=warning msg="cleaning up after shim disconnected" id=64ec280350d208551398f04094385299bc353dee472868f44cb582cee39885d4 namespace=k8s.io Sep 9 00:40:06.681096 env[1216]: time="2025-09-09T00:40:06.681101236Z" level=info msg="cleaning up dead shim" Sep 9 00:40:06.686407 systemd[1]: Created slice kubepods-besteffort-pod4e264071_44ad_445c_9e02_e22ebf1a75c8.slice. Sep 9 00:40:06.693793 systemd[1]: Created slice kubepods-besteffort-podc9c81cb9_9f4a_498f_9525_bd0bbd688f7c.slice. Sep 9 00:40:06.698605 systemd[1]: Created slice kubepods-burstable-pod6096770d_69d8_4927_a6b8_24f7381dda60.slice. Sep 9 00:40:06.703355 systemd[1]: Created slice kubepods-besteffort-pode08827d1_22aa_43c6_828d_2487b6eede6f.slice. Sep 9 00:40:06.707770 systemd[1]: Created slice kubepods-besteffort-pod2bb00f1e_14c7_400a_b599_769947774e65.slice. Sep 9 00:40:06.714659 systemd[1]: Created slice kubepods-besteffort-podfe376a17_0c1c_493f_a52e_f913a3e988a4.slice. Sep 9 00:40:06.720310 env[1216]: time="2025-09-09T00:40:06.720219484Z" level=warning msg="cleanup warnings time=\"2025-09-09T00:40:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2706 runtime=io.containerd.runc.v2\n" Sep 9 00:40:06.781072 kubelet[1947]: I0909 00:40:06.781030 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/2bb00f1e-14c7-400a-b599-769947774e65-whisker-backend-key-pair\") pod \"whisker-bc4dfcc87-pskdq\" (UID: \"2bb00f1e-14c7-400a-b599-769947774e65\") " pod="calico-system/whisker-bc4dfcc87-pskdq" Sep 9 00:40:06.781311 kubelet[1947]: I0909 00:40:06.781284 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/e08827d1-22aa-43c6-828d-2487b6eede6f-goldmane-key-pair\") pod \"goldmane-54d579b49d-cnb7f\" (UID: \"e08827d1-22aa-43c6-828d-2487b6eede6f\") " pod="calico-system/goldmane-54d579b49d-cnb7f" Sep 9 00:40:06.781447 kubelet[1947]: I0909 00:40:06.781422 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/40967913-0d9d-4904-ba55-627e610389c1-config-volume\") pod \"coredns-668d6bf9bc-2fhpp\" (UID: \"40967913-0d9d-4904-ba55-627e610389c1\") " pod="kube-system/coredns-668d6bf9bc-2fhpp" Sep 9 00:40:06.781561 kubelet[1947]: I0909 00:40:06.781545 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jh9bb\" (UniqueName: \"kubernetes.io/projected/40967913-0d9d-4904-ba55-627e610389c1-kube-api-access-jh9bb\") pod \"coredns-668d6bf9bc-2fhpp\" (UID: \"40967913-0d9d-4904-ba55-627e610389c1\") " pod="kube-system/coredns-668d6bf9bc-2fhpp" Sep 9 00:40:06.781668 kubelet[1947]: I0909 00:40:06.781654 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/fe376a17-0c1c-493f-a52e-f913a3e988a4-calico-apiserver-certs\") pod \"calico-apiserver-64697c68d4-xvgpz\" (UID: \"fe376a17-0c1c-493f-a52e-f913a3e988a4\") " pod="calico-apiserver/calico-apiserver-64697c68d4-xvgpz" Sep 9 00:40:06.781761 kubelet[1947]: I0909 00:40:06.781748 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e08827d1-22aa-43c6-828d-2487b6eede6f-goldmane-ca-bundle\") pod \"goldmane-54d579b49d-cnb7f\" (UID: \"e08827d1-22aa-43c6-828d-2487b6eede6f\") " pod="calico-system/goldmane-54d579b49d-cnb7f" Sep 9 00:40:06.781863 kubelet[1947]: I0909 00:40:06.781850 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c9c81cb9-9f4a-498f-9525-bd0bbd688f7c-tigera-ca-bundle\") pod \"calico-kube-controllers-76895984bd-km4sd\" (UID: \"c9c81cb9-9f4a-498f-9525-bd0bbd688f7c\") " pod="calico-system/calico-kube-controllers-76895984bd-km4sd" Sep 9 00:40:06.781972 kubelet[1947]: I0909 00:40:06.781957 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rbxjx\" (UniqueName: \"kubernetes.io/projected/c9c81cb9-9f4a-498f-9525-bd0bbd688f7c-kube-api-access-rbxjx\") pod \"calico-kube-controllers-76895984bd-km4sd\" (UID: \"c9c81cb9-9f4a-498f-9525-bd0bbd688f7c\") " pod="calico-system/calico-kube-controllers-76895984bd-km4sd" Sep 9 00:40:06.782084 kubelet[1947]: I0909 00:40:06.782068 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/4e264071-44ad-445c-9e02-e22ebf1a75c8-calico-apiserver-certs\") pod \"calico-apiserver-64697c68d4-lck72\" (UID: \"4e264071-44ad-445c-9e02-e22ebf1a75c8\") " pod="calico-apiserver/calico-apiserver-64697c68d4-lck72" Sep 9 00:40:06.782176 kubelet[1947]: I0909 00:40:06.782163 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gk55f\" (UniqueName: \"kubernetes.io/projected/6096770d-69d8-4927-a6b8-24f7381dda60-kube-api-access-gk55f\") pod \"coredns-668d6bf9bc-nq8sq\" (UID: \"6096770d-69d8-4927-a6b8-24f7381dda60\") " pod="kube-system/coredns-668d6bf9bc-nq8sq" Sep 9 00:40:06.782279 kubelet[1947]: I0909 00:40:06.782255 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dvkwb\" (UniqueName: \"kubernetes.io/projected/e08827d1-22aa-43c6-828d-2487b6eede6f-kube-api-access-dvkwb\") pod \"goldmane-54d579b49d-cnb7f\" (UID: \"e08827d1-22aa-43c6-828d-2487b6eede6f\") " pod="calico-system/goldmane-54d579b49d-cnb7f" Sep 9 00:40:06.782396 kubelet[1947]: I0909 00:40:06.782382 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7zspk\" (UniqueName: \"kubernetes.io/projected/2bb00f1e-14c7-400a-b599-769947774e65-kube-api-access-7zspk\") pod \"whisker-bc4dfcc87-pskdq\" (UID: \"2bb00f1e-14c7-400a-b599-769947774e65\") " pod="calico-system/whisker-bc4dfcc87-pskdq" Sep 9 00:40:06.782490 kubelet[1947]: I0909 00:40:06.782477 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-f7mn2\" (UniqueName: \"kubernetes.io/projected/fe376a17-0c1c-493f-a52e-f913a3e988a4-kube-api-access-f7mn2\") pod \"calico-apiserver-64697c68d4-xvgpz\" (UID: \"fe376a17-0c1c-493f-a52e-f913a3e988a4\") " pod="calico-apiserver/calico-apiserver-64697c68d4-xvgpz" Sep 9 00:40:06.782594 kubelet[1947]: I0909 00:40:06.782579 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/6096770d-69d8-4927-a6b8-24f7381dda60-config-volume\") pod \"coredns-668d6bf9bc-nq8sq\" (UID: \"6096770d-69d8-4927-a6b8-24f7381dda60\") " pod="kube-system/coredns-668d6bf9bc-nq8sq" Sep 9 00:40:06.782690 kubelet[1947]: I0909 00:40:06.782677 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/e08827d1-22aa-43c6-828d-2487b6eede6f-config\") pod \"goldmane-54d579b49d-cnb7f\" (UID: \"e08827d1-22aa-43c6-828d-2487b6eede6f\") " pod="calico-system/goldmane-54d579b49d-cnb7f" Sep 9 00:40:06.782791 kubelet[1947]: I0909 00:40:06.782776 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2bb00f1e-14c7-400a-b599-769947774e65-whisker-ca-bundle\") pod \"whisker-bc4dfcc87-pskdq\" (UID: \"2bb00f1e-14c7-400a-b599-769947774e65\") " pod="calico-system/whisker-bc4dfcc87-pskdq" Sep 9 00:40:06.782891 kubelet[1947]: I0909 00:40:06.782877 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mr95p\" (UniqueName: \"kubernetes.io/projected/4e264071-44ad-445c-9e02-e22ebf1a75c8-kube-api-access-mr95p\") pod \"calico-apiserver-64697c68d4-lck72\" (UID: \"4e264071-44ad-445c-9e02-e22ebf1a75c8\") " pod="calico-apiserver/calico-apiserver-64697c68d4-lck72" Sep 9 00:40:06.985324 kubelet[1947]: E0909 00:40:06.985219 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:40:06.986801 env[1216]: time="2025-09-09T00:40:06.986748185Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-2fhpp,Uid:40967913-0d9d-4904-ba55-627e610389c1,Namespace:kube-system,Attempt:0,}" Sep 9 00:40:06.992529 env[1216]: time="2025-09-09T00:40:06.992307945Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64697c68d4-lck72,Uid:4e264071-44ad-445c-9e02-e22ebf1a75c8,Namespace:calico-apiserver,Attempt:0,}" Sep 9 00:40:06.997949 env[1216]: time="2025-09-09T00:40:06.997729299Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-76895984bd-km4sd,Uid:c9c81cb9-9f4a-498f-9525-bd0bbd688f7c,Namespace:calico-system,Attempt:0,}" Sep 9 00:40:07.003304 kubelet[1947]: E0909 00:40:07.003255 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:40:07.005655 env[1216]: time="2025-09-09T00:40:07.005603751Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-nq8sq,Uid:6096770d-69d8-4927-a6b8-24f7381dda60,Namespace:kube-system,Attempt:0,}" Sep 9 00:40:07.006399 env[1216]: time="2025-09-09T00:40:07.006365262Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-cnb7f,Uid:e08827d1-22aa-43c6-828d-2487b6eede6f,Namespace:calico-system,Attempt:0,}" Sep 9 00:40:07.011695 env[1216]: time="2025-09-09T00:40:07.011662602Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-bc4dfcc87-pskdq,Uid:2bb00f1e-14c7-400a-b599-769947774e65,Namespace:calico-system,Attempt:0,}" Sep 9 00:40:07.019923 env[1216]: time="2025-09-09T00:40:07.019585930Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64697c68d4-xvgpz,Uid:fe376a17-0c1c-493f-a52e-f913a3e988a4,Namespace:calico-apiserver,Attempt:0,}" Sep 9 00:40:07.115450 env[1216]: time="2025-09-09T00:40:07.115387582Z" level=error msg="Failed to destroy network for sandbox \"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.116023 env[1216]: time="2025-09-09T00:40:07.115985286Z" level=error msg="encountered an error cleaning up failed sandbox \"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.116324 env[1216]: time="2025-09-09T00:40:07.116274978Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64697c68d4-lck72,Uid:4e264071-44ad-445c-9e02-e22ebf1a75c8,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.117586 kubelet[1947]: E0909 00:40:07.117536 1947 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.117674 kubelet[1947]: E0909 00:40:07.117618 1947 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-64697c68d4-lck72" Sep 9 00:40:07.117674 kubelet[1947]: E0909 00:40:07.117638 1947 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-64697c68d4-lck72" Sep 9 00:40:07.117755 kubelet[1947]: E0909 00:40:07.117711 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-64697c68d4-lck72_calico-apiserver(4e264071-44ad-445c-9e02-e22ebf1a75c8)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-64697c68d4-lck72_calico-apiserver(4e264071-44ad-445c-9e02-e22ebf1a75c8)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-64697c68d4-lck72" podUID="4e264071-44ad-445c-9e02-e22ebf1a75c8" Sep 9 00:40:07.127899 env[1216]: time="2025-09-09T00:40:07.127840378Z" level=error msg="Failed to destroy network for sandbox \"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.128743 env[1216]: time="2025-09-09T00:40:07.128703253Z" level=error msg="encountered an error cleaning up failed sandbox \"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.128888 env[1216]: time="2025-09-09T00:40:07.128861260Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-76895984bd-km4sd,Uid:c9c81cb9-9f4a-498f-9525-bd0bbd688f7c,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.129268 kubelet[1947]: E0909 00:40:07.129223 1947 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.129361 kubelet[1947]: E0909 00:40:07.129285 1947 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-76895984bd-km4sd" Sep 9 00:40:07.129361 kubelet[1947]: E0909 00:40:07.129317 1947 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-76895984bd-km4sd" Sep 9 00:40:07.129420 kubelet[1947]: E0909 00:40:07.129360 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-76895984bd-km4sd_calico-system(c9c81cb9-9f4a-498f-9525-bd0bbd688f7c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-76895984bd-km4sd_calico-system(c9c81cb9-9f4a-498f-9525-bd0bbd688f7c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-76895984bd-km4sd" podUID="c9c81cb9-9f4a-498f-9525-bd0bbd688f7c" Sep 9 00:40:07.147751 env[1216]: time="2025-09-09T00:40:07.147690121Z" level=error msg="Failed to destroy network for sandbox \"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.148292 env[1216]: time="2025-09-09T00:40:07.148258424Z" level=error msg="encountered an error cleaning up failed sandbox \"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.148494 env[1216]: time="2025-09-09T00:40:07.148464233Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-nq8sq,Uid:6096770d-69d8-4927-a6b8-24f7381dda60,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.149271 kubelet[1947]: E0909 00:40:07.148905 1947 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.149271 kubelet[1947]: E0909 00:40:07.148979 1947 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-nq8sq" Sep 9 00:40:07.149271 kubelet[1947]: E0909 00:40:07.148998 1947 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-nq8sq" Sep 9 00:40:07.149425 kubelet[1947]: E0909 00:40:07.149046 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-nq8sq_kube-system(6096770d-69d8-4927-a6b8-24f7381dda60)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-nq8sq_kube-system(6096770d-69d8-4927-a6b8-24f7381dda60)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-nq8sq" podUID="6096770d-69d8-4927-a6b8-24f7381dda60" Sep 9 00:40:07.149745 env[1216]: time="2025-09-09T00:40:07.149705564Z" level=error msg="Failed to destroy network for sandbox \"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.150102 env[1216]: time="2025-09-09T00:40:07.150031578Z" level=error msg="encountered an error cleaning up failed sandbox \"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.150173 env[1216]: time="2025-09-09T00:40:07.150119621Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-bc4dfcc87-pskdq,Uid:2bb00f1e-14c7-400a-b599-769947774e65,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.150299 kubelet[1947]: E0909 00:40:07.150262 1947 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.150362 kubelet[1947]: E0909 00:40:07.150313 1947 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-bc4dfcc87-pskdq" Sep 9 00:40:07.150362 kubelet[1947]: E0909 00:40:07.150332 1947 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-bc4dfcc87-pskdq" Sep 9 00:40:07.150417 kubelet[1947]: E0909 00:40:07.150362 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-bc4dfcc87-pskdq_calico-system(2bb00f1e-14c7-400a-b599-769947774e65)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-bc4dfcc87-pskdq_calico-system(2bb00f1e-14c7-400a-b599-769947774e65)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-bc4dfcc87-pskdq" podUID="2bb00f1e-14c7-400a-b599-769947774e65" Sep 9 00:40:07.159588 env[1216]: time="2025-09-09T00:40:07.159521491Z" level=error msg="Failed to destroy network for sandbox \"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.160084 env[1216]: time="2025-09-09T00:40:07.160048833Z" level=error msg="encountered an error cleaning up failed sandbox \"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.160200 env[1216]: time="2025-09-09T00:40:07.160174398Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-cnb7f,Uid:e08827d1-22aa-43c6-828d-2487b6eede6f,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.160512 kubelet[1947]: E0909 00:40:07.160471 1947 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.160601 kubelet[1947]: E0909 00:40:07.160531 1947 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-cnb7f" Sep 9 00:40:07.160601 kubelet[1947]: E0909 00:40:07.160552 1947 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-cnb7f" Sep 9 00:40:07.160665 kubelet[1947]: E0909 00:40:07.160595 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-54d579b49d-cnb7f_calico-system(e08827d1-22aa-43c6-828d-2487b6eede6f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-54d579b49d-cnb7f_calico-system(e08827d1-22aa-43c6-828d-2487b6eede6f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-cnb7f" podUID="e08827d1-22aa-43c6-828d-2487b6eede6f" Sep 9 00:40:07.162006 env[1216]: time="2025-09-09T00:40:07.161965512Z" level=error msg="Failed to destroy network for sandbox \"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.162416 env[1216]: time="2025-09-09T00:40:07.162381650Z" level=error msg="encountered an error cleaning up failed sandbox \"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.162537 env[1216]: time="2025-09-09T00:40:07.162510335Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64697c68d4-xvgpz,Uid:fe376a17-0c1c-493f-a52e-f913a3e988a4,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.162955 kubelet[1947]: E0909 00:40:07.162769 1947 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.162955 kubelet[1947]: E0909 00:40:07.162817 1947 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-64697c68d4-xvgpz" Sep 9 00:40:07.162955 kubelet[1947]: E0909 00:40:07.162835 1947 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-64697c68d4-xvgpz" Sep 9 00:40:07.163100 kubelet[1947]: E0909 00:40:07.162872 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-64697c68d4-xvgpz_calico-apiserver(fe376a17-0c1c-493f-a52e-f913a3e988a4)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-64697c68d4-xvgpz_calico-apiserver(fe376a17-0c1c-493f-a52e-f913a3e988a4)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-64697c68d4-xvgpz" podUID="fe376a17-0c1c-493f-a52e-f913a3e988a4" Sep 9 00:40:07.165476 env[1216]: time="2025-09-09T00:40:07.165436736Z" level=error msg="Failed to destroy network for sandbox \"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.165884 env[1216]: time="2025-09-09T00:40:07.165807112Z" level=error msg="encountered an error cleaning up failed sandbox \"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.166029 env[1216]: time="2025-09-09T00:40:07.165996959Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-2fhpp,Uid:40967913-0d9d-4904-ba55-627e610389c1,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.166448 kubelet[1947]: E0909 00:40:07.166178 1947 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.166448 kubelet[1947]: E0909 00:40:07.166219 1947 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-2fhpp" Sep 9 00:40:07.166448 kubelet[1947]: E0909 00:40:07.166236 1947 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-2fhpp" Sep 9 00:40:07.166562 kubelet[1947]: E0909 00:40:07.166273 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-2fhpp_kube-system(40967913-0d9d-4904-ba55-627e610389c1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-2fhpp_kube-system(40967913-0d9d-4904-ba55-627e610389c1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-2fhpp" podUID="40967913-0d9d-4904-ba55-627e610389c1" Sep 9 00:40:07.183414 systemd[1]: Created slice kubepods-besteffort-pod98779d2b_0a70_471f_9d22_2046c220906c.slice. Sep 9 00:40:07.185573 env[1216]: time="2025-09-09T00:40:07.185534849Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-bbwbd,Uid:98779d2b-0a70-471f-9d22-2046c220906c,Namespace:calico-system,Attempt:0,}" Sep 9 00:40:07.234018 env[1216]: time="2025-09-09T00:40:07.233965097Z" level=error msg="Failed to destroy network for sandbox \"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.234607 env[1216]: time="2025-09-09T00:40:07.234570402Z" level=error msg="encountered an error cleaning up failed sandbox \"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.234664 env[1216]: time="2025-09-09T00:40:07.234631164Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-bbwbd,Uid:98779d2b-0a70-471f-9d22-2046c220906c,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.235200 kubelet[1947]: E0909 00:40:07.234848 1947 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.235200 kubelet[1947]: E0909 00:40:07.234922 1947 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-bbwbd" Sep 9 00:40:07.235200 kubelet[1947]: E0909 00:40:07.234942 1947 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-bbwbd" Sep 9 00:40:07.235401 kubelet[1947]: E0909 00:40:07.234993 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-bbwbd_calico-system(98779d2b-0a70-471f-9d22-2046c220906c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-bbwbd_calico-system(98779d2b-0a70-471f-9d22-2046c220906c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-bbwbd" podUID="98779d2b-0a70-471f-9d22-2046c220906c" Sep 9 00:40:07.244862 env[1216]: time="2025-09-09T00:40:07.244829507Z" level=info msg="StopPodSandbox for \"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\"" Sep 9 00:40:07.245210 kubelet[1947]: I0909 00:40:07.245178 1947 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Sep 9 00:40:07.246391 kubelet[1947]: I0909 00:40:07.246129 1947 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Sep 9 00:40:07.246759 env[1216]: time="2025-09-09T00:40:07.246731906Z" level=info msg="StopPodSandbox for \"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\"" Sep 9 00:40:07.248278 kubelet[1947]: I0909 00:40:07.247935 1947 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Sep 9 00:40:07.248576 env[1216]: time="2025-09-09T00:40:07.248537061Z" level=info msg="StopPodSandbox for \"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\"" Sep 9 00:40:07.250845 kubelet[1947]: I0909 00:40:07.250817 1947 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Sep 9 00:40:07.251488 env[1216]: time="2025-09-09T00:40:07.251462262Z" level=info msg="StopPodSandbox for \"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\"" Sep 9 00:40:07.252303 kubelet[1947]: I0909 00:40:07.252028 1947 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Sep 9 00:40:07.252753 env[1216]: time="2025-09-09T00:40:07.252455583Z" level=info msg="StopPodSandbox for \"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\"" Sep 9 00:40:07.254698 kubelet[1947]: I0909 00:40:07.254394 1947 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Sep 9 00:40:07.254858 env[1216]: time="2025-09-09T00:40:07.254818961Z" level=info msg="StopPodSandbox for \"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\"" Sep 9 00:40:07.258023 kubelet[1947]: I0909 00:40:07.257705 1947 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Sep 9 00:40:07.258335 env[1216]: time="2025-09-09T00:40:07.258281185Z" level=info msg="StopPodSandbox for \"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\"" Sep 9 00:40:07.260054 kubelet[1947]: I0909 00:40:07.259936 1947 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Sep 9 00:40:07.261551 env[1216]: time="2025-09-09T00:40:07.261436956Z" level=info msg="StopPodSandbox for \"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\"" Sep 9 00:40:07.270090 env[1216]: time="2025-09-09T00:40:07.270039152Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\"" Sep 9 00:40:07.298388 env[1216]: time="2025-09-09T00:40:07.298321965Z" level=error msg="StopPodSandbox for \"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\" failed" error="failed to destroy network for sandbox \"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.298725 kubelet[1947]: E0909 00:40:07.298576 1947 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Sep 9 00:40:07.299473 kubelet[1947]: E0909 00:40:07.299330 1947 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba"} Sep 9 00:40:07.299473 kubelet[1947]: E0909 00:40:07.299424 1947 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c9c81cb9-9f4a-498f-9525-bd0bbd688f7c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 9 00:40:07.299473 kubelet[1947]: E0909 00:40:07.299445 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c9c81cb9-9f4a-498f-9525-bd0bbd688f7c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-76895984bd-km4sd" podUID="c9c81cb9-9f4a-498f-9525-bd0bbd688f7c" Sep 9 00:40:07.301087 env[1216]: time="2025-09-09T00:40:07.301046037Z" level=error msg="StopPodSandbox for \"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\" failed" error="failed to destroy network for sandbox \"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.301359 kubelet[1947]: E0909 00:40:07.301331 1947 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Sep 9 00:40:07.301482 kubelet[1947]: E0909 00:40:07.301366 1947 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300"} Sep 9 00:40:07.301482 kubelet[1947]: E0909 00:40:07.301392 1947 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e08827d1-22aa-43c6-828d-2487b6eede6f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 9 00:40:07.301482 kubelet[1947]: E0909 00:40:07.301409 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e08827d1-22aa-43c6-828d-2487b6eede6f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-cnb7f" podUID="e08827d1-22aa-43c6-828d-2487b6eede6f" Sep 9 00:40:07.324649 env[1216]: time="2025-09-09T00:40:07.324581613Z" level=error msg="StopPodSandbox for \"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\" failed" error="failed to destroy network for sandbox \"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.325071 kubelet[1947]: E0909 00:40:07.324928 1947 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Sep 9 00:40:07.325071 kubelet[1947]: E0909 00:40:07.324978 1947 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a"} Sep 9 00:40:07.325071 kubelet[1947]: E0909 00:40:07.325009 1947 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"40967913-0d9d-4904-ba55-627e610389c1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 9 00:40:07.325071 kubelet[1947]: E0909 00:40:07.325034 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"40967913-0d9d-4904-ba55-627e610389c1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-2fhpp" podUID="40967913-0d9d-4904-ba55-627e610389c1" Sep 9 00:40:07.330153 env[1216]: time="2025-09-09T00:40:07.330110562Z" level=error msg="StopPodSandbox for \"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\" failed" error="failed to destroy network for sandbox \"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.330366 kubelet[1947]: E0909 00:40:07.330323 1947 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Sep 9 00:40:07.330413 kubelet[1947]: E0909 00:40:07.330376 1947 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047"} Sep 9 00:40:07.330413 kubelet[1947]: E0909 00:40:07.330406 1947 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"98779d2b-0a70-471f-9d22-2046c220906c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 9 00:40:07.330485 kubelet[1947]: E0909 00:40:07.330426 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"98779d2b-0a70-471f-9d22-2046c220906c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-bbwbd" podUID="98779d2b-0a70-471f-9d22-2046c220906c" Sep 9 00:40:07.331882 env[1216]: time="2025-09-09T00:40:07.331827393Z" level=error msg="StopPodSandbox for \"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\" failed" error="failed to destroy network for sandbox \"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.332119 kubelet[1947]: E0909 00:40:07.332014 1947 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Sep 9 00:40:07.332119 kubelet[1947]: E0909 00:40:07.332046 1947 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6"} Sep 9 00:40:07.332119 kubelet[1947]: E0909 00:40:07.332069 1947 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2bb00f1e-14c7-400a-b599-769947774e65\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 9 00:40:07.332119 kubelet[1947]: E0909 00:40:07.332092 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2bb00f1e-14c7-400a-b599-769947774e65\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-bc4dfcc87-pskdq" podUID="2bb00f1e-14c7-400a-b599-769947774e65" Sep 9 00:40:07.340463 env[1216]: time="2025-09-09T00:40:07.340407509Z" level=error msg="StopPodSandbox for \"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\" failed" error="failed to destroy network for sandbox \"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.340616 kubelet[1947]: E0909 00:40:07.340588 1947 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Sep 9 00:40:07.340659 kubelet[1947]: E0909 00:40:07.340625 1947 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6"} Sep 9 00:40:07.340659 kubelet[1947]: E0909 00:40:07.340650 1947 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6096770d-69d8-4927-a6b8-24f7381dda60\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 9 00:40:07.340747 kubelet[1947]: E0909 00:40:07.340668 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6096770d-69d8-4927-a6b8-24f7381dda60\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-nq8sq" podUID="6096770d-69d8-4927-a6b8-24f7381dda60" Sep 9 00:40:07.345053 env[1216]: time="2025-09-09T00:40:07.345013500Z" level=error msg="StopPodSandbox for \"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\" failed" error="failed to destroy network for sandbox \"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.345335 kubelet[1947]: E0909 00:40:07.345221 1947 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Sep 9 00:40:07.345335 kubelet[1947]: E0909 00:40:07.345254 1947 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d"} Sep 9 00:40:07.345335 kubelet[1947]: E0909 00:40:07.345277 1947 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4e264071-44ad-445c-9e02-e22ebf1a75c8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 9 00:40:07.345335 kubelet[1947]: E0909 00:40:07.345294 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4e264071-44ad-445c-9e02-e22ebf1a75c8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-64697c68d4-lck72" podUID="4e264071-44ad-445c-9e02-e22ebf1a75c8" Sep 9 00:40:07.350402 env[1216]: time="2025-09-09T00:40:07.350353881Z" level=error msg="StopPodSandbox for \"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\" failed" error="failed to destroy network for sandbox \"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 9 00:40:07.350630 kubelet[1947]: E0909 00:40:07.350529 1947 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Sep 9 00:40:07.350630 kubelet[1947]: E0909 00:40:07.350565 1947 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9"} Sep 9 00:40:07.350630 kubelet[1947]: E0909 00:40:07.350587 1947 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"fe376a17-0c1c-493f-a52e-f913a3e988a4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 9 00:40:07.350630 kubelet[1947]: E0909 00:40:07.350604 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"fe376a17-0c1c-493f-a52e-f913a3e988a4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-64697c68d4-xvgpz" podUID="fe376a17-0c1c-493f-a52e-f913a3e988a4" Sep 9 00:40:07.975116 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d-shm.mount: Deactivated successfully. Sep 9 00:40:07.975209 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba-shm.mount: Deactivated successfully. Sep 9 00:40:07.975258 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a-shm.mount: Deactivated successfully. Sep 9 00:40:09.552314 kubelet[1947]: I0909 00:40:09.552284 1947 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 9 00:40:09.553090 kubelet[1947]: E0909 00:40:09.553069 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:40:09.579000 audit[3152]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3152 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:09.579000 audit[3152]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffdbd59c40 a2=0 a3=1 items=0 ppid=2059 pid=3152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:09.579000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:09.589000 audit[3152]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3152 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:09.589000 audit[3152]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffdbd59c40 a2=0 a3=1 items=0 ppid=2059 pid=3152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:09.589000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:10.271634 kubelet[1947]: E0909 00:40:10.271605 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:40:12.154553 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1993886027.mount: Deactivated successfully. Sep 9 00:40:12.223866 env[1216]: time="2025-09-09T00:40:12.223806585Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:12.226661 env[1216]: time="2025-09-09T00:40:12.226621882Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2b8abd2140fc4464ed664d225fe38e5b90bbfcf62996b484b0fc0e0537b6a4a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:12.228133 env[1216]: time="2025-09-09T00:40:12.228097013Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:12.230281 env[1216]: time="2025-09-09T00:40:12.230255447Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:bcb8146fcaeced1e1c88fad3eaa697f1680746bd23c3e7e8d4535bc484c6f2a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:12.230590 env[1216]: time="2025-09-09T00:40:12.230559938Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\" returns image reference \"sha256:2b8abd2140fc4464ed664d225fe38e5b90bbfcf62996b484b0fc0e0537b6a4a9\"" Sep 9 00:40:12.244524 env[1216]: time="2025-09-09T00:40:12.244482297Z" level=info msg="CreateContainer within sandbox \"2b864782bb16a1ea95e9ef2f0f23bab53cacc3ee697bf7a5bf2e00281301c129\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Sep 9 00:40:12.257261 env[1216]: time="2025-09-09T00:40:12.257219816Z" level=info msg="CreateContainer within sandbox \"2b864782bb16a1ea95e9ef2f0f23bab53cacc3ee697bf7a5bf2e00281301c129\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"4f7cbc66ba20c29d967e507969d9dbd8b87654cf2a2baff2c84a5190a4118aa8\"" Sep 9 00:40:12.257936 env[1216]: time="2025-09-09T00:40:12.257824276Z" level=info msg="StartContainer for \"4f7cbc66ba20c29d967e507969d9dbd8b87654cf2a2baff2c84a5190a4118aa8\"" Sep 9 00:40:12.274175 systemd[1]: Started cri-containerd-4f7cbc66ba20c29d967e507969d9dbd8b87654cf2a2baff2c84a5190a4118aa8.scope. Sep 9 00:40:12.293000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.296672 kernel: kauditd_printk_skb: 40 callbacks suppressed Sep 9 00:40:12.296731 kernel: audit: type=1400 audit(1757378412.293:1006): avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.296762 kernel: audit: type=1300 audit(1757378412.293:1006): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2457 pid=3163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:12.293000 audit[3163]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2457 pid=3163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:12.293000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466376362633636626132306332396439363765353037393639643964 Sep 9 00:40:12.302345 kernel: audit: type=1327 audit(1757378412.293:1006): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466376362633636626132306332396439363765353037393639643964 Sep 9 00:40:12.302396 kernel: audit: type=1400 audit(1757378412.293:1007): avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.293000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.293000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.306115 kernel: audit: type=1400 audit(1757378412.293:1007): avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.293000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.308853 kernel: audit: type=1400 audit(1757378412.293:1007): avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.308941 kernel: audit: type=1400 audit(1757378412.293:1007): avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.293000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.311008 kernel: audit: type=1400 audit(1757378412.293:1007): avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.293000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.293000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.314992 kernel: audit: type=1400 audit(1757378412.293:1007): avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.293000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.318092 kernel: audit: type=1400 audit(1757378412.293:1007): avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.293000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.293000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.293000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.293000 audit: BPF prog-id=139 op=LOAD Sep 9 00:40:12.293000 audit[3163]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2457 pid=3163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:12.293000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466376362633636626132306332396439363765353037393639643964 Sep 9 00:40:12.293000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.293000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.293000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.293000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.293000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.293000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.293000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.293000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.293000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.293000 audit: BPF prog-id=140 op=LOAD Sep 9 00:40:12.293000 audit[3163]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2457 pid=3163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:12.293000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466376362633636626132306332396439363765353037393639643964 Sep 9 00:40:12.295000 audit: BPF prog-id=140 op=UNLOAD Sep 9 00:40:12.295000 audit: BPF prog-id=139 op=UNLOAD Sep 9 00:40:12.295000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.295000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.295000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.295000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.295000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.295000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.295000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.295000 audit[3163]: AVC avc: denied { perfmon } for pid=3163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.295000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.295000 audit[3163]: AVC avc: denied { bpf } for pid=3163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:12.295000 audit: BPF prog-id=141 op=LOAD Sep 9 00:40:12.295000 audit[3163]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2457 pid=3163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:12.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466376362633636626132306332396439363765353037393639643964 Sep 9 00:40:12.319270 env[1216]: time="2025-09-09T00:40:12.319231351Z" level=info msg="StartContainer for \"4f7cbc66ba20c29d967e507969d9dbd8b87654cf2a2baff2c84a5190a4118aa8\" returns successfully" Sep 9 00:40:12.437979 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Sep 9 00:40:12.438092 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Sep 9 00:40:12.529077 env[1216]: time="2025-09-09T00:40:12.529038254Z" level=info msg="StopPodSandbox for \"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\"" Sep 9 00:40:12.699469 env[1216]: 2025-09-09 00:40:12.624 [INFO][3214] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Sep 9 00:40:12.699469 env[1216]: 2025-09-09 00:40:12.624 [INFO][3214] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" iface="eth0" netns="/var/run/netns/cni-992a151e-6f8f-548e-6dec-1371dac99708" Sep 9 00:40:12.699469 env[1216]: 2025-09-09 00:40:12.625 [INFO][3214] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" iface="eth0" netns="/var/run/netns/cni-992a151e-6f8f-548e-6dec-1371dac99708" Sep 9 00:40:12.699469 env[1216]: 2025-09-09 00:40:12.626 [INFO][3214] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" iface="eth0" netns="/var/run/netns/cni-992a151e-6f8f-548e-6dec-1371dac99708" Sep 9 00:40:12.699469 env[1216]: 2025-09-09 00:40:12.626 [INFO][3214] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Sep 9 00:40:12.699469 env[1216]: 2025-09-09 00:40:12.626 [INFO][3214] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Sep 9 00:40:12.699469 env[1216]: 2025-09-09 00:40:12.684 [INFO][3229] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" HandleID="k8s-pod-network.d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Workload="localhost-k8s-whisker--bc4dfcc87--pskdq-eth0" Sep 9 00:40:12.699469 env[1216]: 2025-09-09 00:40:12.685 [INFO][3229] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:12.699469 env[1216]: 2025-09-09 00:40:12.685 [INFO][3229] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:12.699469 env[1216]: 2025-09-09 00:40:12.694 [WARNING][3229] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" HandleID="k8s-pod-network.d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Workload="localhost-k8s-whisker--bc4dfcc87--pskdq-eth0" Sep 9 00:40:12.699469 env[1216]: 2025-09-09 00:40:12.694 [INFO][3229] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" HandleID="k8s-pod-network.d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Workload="localhost-k8s-whisker--bc4dfcc87--pskdq-eth0" Sep 9 00:40:12.699469 env[1216]: 2025-09-09 00:40:12.695 [INFO][3229] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:12.699469 env[1216]: 2025-09-09 00:40:12.697 [INFO][3214] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Sep 9 00:40:12.700114 env[1216]: time="2025-09-09T00:40:12.700075702Z" level=info msg="TearDown network for sandbox \"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\" successfully" Sep 9 00:40:12.700196 env[1216]: time="2025-09-09T00:40:12.700179266Z" level=info msg="StopPodSandbox for \"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\" returns successfully" Sep 9 00:40:12.720900 kubelet[1947]: I0909 00:40:12.720405 1947 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-7zspk\" (UniqueName: \"kubernetes.io/projected/2bb00f1e-14c7-400a-b599-769947774e65-kube-api-access-7zspk\") pod \"2bb00f1e-14c7-400a-b599-769947774e65\" (UID: \"2bb00f1e-14c7-400a-b599-769947774e65\") " Sep 9 00:40:12.720900 kubelet[1947]: I0909 00:40:12.720852 1947 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2bb00f1e-14c7-400a-b599-769947774e65-whisker-ca-bundle\") pod \"2bb00f1e-14c7-400a-b599-769947774e65\" (UID: \"2bb00f1e-14c7-400a-b599-769947774e65\") " Sep 9 00:40:12.721392 kubelet[1947]: I0909 00:40:12.721367 1947 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/2bb00f1e-14c7-400a-b599-769947774e65-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "2bb00f1e-14c7-400a-b599-769947774e65" (UID: "2bb00f1e-14c7-400a-b599-769947774e65"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Sep 9 00:40:12.723599 kubelet[1947]: I0909 00:40:12.723556 1947 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/2bb00f1e-14c7-400a-b599-769947774e65-kube-api-access-7zspk" (OuterVolumeSpecName: "kube-api-access-7zspk") pod "2bb00f1e-14c7-400a-b599-769947774e65" (UID: "2bb00f1e-14c7-400a-b599-769947774e65"). InnerVolumeSpecName "kube-api-access-7zspk". PluginName "kubernetes.io/projected", VolumeGIDValue "" Sep 9 00:40:12.821895 kubelet[1947]: I0909 00:40:12.821580 1947 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/2bb00f1e-14c7-400a-b599-769947774e65-whisker-backend-key-pair\") pod \"2bb00f1e-14c7-400a-b599-769947774e65\" (UID: \"2bb00f1e-14c7-400a-b599-769947774e65\") " Sep 9 00:40:12.822064 kubelet[1947]: I0909 00:40:12.821993 1947 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2bb00f1e-14c7-400a-b599-769947774e65-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Sep 9 00:40:12.822064 kubelet[1947]: I0909 00:40:12.822017 1947 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-7zspk\" (UniqueName: \"kubernetes.io/projected/2bb00f1e-14c7-400a-b599-769947774e65-kube-api-access-7zspk\") on node \"localhost\" DevicePath \"\"" Sep 9 00:40:12.825554 kubelet[1947]: I0909 00:40:12.825515 1947 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/2bb00f1e-14c7-400a-b599-769947774e65-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "2bb00f1e-14c7-400a-b599-769947774e65" (UID: "2bb00f1e-14c7-400a-b599-769947774e65"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Sep 9 00:40:12.922927 kubelet[1947]: I0909 00:40:12.922874 1947 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/2bb00f1e-14c7-400a-b599-769947774e65-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Sep 9 00:40:13.155445 systemd[1]: run-netns-cni\x2d992a151e\x2d6f8f\x2d548e\x2d6dec\x2d1371dac99708.mount: Deactivated successfully. Sep 9 00:40:13.155551 systemd[1]: var-lib-kubelet-pods-2bb00f1e\x2d14c7\x2d400a\x2db599\x2d769947774e65-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d7zspk.mount: Deactivated successfully. Sep 9 00:40:13.155608 systemd[1]: var-lib-kubelet-pods-2bb00f1e\x2d14c7\x2d400a\x2db599\x2d769947774e65-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Sep 9 00:40:13.188033 systemd[1]: Removed slice kubepods-besteffort-pod2bb00f1e_14c7_400a_b599_769947774e65.slice. Sep 9 00:40:13.344527 systemd[1]: run-containerd-runc-k8s.io-4f7cbc66ba20c29d967e507969d9dbd8b87654cf2a2baff2c84a5190a4118aa8-runc.onUlk1.mount: Deactivated successfully. Sep 9 00:40:13.347046 kubelet[1947]: I0909 00:40:13.346987 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-xcckb" podStartSLOduration=2.196024139 podStartE2EDuration="14.346965776s" podCreationTimestamp="2025-09-09 00:39:59 +0000 UTC" firstStartedPulling="2025-09-09 00:40:00.080564733 +0000 UTC m=+21.009675668" lastFinishedPulling="2025-09-09 00:40:12.23150637 +0000 UTC m=+33.160617305" observedRunningTime="2025-09-09 00:40:13.346717488 +0000 UTC m=+34.275828423" watchObservedRunningTime="2025-09-09 00:40:13.346965776 +0000 UTC m=+34.276076711" Sep 9 00:40:13.403082 systemd[1]: Created slice kubepods-besteffort-podef8bedfb_52ff_4d50_adb6_d40c7683b09b.slice. Sep 9 00:40:13.425199 kubelet[1947]: I0909 00:40:13.425090 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ef8bedfb-52ff-4d50-adb6-d40c7683b09b-whisker-ca-bundle\") pod \"whisker-859985c88b-lw5z4\" (UID: \"ef8bedfb-52ff-4d50-adb6-d40c7683b09b\") " pod="calico-system/whisker-859985c88b-lw5z4" Sep 9 00:40:13.425368 kubelet[1947]: I0909 00:40:13.425352 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/ef8bedfb-52ff-4d50-adb6-d40c7683b09b-whisker-backend-key-pair\") pod \"whisker-859985c88b-lw5z4\" (UID: \"ef8bedfb-52ff-4d50-adb6-d40c7683b09b\") " pod="calico-system/whisker-859985c88b-lw5z4" Sep 9 00:40:13.425451 kubelet[1947]: I0909 00:40:13.425438 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rhbwf\" (UniqueName: \"kubernetes.io/projected/ef8bedfb-52ff-4d50-adb6-d40c7683b09b-kube-api-access-rhbwf\") pod \"whisker-859985c88b-lw5z4\" (UID: \"ef8bedfb-52ff-4d50-adb6-d40c7683b09b\") " pod="calico-system/whisker-859985c88b-lw5z4" Sep 9 00:40:13.706686 env[1216]: time="2025-09-09T00:40:13.706578143Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-859985c88b-lw5z4,Uid:ef8bedfb-52ff-4d50-adb6-d40c7683b09b,Namespace:calico-system,Attempt:0,}" Sep 9 00:40:13.813000 audit[3348]: AVC avc: denied { write } for pid=3348 comm="tee" name="fd" dev="proc" ino=19698 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 9 00:40:13.813000 audit[3348]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd598a7e9 a2=241 a3=1b6 items=1 ppid=3304 pid=3348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:13.813000 audit: CWD cwd="/etc/service/enabled/bird6/log" Sep 9 00:40:13.813000 audit: PATH item=0 name="/dev/fd/63" inode=21543 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 9 00:40:13.813000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 9 00:40:13.815000 audit[3329]: AVC avc: denied { write } for pid=3329 comm="tee" name="fd" dev="proc" ino=21549 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 9 00:40:13.815000 audit[3329]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcfa027e9 a2=241 a3=1b6 items=1 ppid=3300 pid=3329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:13.815000 audit: CWD cwd="/etc/service/enabled/confd/log" Sep 9 00:40:13.815000 audit: PATH item=0 name="/dev/fd/63" inode=19693 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 9 00:40:13.815000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 9 00:40:13.827000 audit[3353]: AVC avc: denied { write } for pid=3353 comm="tee" name="fd" dev="proc" ino=19711 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 9 00:40:13.827000 audit[3353]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc16977e9 a2=241 a3=1b6 items=1 ppid=3297 pid=3353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:13.830000 audit[3365]: AVC avc: denied { write } for pid=3365 comm="tee" name="fd" dev="proc" ino=19715 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 9 00:40:13.830000 audit[3365]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffef1c97ea a2=241 a3=1b6 items=1 ppid=3302 pid=3365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:13.830000 audit: CWD cwd="/etc/service/enabled/bird/log" Sep 9 00:40:13.830000 audit: PATH item=0 name="/dev/fd/63" inode=19708 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 9 00:40:13.830000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 9 00:40:13.836000 audit[3367]: AVC avc: denied { write } for pid=3367 comm="tee" name="fd" dev="proc" ino=19719 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 9 00:40:13.836000 audit[3367]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcfb6e7da a2=241 a3=1b6 items=1 ppid=3305 pid=3367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:13.836000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Sep 9 00:40:13.827000 audit: CWD cwd="/etc/service/enabled/felix/log" Sep 9 00:40:13.827000 audit: PATH item=0 name="/dev/fd/63" inode=21548 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 9 00:40:13.827000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 9 00:40:13.836000 audit: PATH item=0 name="/dev/fd/63" inode=21556 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 9 00:40:13.836000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 9 00:40:13.853000 audit[3372]: AVC avc: denied { write } for pid=3372 comm="tee" name="fd" dev="proc" ino=19725 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 9 00:40:13.853000 audit[3372]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffc88a7d9 a2=241 a3=1b6 items=1 ppid=3295 pid=3372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:13.853000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Sep 9 00:40:13.853000 audit: PATH item=0 name="/dev/fd/63" inode=20647 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 9 00:40:13.853000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 9 00:40:13.888000 audit[3385]: AVC avc: denied { write } for pid=3385 comm="tee" name="fd" dev="proc" ino=20659 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 9 00:40:13.888000 audit[3385]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffecb0e7eb a2=241 a3=1b6 items=1 ppid=3320 pid=3385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:13.888000 audit: CWD cwd="/etc/service/enabled/cni/log" Sep 9 00:40:13.888000 audit: PATH item=0 name="/dev/fd/63" inode=20652 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 9 00:40:13.888000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 9 00:40:13.892017 systemd-networkd[1042]: calie986eeb7f45: Link UP Sep 9 00:40:13.894152 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 9 00:40:13.894243 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie986eeb7f45: link becomes ready Sep 9 00:40:13.894322 systemd-networkd[1042]: calie986eeb7f45: Gained carrier Sep 9 00:40:13.918666 env[1216]: 2025-09-09 00:40:13.769 [INFO][3273] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 9 00:40:13.918666 env[1216]: 2025-09-09 00:40:13.782 [INFO][3273] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--859985c88b--lw5z4-eth0 whisker-859985c88b- calico-system ef8bedfb-52ff-4d50-adb6-d40c7683b09b 943 0 2025-09-09 00:40:13 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:859985c88b projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-859985c88b-lw5z4 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calie986eeb7f45 [] [] }} ContainerID="5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2" Namespace="calico-system" Pod="whisker-859985c88b-lw5z4" WorkloadEndpoint="localhost-k8s-whisker--859985c88b--lw5z4-" Sep 9 00:40:13.918666 env[1216]: 2025-09-09 00:40:13.782 [INFO][3273] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2" Namespace="calico-system" Pod="whisker-859985c88b-lw5z4" WorkloadEndpoint="localhost-k8s-whisker--859985c88b--lw5z4-eth0" Sep 9 00:40:13.918666 env[1216]: 2025-09-09 00:40:13.819 [INFO][3296] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2" HandleID="k8s-pod-network.5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2" Workload="localhost-k8s-whisker--859985c88b--lw5z4-eth0" Sep 9 00:40:13.918666 env[1216]: 2025-09-09 00:40:13.819 [INFO][3296] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2" HandleID="k8s-pod-network.5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2" Workload="localhost-k8s-whisker--859985c88b--lw5z4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000137720), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-859985c88b-lw5z4", "timestamp":"2025-09-09 00:40:13.819389896 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 9 00:40:13.918666 env[1216]: 2025-09-09 00:40:13.819 [INFO][3296] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:13.918666 env[1216]: 2025-09-09 00:40:13.819 [INFO][3296] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:13.918666 env[1216]: 2025-09-09 00:40:13.819 [INFO][3296] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 9 00:40:13.918666 env[1216]: 2025-09-09 00:40:13.834 [INFO][3296] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2" host="localhost" Sep 9 00:40:13.918666 env[1216]: 2025-09-09 00:40:13.849 [INFO][3296] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 9 00:40:13.918666 env[1216]: 2025-09-09 00:40:13.855 [INFO][3296] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 9 00:40:13.918666 env[1216]: 2025-09-09 00:40:13.859 [INFO][3296] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 9 00:40:13.918666 env[1216]: 2025-09-09 00:40:13.861 [INFO][3296] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 9 00:40:13.918666 env[1216]: 2025-09-09 00:40:13.861 [INFO][3296] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2" host="localhost" Sep 9 00:40:13.918666 env[1216]: 2025-09-09 00:40:13.862 [INFO][3296] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2 Sep 9 00:40:13.918666 env[1216]: 2025-09-09 00:40:13.872 [INFO][3296] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2" host="localhost" Sep 9 00:40:13.918666 env[1216]: 2025-09-09 00:40:13.877 [INFO][3296] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2" host="localhost" Sep 9 00:40:13.918666 env[1216]: 2025-09-09 00:40:13.877 [INFO][3296] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2" host="localhost" Sep 9 00:40:13.918666 env[1216]: 2025-09-09 00:40:13.877 [INFO][3296] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:13.918666 env[1216]: 2025-09-09 00:40:13.877 [INFO][3296] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2" HandleID="k8s-pod-network.5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2" Workload="localhost-k8s-whisker--859985c88b--lw5z4-eth0" Sep 9 00:40:13.919259 env[1216]: 2025-09-09 00:40:13.879 [INFO][3273] cni-plugin/k8s.go 418: Populated endpoint ContainerID="5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2" Namespace="calico-system" Pod="whisker-859985c88b-lw5z4" WorkloadEndpoint="localhost-k8s-whisker--859985c88b--lw5z4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--859985c88b--lw5z4-eth0", GenerateName:"whisker-859985c88b-", Namespace:"calico-system", SelfLink:"", UID:"ef8bedfb-52ff-4d50-adb6-d40c7683b09b", ResourceVersion:"943", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 40, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"859985c88b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-859985c88b-lw5z4", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calie986eeb7f45", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:13.919259 env[1216]: 2025-09-09 00:40:13.879 [INFO][3273] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2" Namespace="calico-system" Pod="whisker-859985c88b-lw5z4" WorkloadEndpoint="localhost-k8s-whisker--859985c88b--lw5z4-eth0" Sep 9 00:40:13.919259 env[1216]: 2025-09-09 00:40:13.879 [INFO][3273] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie986eeb7f45 ContainerID="5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2" Namespace="calico-system" Pod="whisker-859985c88b-lw5z4" WorkloadEndpoint="localhost-k8s-whisker--859985c88b--lw5z4-eth0" Sep 9 00:40:13.919259 env[1216]: 2025-09-09 00:40:13.894 [INFO][3273] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2" Namespace="calico-system" Pod="whisker-859985c88b-lw5z4" WorkloadEndpoint="localhost-k8s-whisker--859985c88b--lw5z4-eth0" Sep 9 00:40:13.919259 env[1216]: 2025-09-09 00:40:13.895 [INFO][3273] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2" Namespace="calico-system" Pod="whisker-859985c88b-lw5z4" WorkloadEndpoint="localhost-k8s-whisker--859985c88b--lw5z4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--859985c88b--lw5z4-eth0", GenerateName:"whisker-859985c88b-", Namespace:"calico-system", SelfLink:"", UID:"ef8bedfb-52ff-4d50-adb6-d40c7683b09b", ResourceVersion:"943", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 40, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"859985c88b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2", Pod:"whisker-859985c88b-lw5z4", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calie986eeb7f45", MAC:"f2:7e:7b:56:5e:04", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:13.919259 env[1216]: 2025-09-09 00:40:13.916 [INFO][3273] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2" Namespace="calico-system" Pod="whisker-859985c88b-lw5z4" WorkloadEndpoint="localhost-k8s-whisker--859985c88b--lw5z4-eth0" Sep 9 00:40:13.942767 env[1216]: time="2025-09-09T00:40:13.942679439Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 9 00:40:13.942767 env[1216]: time="2025-09-09T00:40:13.942722440Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 9 00:40:13.942767 env[1216]: time="2025-09-09T00:40:13.942733801Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 9 00:40:13.943036 env[1216]: time="2025-09-09T00:40:13.942868725Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2 pid=3406 runtime=io.containerd.runc.v2 Sep 9 00:40:13.992125 systemd[1]: Started cri-containerd-5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2.scope. Sep 9 00:40:14.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit: BPF prog-id=142 op=LOAD Sep 9 00:40:14.019000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit[3416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400018db38 a2=10 a3=0 items=0 ppid=3406 pid=3416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.019000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564623663396131346337653635326635633064396261663461363833 Sep 9 00:40:14.019000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit[3416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400018d5a0 a2=3c a3=0 items=0 ppid=3406 pid=3416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.019000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564623663396131346337653635326635633064396261663461363833 Sep 9 00:40:14.019000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.019000 audit: BPF prog-id=143 op=LOAD Sep 9 00:40:14.019000 audit[3416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400018d8e0 a2=78 a3=0 items=0 ppid=3406 pid=3416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.019000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564623663396131346337653635326635633064396261663461363833 Sep 9 00:40:14.020000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.020000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.020000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.020000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.020000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.020000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.020000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.020000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.020000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.020000 audit: BPF prog-id=144 op=LOAD Sep 9 00:40:14.020000 audit[3416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400018d670 a2=78 a3=0 items=0 ppid=3406 pid=3416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.020000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564623663396131346337653635326635633064396261663461363833 Sep 9 00:40:14.020000 audit: BPF prog-id=144 op=UNLOAD Sep 9 00:40:14.020000 audit: BPF prog-id=143 op=UNLOAD Sep 9 00:40:14.020000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.020000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.020000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.020000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.020000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.020000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.020000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.020000 audit[3416]: AVC avc: denied { perfmon } for pid=3416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.020000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.020000 audit[3416]: AVC avc: denied { bpf } for pid=3416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.020000 audit: BPF prog-id=145 op=LOAD Sep 9 00:40:14.020000 audit[3416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400018db40 a2=78 a3=0 items=0 ppid=3406 pid=3416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.020000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564623663396131346337653635326635633064396261663461363833 Sep 9 00:40:14.022780 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit: BPF prog-id=146 op=LOAD Sep 9 00:40:14.045000 audit[3464]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe59df338 a2=98 a3=ffffe59df328 items=0 ppid=3299 pid=3464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.045000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 9 00:40:14.045000 audit: BPF prog-id=146 op=UNLOAD Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit: BPF prog-id=147 op=LOAD Sep 9 00:40:14.045000 audit[3464]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe59df1e8 a2=74 a3=95 items=0 ppid=3299 pid=3464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.045000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 9 00:40:14.045000 audit: BPF prog-id=147 op=UNLOAD Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit: BPF prog-id=148 op=LOAD Sep 9 00:40:14.045000 audit[3464]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe59df218 a2=40 a3=ffffe59df248 items=0 ppid=3299 pid=3464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.045000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 9 00:40:14.045000 audit: BPF prog-id=148 op=UNLOAD Sep 9 00:40:14.045000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.045000 audit[3464]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffe59df330 a2=50 a3=0 items=0 ppid=3299 pid=3464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.045000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 9 00:40:14.050716 env[1216]: time="2025-09-09T00:40:14.050670660Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-859985c88b-lw5z4,Uid:ef8bedfb-52ff-4d50-adb6-d40c7683b09b,Namespace:calico-system,Attempt:0,} returns sandbox id \"5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2\"" Sep 9 00:40:14.049000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.049000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.049000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.049000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.049000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.049000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.049000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.049000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.049000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.049000 audit: BPF prog-id=149 op=LOAD Sep 9 00:40:14.049000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd231adf8 a2=98 a3=ffffd231ade8 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.049000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.049000 audit: BPF prog-id=149 op=UNLOAD Sep 9 00:40:14.050000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.050000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.050000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.050000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.050000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.050000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.050000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.050000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.050000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.050000 audit: BPF prog-id=150 op=LOAD Sep 9 00:40:14.050000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd231aa88 a2=74 a3=95 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.050000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.050000 audit: BPF prog-id=150 op=UNLOAD Sep 9 00:40:14.050000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.050000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.050000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.050000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.050000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.050000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.050000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.050000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.050000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.050000 audit: BPF prog-id=151 op=LOAD Sep 9 00:40:14.050000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd231aae8 a2=94 a3=2 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.050000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.050000 audit: BPF prog-id=151 op=UNLOAD Sep 9 00:40:14.054948 env[1216]: time="2025-09-09T00:40:14.053399467Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\"" Sep 9 00:40:14.144000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.144000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.144000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.144000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.144000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.144000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.144000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.144000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.144000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.144000 audit: BPF prog-id=152 op=LOAD Sep 9 00:40:14.144000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd231aaa8 a2=40 a3=ffffd231aad8 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.144000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.144000 audit: BPF prog-id=152 op=UNLOAD Sep 9 00:40:14.144000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.144000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffd231abc0 a2=50 a3=0 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.144000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd231ab18 a2=28 a3=ffffd231ac48 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.153000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd231ab48 a2=28 a3=ffffd231ac78 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.153000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd231a9f8 a2=28 a3=ffffd231ab28 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.153000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd231ab68 a2=28 a3=ffffd231ac98 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.153000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd231ab48 a2=28 a3=ffffd231ac78 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.153000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd231ab38 a2=28 a3=ffffd231ac68 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.153000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd231ab68 a2=28 a3=ffffd231ac98 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.153000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd231ab48 a2=28 a3=ffffd231ac78 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.153000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd231ab68 a2=28 a3=ffffd231ac98 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.153000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd231ab38 a2=28 a3=ffffd231ac68 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.153000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd231abb8 a2=28 a3=ffffd231acf8 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.153000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd231a8f0 a2=50 a3=0 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.153000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit: BPF prog-id=153 op=LOAD Sep 9 00:40:14.153000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd231a8f8 a2=94 a3=5 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.153000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.153000 audit: BPF prog-id=153 op=UNLOAD Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd231aa00 a2=50 a3=0 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.153000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffd231ab48 a2=4 a3=3 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.153000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.153000 audit[3468]: AVC avc: denied { confidentiality } for pid=3468 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 9 00:40:14.153000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd231ab28 a2=94 a3=6 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.153000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { confidentiality } for pid=3468 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 9 00:40:14.154000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd231a2f8 a2=94 a3=83 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.154000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.154000 audit[3468]: AVC avc: denied { confidentiality } for pid=3468 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 9 00:40:14.154000 audit[3468]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd231a2f8 a2=94 a3=83 items=0 ppid=3299 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.154000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit: BPF prog-id=154 op=LOAD Sep 9 00:40:14.164000 audit[3473]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe6339e08 a2=98 a3=ffffe6339df8 items=0 ppid=3299 pid=3473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.164000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 9 00:40:14.164000 audit: BPF prog-id=154 op=UNLOAD Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit: BPF prog-id=155 op=LOAD Sep 9 00:40:14.164000 audit[3473]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe6339cb8 a2=74 a3=95 items=0 ppid=3299 pid=3473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.164000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 9 00:40:14.164000 audit: BPF prog-id=155 op=UNLOAD Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.164000 audit: BPF prog-id=156 op=LOAD Sep 9 00:40:14.164000 audit[3473]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe6339ce8 a2=40 a3=ffffe6339d18 items=0 ppid=3299 pid=3473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.164000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 9 00:40:14.164000 audit: BPF prog-id=156 op=UNLOAD Sep 9 00:40:14.232701 systemd-networkd[1042]: vxlan.calico: Link UP Sep 9 00:40:14.232705 systemd-networkd[1042]: vxlan.calico: Gained carrier Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit: BPF prog-id=157 op=LOAD Sep 9 00:40:14.245000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffccb76a28 a2=98 a3=ffffccb76a18 items=0 ppid=3299 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.245000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 9 00:40:14.245000 audit: BPF prog-id=157 op=UNLOAD Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit: BPF prog-id=158 op=LOAD Sep 9 00:40:14.245000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffccb76708 a2=74 a3=95 items=0 ppid=3299 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.245000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 9 00:40:14.245000 audit: BPF prog-id=158 op=UNLOAD Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit: BPF prog-id=159 op=LOAD Sep 9 00:40:14.245000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffccb76768 a2=94 a3=2 items=0 ppid=3299 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.245000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 9 00:40:14.245000 audit: BPF prog-id=159 op=UNLOAD Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffccb76798 a2=28 a3=ffffccb768c8 items=0 ppid=3299 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.245000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffccb767c8 a2=28 a3=ffffccb768f8 items=0 ppid=3299 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.245000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffccb76678 a2=28 a3=ffffccb767a8 items=0 ppid=3299 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.245000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffccb767e8 a2=28 a3=ffffccb76918 items=0 ppid=3299 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.245000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffccb767c8 a2=28 a3=ffffccb768f8 items=0 ppid=3299 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.245000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 9 00:40:14.245000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.245000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffccb767b8 a2=28 a3=ffffccb768e8 items=0 ppid=3299 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.245000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffccb767e8 a2=28 a3=ffffccb76918 items=0 ppid=3299 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.246000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffccb767c8 a2=28 a3=ffffccb768f8 items=0 ppid=3299 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.246000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffccb767e8 a2=28 a3=ffffccb76918 items=0 ppid=3299 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.246000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffccb767b8 a2=28 a3=ffffccb768e8 items=0 ppid=3299 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.246000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffccb76838 a2=28 a3=ffffccb76978 items=0 ppid=3299 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.246000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit: BPF prog-id=160 op=LOAD Sep 9 00:40:14.246000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffccb76658 a2=40 a3=ffffccb76688 items=0 ppid=3299 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.246000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 9 00:40:14.246000 audit: BPF prog-id=160 op=UNLOAD Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffccb76680 a2=50 a3=0 items=0 ppid=3299 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.246000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffccb76680 a2=50 a3=0 items=0 ppid=3299 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.246000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit: BPF prog-id=161 op=LOAD Sep 9 00:40:14.246000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffccb75de8 a2=94 a3=2 items=0 ppid=3299 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.246000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 9 00:40:14.246000 audit: BPF prog-id=161 op=UNLOAD Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { bpf } for pid=3497 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: AVC avc: denied { perfmon } for pid=3497 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.246000 audit[3497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffccb75f78 a2=94 a3=30 items=0 ppid=3299 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.246000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 9 00:40:14.258000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.258000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.258000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.258000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.258000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.258000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.258000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.258000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.258000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.258000 audit: BPF prog-id=163 op=LOAD Sep 9 00:40:14.258000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc8f0fad8 a2=98 a3=ffffc8f0fac8 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.258000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.258000 audit: BPF prog-id=163 op=UNLOAD Sep 9 00:40:14.259000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.259000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.259000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.259000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.259000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.259000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.259000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.259000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.259000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.259000 audit: BPF prog-id=164 op=LOAD Sep 9 00:40:14.259000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc8f0f768 a2=74 a3=95 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.259000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.259000 audit: BPF prog-id=164 op=UNLOAD Sep 9 00:40:14.259000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.259000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.259000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.259000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.259000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.259000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.259000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.259000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.259000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.259000 audit: BPF prog-id=165 op=LOAD Sep 9 00:40:14.259000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc8f0f7c8 a2=94 a3=2 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.259000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.259000 audit: BPF prog-id=165 op=UNLOAD Sep 9 00:40:14.344933 systemd[1]: run-containerd-runc-k8s.io-4f7cbc66ba20c29d967e507969d9dbd8b87654cf2a2baff2c84a5190a4118aa8-runc.PXGkcR.mount: Deactivated successfully. Sep 9 00:40:14.351000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.351000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.351000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.351000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.351000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.351000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.351000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.351000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.351000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.351000 audit: BPF prog-id=166 op=LOAD Sep 9 00:40:14.351000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc8f0f788 a2=40 a3=ffffc8f0f7b8 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.351000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.351000 audit: BPF prog-id=166 op=UNLOAD Sep 9 00:40:14.351000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.351000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffc8f0f8a0 a2=50 a3=0 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.351000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc8f0f7f8 a2=28 a3=ffffc8f0f928 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.359000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc8f0f828 a2=28 a3=ffffc8f0f958 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.359000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc8f0f6d8 a2=28 a3=ffffc8f0f808 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.359000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc8f0f848 a2=28 a3=ffffc8f0f978 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.359000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc8f0f828 a2=28 a3=ffffc8f0f958 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.359000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc8f0f818 a2=28 a3=ffffc8f0f948 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.359000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc8f0f848 a2=28 a3=ffffc8f0f978 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.359000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc8f0f828 a2=28 a3=ffffc8f0f958 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.359000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc8f0f848 a2=28 a3=ffffc8f0f978 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.359000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc8f0f818 a2=28 a3=ffffc8f0f948 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.359000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc8f0f898 a2=28 a3=ffffc8f0f9d8 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.359000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc8f0f5d0 a2=50 a3=0 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.359000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit: BPF prog-id=167 op=LOAD Sep 9 00:40:14.359000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc8f0f5d8 a2=94 a3=5 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.359000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.359000 audit: BPF prog-id=167 op=UNLOAD Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc8f0f6e0 a2=50 a3=0 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.359000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffc8f0f828 a2=4 a3=3 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.359000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.359000 audit[3501]: AVC avc: denied { confidentiality } for pid=3501 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 9 00:40:14.359000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc8f0f808 a2=94 a3=6 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.359000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { confidentiality } for pid=3501 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 9 00:40:14.360000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc8f0efd8 a2=94 a3=83 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.360000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { confidentiality } for pid=3501 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 9 00:40:14.360000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc8f0efd8 a2=94 a3=83 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.360000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc8f10a18 a2=10 a3=ffffc8f10b08 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.360000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc8f108d8 a2=10 a3=ffffc8f109c8 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.360000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc8f10848 a2=10 a3=ffffc8f109c8 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.360000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.360000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:14.360000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc8f10848 a2=10 a3=ffffc8f109c8 items=0 ppid=3299 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.360000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 9 00:40:14.367000 audit: BPF prog-id=162 op=UNLOAD Sep 9 00:40:14.417000 audit[3553]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=3553 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 9 00:40:14.417000 audit[3553]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffec6a2b40 a2=0 a3=ffffb9b4cfa8 items=0 ppid=3299 pid=3553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.417000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 9 00:40:14.421000 audit[3552]: NETFILTER_CFG table=nat:102 family=2 entries=15 op=nft_register_chain pid=3552 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 9 00:40:14.421000 audit[3552]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffd901d670 a2=0 a3=ffff84809fa8 items=0 ppid=3299 pid=3552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.421000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 9 00:40:14.427000 audit[3551]: NETFILTER_CFG table=raw:103 family=2 entries=21 op=nft_register_chain pid=3551 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 9 00:40:14.427000 audit[3551]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffda3afac0 a2=0 a3=ffff8b0e2fa8 items=0 ppid=3299 pid=3551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.427000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 9 00:40:14.430000 audit[3556]: NETFILTER_CFG table=filter:104 family=2 entries=94 op=nft_register_chain pid=3556 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 9 00:40:14.430000 audit[3556]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=53116 a0=3 a1=fffffdf1ebf0 a2=0 a3=ffffb4942fa8 items=0 ppid=3299 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:14.430000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 9 00:40:15.112034 systemd-networkd[1042]: calie986eeb7f45: Gained IPv6LL Sep 9 00:40:15.181551 kubelet[1947]: I0909 00:40:15.181502 1947 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="2bb00f1e-14c7-400a-b599-769947774e65" path="/var/lib/kubelet/pods/2bb00f1e-14c7-400a-b599-769947774e65/volumes" Sep 9 00:40:15.202673 env[1216]: time="2025-09-09T00:40:15.202620103Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:15.204113 env[1216]: time="2025-09-09T00:40:15.204077388Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:270a0129ec34c3ad6ae6d56c0afce111eb0baa25dfdacb63722ec5887bafd3c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:15.206237 env[1216]: time="2025-09-09T00:40:15.206202495Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:15.207940 env[1216]: time="2025-09-09T00:40:15.207900147Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:e7113761fc7633d515882f0d48b5c8d0b8e62f3f9d34823f2ee194bb16d2ec44,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:15.208596 env[1216]: time="2025-09-09T00:40:15.208549488Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\" returns image reference \"sha256:270a0129ec34c3ad6ae6d56c0afce111eb0baa25dfdacb63722ec5887bafd3c5\"" Sep 9 00:40:15.213113 env[1216]: time="2025-09-09T00:40:15.213073549Z" level=info msg="CreateContainer within sandbox \"5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Sep 9 00:40:15.229205 env[1216]: time="2025-09-09T00:40:15.229148410Z" level=info msg="CreateContainer within sandbox \"5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"9d9bef456e65b0de25b69635409541e342bfbab3c782610409fc0dcc37364540\"" Sep 9 00:40:15.231095 env[1216]: time="2025-09-09T00:40:15.231047429Z" level=info msg="StartContainer for \"9d9bef456e65b0de25b69635409541e342bfbab3c782610409fc0dcc37364540\"" Sep 9 00:40:15.258453 systemd[1]: Started cri-containerd-9d9bef456e65b0de25b69635409541e342bfbab3c782610409fc0dcc37364540.scope. Sep 9 00:40:15.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.274000 audit: BPF prog-id=168 op=LOAD Sep 9 00:40:15.274000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.274000 audit[3577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3406 pid=3577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:15.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964396265663435366536356230646532356236393633353430393534 Sep 9 00:40:15.274000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.274000 audit[3577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3406 pid=3577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:15.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964396265663435366536356230646532356236393633353430393534 Sep 9 00:40:15.275000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.275000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.275000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.275000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.275000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.275000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.275000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.275000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.275000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.275000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.275000 audit: BPF prog-id=169 op=LOAD Sep 9 00:40:15.275000 audit[3577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3406 pid=3577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:15.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964396265663435366536356230646532356236393633353430393534 Sep 9 00:40:15.275000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.275000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.275000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.275000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.275000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.275000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.275000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.275000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.275000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.275000 audit: BPF prog-id=170 op=LOAD Sep 9 00:40:15.275000 audit[3577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3406 pid=3577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:15.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964396265663435366536356230646532356236393633353430393534 Sep 9 00:40:15.276000 audit: BPF prog-id=170 op=UNLOAD Sep 9 00:40:15.276000 audit: BPF prog-id=169 op=UNLOAD Sep 9 00:40:15.276000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.276000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.276000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.276000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.276000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.276000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.276000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.276000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.276000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.276000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:15.276000 audit: BPF prog-id=171 op=LOAD Sep 9 00:40:15.276000 audit[3577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3406 pid=3577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:15.276000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964396265663435366536356230646532356236393633353430393534 Sep 9 00:40:15.295772 env[1216]: time="2025-09-09T00:40:15.295711526Z" level=info msg="StartContainer for \"9d9bef456e65b0de25b69635409541e342bfbab3c782610409fc0dcc37364540\" returns successfully" Sep 9 00:40:15.300818 env[1216]: time="2025-09-09T00:40:15.300152744Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\"" Sep 9 00:40:15.311000 audit[3588]: AVC avc: denied { search } for pid=3588 comm="nginx" name="crypto" dev="proc" ino=20013 scontext=system_u:system_r:svirt_lxc_net_t:s0:c591,c724 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Sep 9 00:40:15.311000 audit[3588]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffff9a1c0958 a2=0 a3=0 items=0 ppid=3406 pid=3588 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c591,c724 key=(null) Sep 9 00:40:15.311000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Sep 9 00:40:16.072051 systemd-networkd[1042]: vxlan.calico: Gained IPv6LL Sep 9 00:40:16.222092 systemd[1]: run-containerd-runc-k8s.io-9d9bef456e65b0de25b69635409541e342bfbab3c782610409fc0dcc37364540-runc.aUqQNQ.mount: Deactivated successfully. Sep 9 00:40:17.018057 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2604520958.mount: Deactivated successfully. Sep 9 00:40:17.056357 env[1216]: time="2025-09-09T00:40:17.056290811Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:17.057617 env[1216]: time="2025-09-09T00:40:17.057573169Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e210e86234bc99f018431b30477c5ca2ad6f7ecf67ef011498f7beb48fb0b21f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:17.059103 env[1216]: time="2025-09-09T00:40:17.059067693Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:17.060740 env[1216]: time="2025-09-09T00:40:17.060706581Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:29becebc47401da9997a2a30f4c25c511a5f379d17275680b048224829af71a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:17.061269 env[1216]: time="2025-09-09T00:40:17.061237876Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\" returns image reference \"sha256:e210e86234bc99f018431b30477c5ca2ad6f7ecf67ef011498f7beb48fb0b21f\"" Sep 9 00:40:17.071310 env[1216]: time="2025-09-09T00:40:17.071266371Z" level=info msg="CreateContainer within sandbox \"5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Sep 9 00:40:17.094061 env[1216]: time="2025-09-09T00:40:17.094015478Z" level=info msg="CreateContainer within sandbox \"5db6c9a14c7e652f5c0d9baf4a6835ae3d508e3c29113808bb5e3451cf037fc2\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"3ab90262f9d6203b4f60c0bc9a8b98ab33c04c6f80d8c5048851fd1135059618\"" Sep 9 00:40:17.097111 env[1216]: time="2025-09-09T00:40:17.096481590Z" level=info msg="StartContainer for \"3ab90262f9d6203b4f60c0bc9a8b98ab33c04c6f80d8c5048851fd1135059618\"" Sep 9 00:40:17.113113 systemd[1]: Started cri-containerd-3ab90262f9d6203b4f60c0bc9a8b98ab33c04c6f80d8c5048851fd1135059618.scope. Sep 9 00:40:17.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.129000 audit: BPF prog-id=172 op=LOAD Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { bpf } for pid=3642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3406 pid=3642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:17.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361623930323632663964363230336234663630633062633961386239 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { perfmon } for pid=3642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3406 pid=3642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:17.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361623930323632663964363230336234663630633062633961386239 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { bpf } for pid=3642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { bpf } for pid=3642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { bpf } for pid=3642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { perfmon } for pid=3642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { perfmon } for pid=3642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { perfmon } for pid=3642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { perfmon } for pid=3642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { perfmon } for pid=3642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { bpf } for pid=3642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { bpf } for pid=3642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit: BPF prog-id=173 op=LOAD Sep 9 00:40:17.130000 audit[3642]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3406 pid=3642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:17.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361623930323632663964363230336234663630633062633961386239 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { bpf } for pid=3642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { bpf } for pid=3642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { perfmon } for pid=3642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { perfmon } for pid=3642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { perfmon } for pid=3642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { perfmon } for pid=3642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { perfmon } for pid=3642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { bpf } for pid=3642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { bpf } for pid=3642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit: BPF prog-id=174 op=LOAD Sep 9 00:40:17.130000 audit[3642]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3406 pid=3642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:17.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361623930323632663964363230336234663630633062633961386239 Sep 9 00:40:17.130000 audit: BPF prog-id=174 op=UNLOAD Sep 9 00:40:17.130000 audit: BPF prog-id=173 op=UNLOAD Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { bpf } for pid=3642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { bpf } for pid=3642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { bpf } for pid=3642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { perfmon } for pid=3642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { perfmon } for pid=3642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { perfmon } for pid=3642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { perfmon } for pid=3642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { perfmon } for pid=3642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { bpf } for pid=3642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit[3642]: AVC avc: denied { bpf } for pid=3642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:17.130000 audit: BPF prog-id=175 op=LOAD Sep 9 00:40:17.130000 audit[3642]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3406 pid=3642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:17.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361623930323632663964363230336234663630633062633961386239 Sep 9 00:40:17.152649 env[1216]: time="2025-09-09T00:40:17.152597197Z" level=info msg="StartContainer for \"3ab90262f9d6203b4f60c0bc9a8b98ab33c04c6f80d8c5048851fd1135059618\" returns successfully" Sep 9 00:40:17.349018 kubelet[1947]: I0909 00:40:17.348948 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-859985c88b-lw5z4" podStartSLOduration=1.33947142 podStartE2EDuration="4.348931358s" podCreationTimestamp="2025-09-09 00:40:13 +0000 UTC" firstStartedPulling="2025-09-09 00:40:14.052925612 +0000 UTC m=+34.982036547" lastFinishedPulling="2025-09-09 00:40:17.06238555 +0000 UTC m=+37.991496485" observedRunningTime="2025-09-09 00:40:17.348015131 +0000 UTC m=+38.277126106" watchObservedRunningTime="2025-09-09 00:40:17.348931358 +0000 UTC m=+38.278042253" Sep 9 00:40:17.362000 audit[3674]: NETFILTER_CFG table=filter:105 family=2 entries=19 op=nft_register_rule pid=3674 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:17.364151 kernel: kauditd_printk_skb: 772 callbacks suppressed Sep 9 00:40:17.364220 kernel: audit: type=1325 audit(1757378417.362:1176): table=filter:105 family=2 entries=19 op=nft_register_rule pid=3674 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:17.362000 audit[3674]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffd4f5b150 a2=0 a3=1 items=0 ppid=2059 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:17.368898 kernel: audit: type=1300 audit(1757378417.362:1176): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffd4f5b150 a2=0 a3=1 items=0 ppid=2059 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:17.368948 kernel: audit: type=1327 audit(1757378417.362:1176): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:17.362000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:17.374000 audit[3674]: NETFILTER_CFG table=nat:106 family=2 entries=21 op=nft_register_chain pid=3674 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:17.374000 audit[3674]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7044 a0=3 a1=ffffd4f5b150 a2=0 a3=1 items=0 ppid=2059 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:17.379939 kernel: audit: type=1325 audit(1757378417.374:1177): table=nat:106 family=2 entries=21 op=nft_register_chain pid=3674 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:17.379990 kernel: audit: type=1300 audit(1757378417.374:1177): arch=c00000b7 syscall=211 success=yes exit=7044 a0=3 a1=ffffd4f5b150 a2=0 a3=1 items=0 ppid=2059 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:17.380019 kernel: audit: type=1327 audit(1757378417.374:1177): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:17.374000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:18.177990 env[1216]: time="2025-09-09T00:40:18.177940815Z" level=info msg="StopPodSandbox for \"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\"" Sep 9 00:40:18.253625 env[1216]: 2025-09-09 00:40:18.219 [INFO][3686] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Sep 9 00:40:18.253625 env[1216]: 2025-09-09 00:40:18.219 [INFO][3686] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" iface="eth0" netns="/var/run/netns/cni-575c6aac-00e6-50a0-7564-1195eef3284f" Sep 9 00:40:18.253625 env[1216]: 2025-09-09 00:40:18.219 [INFO][3686] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" iface="eth0" netns="/var/run/netns/cni-575c6aac-00e6-50a0-7564-1195eef3284f" Sep 9 00:40:18.253625 env[1216]: 2025-09-09 00:40:18.220 [INFO][3686] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" iface="eth0" netns="/var/run/netns/cni-575c6aac-00e6-50a0-7564-1195eef3284f" Sep 9 00:40:18.253625 env[1216]: 2025-09-09 00:40:18.220 [INFO][3686] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Sep 9 00:40:18.253625 env[1216]: 2025-09-09 00:40:18.220 [INFO][3686] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Sep 9 00:40:18.253625 env[1216]: 2025-09-09 00:40:18.240 [INFO][3695] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" HandleID="k8s-pod-network.860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Workload="localhost-k8s-goldmane--54d579b49d--cnb7f-eth0" Sep 9 00:40:18.253625 env[1216]: 2025-09-09 00:40:18.240 [INFO][3695] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:18.253625 env[1216]: 2025-09-09 00:40:18.240 [INFO][3695] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:18.253625 env[1216]: 2025-09-09 00:40:18.248 [WARNING][3695] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" HandleID="k8s-pod-network.860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Workload="localhost-k8s-goldmane--54d579b49d--cnb7f-eth0" Sep 9 00:40:18.253625 env[1216]: 2025-09-09 00:40:18.248 [INFO][3695] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" HandleID="k8s-pod-network.860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Workload="localhost-k8s-goldmane--54d579b49d--cnb7f-eth0" Sep 9 00:40:18.253625 env[1216]: 2025-09-09 00:40:18.250 [INFO][3695] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:18.253625 env[1216]: 2025-09-09 00:40:18.252 [INFO][3686] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Sep 9 00:40:18.255811 systemd[1]: run-netns-cni\x2d575c6aac\x2d00e6\x2d50a0\x2d7564\x2d1195eef3284f.mount: Deactivated successfully. Sep 9 00:40:18.256612 env[1216]: time="2025-09-09T00:40:18.256556096Z" level=info msg="TearDown network for sandbox \"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\" successfully" Sep 9 00:40:18.256671 env[1216]: time="2025-09-09T00:40:18.256614577Z" level=info msg="StopPodSandbox for \"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\" returns successfully" Sep 9 00:40:18.257612 env[1216]: time="2025-09-09T00:40:18.257580845Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-cnb7f,Uid:e08827d1-22aa-43c6-828d-2487b6eede6f,Namespace:calico-system,Attempt:1,}" Sep 9 00:40:18.366986 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 9 00:40:18.367104 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): califa9dfee1dc2: link becomes ready Sep 9 00:40:18.365458 systemd-networkd[1042]: califa9dfee1dc2: Link UP Sep 9 00:40:18.367039 systemd-networkd[1042]: califa9dfee1dc2: Gained carrier Sep 9 00:40:18.381367 env[1216]: 2025-09-09 00:40:18.298 [INFO][3703] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--54d579b49d--cnb7f-eth0 goldmane-54d579b49d- calico-system e08827d1-22aa-43c6-828d-2487b6eede6f 975 0 2025-09-09 00:39:59 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:54d579b49d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-54d579b49d-cnb7f eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] califa9dfee1dc2 [] [] }} ContainerID="dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c" Namespace="calico-system" Pod="goldmane-54d579b49d-cnb7f" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--cnb7f-" Sep 9 00:40:18.381367 env[1216]: 2025-09-09 00:40:18.299 [INFO][3703] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c" Namespace="calico-system" Pod="goldmane-54d579b49d-cnb7f" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--cnb7f-eth0" Sep 9 00:40:18.381367 env[1216]: 2025-09-09 00:40:18.326 [INFO][3718] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c" HandleID="k8s-pod-network.dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c" Workload="localhost-k8s-goldmane--54d579b49d--cnb7f-eth0" Sep 9 00:40:18.381367 env[1216]: 2025-09-09 00:40:18.326 [INFO][3718] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c" HandleID="k8s-pod-network.dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c" Workload="localhost-k8s-goldmane--54d579b49d--cnb7f-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40003b40a0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-54d579b49d-cnb7f", "timestamp":"2025-09-09 00:40:18.326271723 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 9 00:40:18.381367 env[1216]: 2025-09-09 00:40:18.326 [INFO][3718] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:18.381367 env[1216]: 2025-09-09 00:40:18.326 [INFO][3718] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:18.381367 env[1216]: 2025-09-09 00:40:18.326 [INFO][3718] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 9 00:40:18.381367 env[1216]: 2025-09-09 00:40:18.335 [INFO][3718] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c" host="localhost" Sep 9 00:40:18.381367 env[1216]: 2025-09-09 00:40:18.341 [INFO][3718] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 9 00:40:18.381367 env[1216]: 2025-09-09 00:40:18.345 [INFO][3718] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 9 00:40:18.381367 env[1216]: 2025-09-09 00:40:18.346 [INFO][3718] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 9 00:40:18.381367 env[1216]: 2025-09-09 00:40:18.348 [INFO][3718] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 9 00:40:18.381367 env[1216]: 2025-09-09 00:40:18.348 [INFO][3718] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c" host="localhost" Sep 9 00:40:18.381367 env[1216]: 2025-09-09 00:40:18.350 [INFO][3718] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c Sep 9 00:40:18.381367 env[1216]: 2025-09-09 00:40:18.354 [INFO][3718] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c" host="localhost" Sep 9 00:40:18.381367 env[1216]: 2025-09-09 00:40:18.360 [INFO][3718] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c" host="localhost" Sep 9 00:40:18.381367 env[1216]: 2025-09-09 00:40:18.360 [INFO][3718] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c" host="localhost" Sep 9 00:40:18.381367 env[1216]: 2025-09-09 00:40:18.360 [INFO][3718] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:18.381367 env[1216]: 2025-09-09 00:40:18.360 [INFO][3718] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c" HandleID="k8s-pod-network.dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c" Workload="localhost-k8s-goldmane--54d579b49d--cnb7f-eth0" Sep 9 00:40:18.382048 env[1216]: 2025-09-09 00:40:18.362 [INFO][3703] cni-plugin/k8s.go 418: Populated endpoint ContainerID="dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c" Namespace="calico-system" Pod="goldmane-54d579b49d-cnb7f" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--cnb7f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--54d579b49d--cnb7f-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"e08827d1-22aa-43c6-828d-2487b6eede6f", ResourceVersion:"975", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-54d579b49d-cnb7f", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"califa9dfee1dc2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:18.382048 env[1216]: 2025-09-09 00:40:18.363 [INFO][3703] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c" Namespace="calico-system" Pod="goldmane-54d579b49d-cnb7f" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--cnb7f-eth0" Sep 9 00:40:18.382048 env[1216]: 2025-09-09 00:40:18.363 [INFO][3703] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to califa9dfee1dc2 ContainerID="dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c" Namespace="calico-system" Pod="goldmane-54d579b49d-cnb7f" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--cnb7f-eth0" Sep 9 00:40:18.382048 env[1216]: 2025-09-09 00:40:18.367 [INFO][3703] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c" Namespace="calico-system" Pod="goldmane-54d579b49d-cnb7f" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--cnb7f-eth0" Sep 9 00:40:18.382048 env[1216]: 2025-09-09 00:40:18.368 [INFO][3703] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c" Namespace="calico-system" Pod="goldmane-54d579b49d-cnb7f" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--cnb7f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--54d579b49d--cnb7f-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"e08827d1-22aa-43c6-828d-2487b6eede6f", ResourceVersion:"975", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c", Pod:"goldmane-54d579b49d-cnb7f", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"califa9dfee1dc2", MAC:"7e:ce:7e:29:21:32", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:18.382048 env[1216]: 2025-09-09 00:40:18.378 [INFO][3703] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c" Namespace="calico-system" Pod="goldmane-54d579b49d-cnb7f" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--cnb7f-eth0" Sep 9 00:40:18.406000 audit[3739]: NETFILTER_CFG table=filter:107 family=2 entries=44 op=nft_register_chain pid=3739 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 9 00:40:18.406000 audit[3739]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=25180 a0=3 a1=fffff16872a0 a2=0 a3=ffffbb0f4fa8 items=0 ppid=3299 pid=3739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:18.410373 env[1216]: time="2025-09-09T00:40:18.410311439Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 9 00:40:18.410373 env[1216]: time="2025-09-09T00:40:18.410356680Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 9 00:40:18.410373 env[1216]: time="2025-09-09T00:40:18.410366640Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 9 00:40:18.410541 env[1216]: time="2025-09-09T00:40:18.410514124Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c pid=3748 runtime=io.containerd.runc.v2 Sep 9 00:40:18.413004 kernel: audit: type=1325 audit(1757378418.406:1178): table=filter:107 family=2 entries=44 op=nft_register_chain pid=3739 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 9 00:40:18.413077 kernel: audit: type=1300 audit(1757378418.406:1178): arch=c00000b7 syscall=211 success=yes exit=25180 a0=3 a1=fffff16872a0 a2=0 a3=ffffbb0f4fa8 items=0 ppid=3299 pid=3739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:18.413099 kernel: audit: type=1327 audit(1757378418.406:1178): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 9 00:40:18.406000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 9 00:40:18.429085 systemd[1]: Started cri-containerd-dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c.scope. Sep 9 00:40:18.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit: BPF prog-id=176 op=LOAD Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3748 pid=3758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:18.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464303731323661633139326237393337326263343734333665616438 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3748 pid=3758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:18.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464303731323661633139326237393337326263343734333665616438 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit: BPF prog-id=177 op=LOAD Sep 9 00:40:18.446000 audit[3758]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3748 pid=3758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:18.447975 kernel: audit: type=1400 audit(1757378418.443:1179): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464303731323661633139326237393337326263343734333665616438 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit: BPF prog-id=178 op=LOAD Sep 9 00:40:18.446000 audit[3758]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3748 pid=3758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:18.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464303731323661633139326237393337326263343734333665616438 Sep 9 00:40:18.446000 audit: BPF prog-id=178 op=UNLOAD Sep 9 00:40:18.446000 audit: BPF prog-id=177 op=UNLOAD Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { perfmon } for pid=3758 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit[3758]: AVC avc: denied { bpf } for pid=3758 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:18.446000 audit: BPF prog-id=179 op=LOAD Sep 9 00:40:18.446000 audit[3758]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3748 pid=3758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:18.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464303731323661633139326237393337326263343734333665616438 Sep 9 00:40:18.448244 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 9 00:40:18.468261 env[1216]: time="2025-09-09T00:40:18.468216529Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-cnb7f,Uid:e08827d1-22aa-43c6-828d-2487b6eede6f,Namespace:calico-system,Attempt:1,} returns sandbox id \"dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c\"" Sep 9 00:40:18.477557 env[1216]: time="2025-09-09T00:40:18.477517514Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\"" Sep 9 00:40:19.179015 env[1216]: time="2025-09-09T00:40:19.178974332Z" level=info msg="StopPodSandbox for \"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\"" Sep 9 00:40:19.179333 env[1216]: time="2025-09-09T00:40:19.178991772Z" level=info msg="StopPodSandbox for \"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\"" Sep 9 00:40:19.262023 env[1216]: 2025-09-09 00:40:19.225 [INFO][3804] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Sep 9 00:40:19.262023 env[1216]: 2025-09-09 00:40:19.225 [INFO][3804] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" iface="eth0" netns="/var/run/netns/cni-75f494b4-18b6-44e1-0f11-bdd6430beb9d" Sep 9 00:40:19.262023 env[1216]: 2025-09-09 00:40:19.225 [INFO][3804] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" iface="eth0" netns="/var/run/netns/cni-75f494b4-18b6-44e1-0f11-bdd6430beb9d" Sep 9 00:40:19.262023 env[1216]: 2025-09-09 00:40:19.225 [INFO][3804] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" iface="eth0" netns="/var/run/netns/cni-75f494b4-18b6-44e1-0f11-bdd6430beb9d" Sep 9 00:40:19.262023 env[1216]: 2025-09-09 00:40:19.225 [INFO][3804] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Sep 9 00:40:19.262023 env[1216]: 2025-09-09 00:40:19.225 [INFO][3804] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Sep 9 00:40:19.262023 env[1216]: 2025-09-09 00:40:19.246 [INFO][3822] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" HandleID="k8s-pod-network.2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Workload="localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0" Sep 9 00:40:19.262023 env[1216]: 2025-09-09 00:40:19.246 [INFO][3822] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:19.262023 env[1216]: 2025-09-09 00:40:19.246 [INFO][3822] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:19.262023 env[1216]: 2025-09-09 00:40:19.256 [WARNING][3822] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" HandleID="k8s-pod-network.2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Workload="localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0" Sep 9 00:40:19.262023 env[1216]: 2025-09-09 00:40:19.257 [INFO][3822] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" HandleID="k8s-pod-network.2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Workload="localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0" Sep 9 00:40:19.262023 env[1216]: 2025-09-09 00:40:19.258 [INFO][3822] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:19.262023 env[1216]: 2025-09-09 00:40:19.260 [INFO][3804] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Sep 9 00:40:19.264114 systemd[1]: run-netns-cni\x2d75f494b4\x2d18b6\x2d44e1\x2d0f11\x2dbdd6430beb9d.mount: Deactivated successfully. Sep 9 00:40:19.265230 env[1216]: time="2025-09-09T00:40:19.264888594Z" level=info msg="TearDown network for sandbox \"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\" successfully" Sep 9 00:40:19.265230 env[1216]: time="2025-09-09T00:40:19.265225603Z" level=info msg="StopPodSandbox for \"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\" returns successfully" Sep 9 00:40:19.265818 env[1216]: time="2025-09-09T00:40:19.265786578Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64697c68d4-xvgpz,Uid:fe376a17-0c1c-493f-a52e-f913a3e988a4,Namespace:calico-apiserver,Attempt:1,}" Sep 9 00:40:19.273581 env[1216]: 2025-09-09 00:40:19.222 [INFO][3803] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Sep 9 00:40:19.273581 env[1216]: 2025-09-09 00:40:19.224 [INFO][3803] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" iface="eth0" netns="/var/run/netns/cni-08636a8e-4622-532f-a36e-0612969888cc" Sep 9 00:40:19.273581 env[1216]: 2025-09-09 00:40:19.224 [INFO][3803] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" iface="eth0" netns="/var/run/netns/cni-08636a8e-4622-532f-a36e-0612969888cc" Sep 9 00:40:19.273581 env[1216]: 2025-09-09 00:40:19.225 [INFO][3803] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" iface="eth0" netns="/var/run/netns/cni-08636a8e-4622-532f-a36e-0612969888cc" Sep 9 00:40:19.273581 env[1216]: 2025-09-09 00:40:19.225 [INFO][3803] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Sep 9 00:40:19.273581 env[1216]: 2025-09-09 00:40:19.225 [INFO][3803] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Sep 9 00:40:19.273581 env[1216]: 2025-09-09 00:40:19.248 [INFO][3820] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" HandleID="k8s-pod-network.70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Workload="localhost-k8s-csi--node--driver--bbwbd-eth0" Sep 9 00:40:19.273581 env[1216]: 2025-09-09 00:40:19.248 [INFO][3820] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:19.273581 env[1216]: 2025-09-09 00:40:19.258 [INFO][3820] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:19.273581 env[1216]: 2025-09-09 00:40:19.267 [WARNING][3820] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" HandleID="k8s-pod-network.70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Workload="localhost-k8s-csi--node--driver--bbwbd-eth0" Sep 9 00:40:19.273581 env[1216]: 2025-09-09 00:40:19.267 [INFO][3820] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" HandleID="k8s-pod-network.70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Workload="localhost-k8s-csi--node--driver--bbwbd-eth0" Sep 9 00:40:19.273581 env[1216]: 2025-09-09 00:40:19.269 [INFO][3820] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:19.273581 env[1216]: 2025-09-09 00:40:19.271 [INFO][3803] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Sep 9 00:40:19.275545 systemd[1]: run-netns-cni\x2d08636a8e\x2d4622\x2d532f\x2da36e\x2d0612969888cc.mount: Deactivated successfully. Sep 9 00:40:19.276064 env[1216]: time="2025-09-09T00:40:19.276033223Z" level=info msg="TearDown network for sandbox \"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\" successfully" Sep 9 00:40:19.276154 env[1216]: time="2025-09-09T00:40:19.276136185Z" level=info msg="StopPodSandbox for \"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\" returns successfully" Sep 9 00:40:19.276786 env[1216]: time="2025-09-09T00:40:19.276754123Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-bbwbd,Uid:98779d2b-0a70-471f-9d22-2046c220906c,Namespace:calico-system,Attempt:1,}" Sep 9 00:40:19.419109 systemd-networkd[1042]: cali641633e9ad4: Link UP Sep 9 00:40:19.420867 systemd-networkd[1042]: cali641633e9ad4: Gained carrier Sep 9 00:40:19.421073 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 9 00:40:19.421118 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali641633e9ad4: link becomes ready Sep 9 00:40:19.440617 env[1216]: 2025-09-09 00:40:19.338 [INFO][3850] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--bbwbd-eth0 csi-node-driver- calico-system 98779d2b-0a70-471f-9d22-2046c220906c 984 0 2025-09-09 00:39:59 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:6c96d95cc7 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-bbwbd eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali641633e9ad4 [] [] }} ContainerID="ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1" Namespace="calico-system" Pod="csi-node-driver-bbwbd" WorkloadEndpoint="localhost-k8s-csi--node--driver--bbwbd-" Sep 9 00:40:19.440617 env[1216]: 2025-09-09 00:40:19.338 [INFO][3850] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1" Namespace="calico-system" Pod="csi-node-driver-bbwbd" WorkloadEndpoint="localhost-k8s-csi--node--driver--bbwbd-eth0" Sep 9 00:40:19.440617 env[1216]: 2025-09-09 00:40:19.365 [INFO][3872] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1" HandleID="k8s-pod-network.ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1" Workload="localhost-k8s-csi--node--driver--bbwbd-eth0" Sep 9 00:40:19.440617 env[1216]: 2025-09-09 00:40:19.366 [INFO][3872] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1" HandleID="k8s-pod-network.ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1" Workload="localhost-k8s-csi--node--driver--bbwbd-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004db80), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-bbwbd", "timestamp":"2025-09-09 00:40:19.365821912 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 9 00:40:19.440617 env[1216]: 2025-09-09 00:40:19.366 [INFO][3872] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:19.440617 env[1216]: 2025-09-09 00:40:19.366 [INFO][3872] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:19.440617 env[1216]: 2025-09-09 00:40:19.366 [INFO][3872] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 9 00:40:19.440617 env[1216]: 2025-09-09 00:40:19.382 [INFO][3872] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1" host="localhost" Sep 9 00:40:19.440617 env[1216]: 2025-09-09 00:40:19.388 [INFO][3872] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 9 00:40:19.440617 env[1216]: 2025-09-09 00:40:19.392 [INFO][3872] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 9 00:40:19.440617 env[1216]: 2025-09-09 00:40:19.394 [INFO][3872] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 9 00:40:19.440617 env[1216]: 2025-09-09 00:40:19.396 [INFO][3872] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 9 00:40:19.440617 env[1216]: 2025-09-09 00:40:19.396 [INFO][3872] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1" host="localhost" Sep 9 00:40:19.440617 env[1216]: 2025-09-09 00:40:19.399 [INFO][3872] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1 Sep 9 00:40:19.440617 env[1216]: 2025-09-09 00:40:19.403 [INFO][3872] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1" host="localhost" Sep 9 00:40:19.440617 env[1216]: 2025-09-09 00:40:19.409 [INFO][3872] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1" host="localhost" Sep 9 00:40:19.440617 env[1216]: 2025-09-09 00:40:19.409 [INFO][3872] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1" host="localhost" Sep 9 00:40:19.440617 env[1216]: 2025-09-09 00:40:19.409 [INFO][3872] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:19.440617 env[1216]: 2025-09-09 00:40:19.409 [INFO][3872] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1" HandleID="k8s-pod-network.ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1" Workload="localhost-k8s-csi--node--driver--bbwbd-eth0" Sep 9 00:40:19.441844 env[1216]: 2025-09-09 00:40:19.415 [INFO][3850] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1" Namespace="calico-system" Pod="csi-node-driver-bbwbd" WorkloadEndpoint="localhost-k8s-csi--node--driver--bbwbd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--bbwbd-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"98779d2b-0a70-471f-9d22-2046c220906c", ResourceVersion:"984", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-bbwbd", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali641633e9ad4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:19.441844 env[1216]: 2025-09-09 00:40:19.416 [INFO][3850] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1" Namespace="calico-system" Pod="csi-node-driver-bbwbd" WorkloadEndpoint="localhost-k8s-csi--node--driver--bbwbd-eth0" Sep 9 00:40:19.441844 env[1216]: 2025-09-09 00:40:19.416 [INFO][3850] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali641633e9ad4 ContainerID="ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1" Namespace="calico-system" Pod="csi-node-driver-bbwbd" WorkloadEndpoint="localhost-k8s-csi--node--driver--bbwbd-eth0" Sep 9 00:40:19.441844 env[1216]: 2025-09-09 00:40:19.421 [INFO][3850] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1" Namespace="calico-system" Pod="csi-node-driver-bbwbd" WorkloadEndpoint="localhost-k8s-csi--node--driver--bbwbd-eth0" Sep 9 00:40:19.441844 env[1216]: 2025-09-09 00:40:19.422 [INFO][3850] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1" Namespace="calico-system" Pod="csi-node-driver-bbwbd" WorkloadEndpoint="localhost-k8s-csi--node--driver--bbwbd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--bbwbd-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"98779d2b-0a70-471f-9d22-2046c220906c", ResourceVersion:"984", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1", Pod:"csi-node-driver-bbwbd", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali641633e9ad4", MAC:"de:67:1c:4e:23:06", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:19.441844 env[1216]: 2025-09-09 00:40:19.438 [INFO][3850] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1" Namespace="calico-system" Pod="csi-node-driver-bbwbd" WorkloadEndpoint="localhost-k8s-csi--node--driver--bbwbd-eth0" Sep 9 00:40:19.451324 env[1216]: time="2025-09-09T00:40:19.451240240Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 9 00:40:19.451324 env[1216]: time="2025-09-09T00:40:19.451287401Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 9 00:40:19.451324 env[1216]: time="2025-09-09T00:40:19.451297761Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 9 00:40:19.451556 env[1216]: time="2025-09-09T00:40:19.451502487Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1 pid=3901 runtime=io.containerd.runc.v2 Sep 9 00:40:19.452000 audit[3907]: NETFILTER_CFG table=filter:108 family=2 entries=40 op=nft_register_chain pid=3907 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 9 00:40:19.452000 audit[3907]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20764 a0=3 a1=ffffc7085280 a2=0 a3=ffffb45e0fa8 items=0 ppid=3299 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:19.452000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 9 00:40:19.461884 systemd[1]: Started cri-containerd-ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1.scope. Sep 9 00:40:19.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.488000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit: BPF prog-id=180 op=LOAD Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { bpf } for pid=3911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3901 pid=3911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:19.489000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666386134386661323730363031376363623464373064666264643331 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { perfmon } for pid=3911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3901 pid=3911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:19.489000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666386134386661323730363031376363623464373064666264643331 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { bpf } for pid=3911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { bpf } for pid=3911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { bpf } for pid=3911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { perfmon } for pid=3911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { perfmon } for pid=3911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { perfmon } for pid=3911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { perfmon } for pid=3911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { perfmon } for pid=3911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { bpf } for pid=3911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { bpf } for pid=3911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit: BPF prog-id=181 op=LOAD Sep 9 00:40:19.489000 audit[3911]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3901 pid=3911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:19.489000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666386134386661323730363031376363623464373064666264643331 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { bpf } for pid=3911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { bpf } for pid=3911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { perfmon } for pid=3911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { perfmon } for pid=3911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { perfmon } for pid=3911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { perfmon } for pid=3911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { perfmon } for pid=3911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { bpf } for pid=3911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { bpf } for pid=3911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit: BPF prog-id=182 op=LOAD Sep 9 00:40:19.489000 audit[3911]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3901 pid=3911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:19.489000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666386134386661323730363031376363623464373064666264643331 Sep 9 00:40:19.489000 audit: BPF prog-id=182 op=UNLOAD Sep 9 00:40:19.489000 audit: BPF prog-id=181 op=UNLOAD Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { bpf } for pid=3911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { bpf } for pid=3911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { bpf } for pid=3911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { perfmon } for pid=3911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { perfmon } for pid=3911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { perfmon } for pid=3911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { perfmon } for pid=3911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { perfmon } for pid=3911 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { bpf } for pid=3911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit[3911]: AVC avc: denied { bpf } for pid=3911 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.489000 audit: BPF prog-id=183 op=LOAD Sep 9 00:40:19.489000 audit[3911]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3901 pid=3911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:19.489000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666386134386661323730363031376363623464373064666264643331 Sep 9 00:40:19.492060 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 9 00:40:19.528989 env[1216]: time="2025-09-09T00:40:19.528902793Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-bbwbd,Uid:98779d2b-0a70-471f-9d22-2046c220906c,Namespace:calico-system,Attempt:1,} returns sandbox id \"ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1\"" Sep 9 00:40:19.549210 systemd-networkd[1042]: cali719bb4d1963: Link UP Sep 9 00:40:19.550470 systemd-networkd[1042]: cali719bb4d1963: Gained carrier Sep 9 00:40:19.550986 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali719bb4d1963: link becomes ready Sep 9 00:40:19.572000 audit[3940]: NETFILTER_CFG table=filter:109 family=2 entries=58 op=nft_register_chain pid=3940 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 9 00:40:19.572000 audit[3940]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=30584 a0=3 a1=ffffe6531a50 a2=0 a3=ffff998d1fa8 items=0 ppid=3299 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:19.572000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 9 00:40:19.577189 env[1216]: 2025-09-09 00:40:19.321 [INFO][3836] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0 calico-apiserver-64697c68d4- calico-apiserver fe376a17-0c1c-493f-a52e-f913a3e988a4 985 0 2025-09-09 00:39:53 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:64697c68d4 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-64697c68d4-xvgpz eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali719bb4d1963 [] [] }} ContainerID="68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51" Namespace="calico-apiserver" Pod="calico-apiserver-64697c68d4-xvgpz" WorkloadEndpoint="localhost-k8s-calico--apiserver--64697c68d4--xvgpz-" Sep 9 00:40:19.577189 env[1216]: 2025-09-09 00:40:19.321 [INFO][3836] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51" Namespace="calico-apiserver" Pod="calico-apiserver-64697c68d4-xvgpz" WorkloadEndpoint="localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0" Sep 9 00:40:19.577189 env[1216]: 2025-09-09 00:40:19.378 [INFO][3865] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51" HandleID="k8s-pod-network.68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51" Workload="localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0" Sep 9 00:40:19.577189 env[1216]: 2025-09-09 00:40:19.378 [INFO][3865] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51" HandleID="k8s-pod-network.68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51" Workload="localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000437150), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-64697c68d4-xvgpz", "timestamp":"2025-09-09 00:40:19.378282497 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 9 00:40:19.577189 env[1216]: 2025-09-09 00:40:19.378 [INFO][3865] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:19.577189 env[1216]: 2025-09-09 00:40:19.409 [INFO][3865] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:19.577189 env[1216]: 2025-09-09 00:40:19.409 [INFO][3865] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 9 00:40:19.577189 env[1216]: 2025-09-09 00:40:19.482 [INFO][3865] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51" host="localhost" Sep 9 00:40:19.577189 env[1216]: 2025-09-09 00:40:19.490 [INFO][3865] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 9 00:40:19.577189 env[1216]: 2025-09-09 00:40:19.500 [INFO][3865] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 9 00:40:19.577189 env[1216]: 2025-09-09 00:40:19.510 [INFO][3865] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 9 00:40:19.577189 env[1216]: 2025-09-09 00:40:19.522 [INFO][3865] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 9 00:40:19.577189 env[1216]: 2025-09-09 00:40:19.522 [INFO][3865] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51" host="localhost" Sep 9 00:40:19.577189 env[1216]: 2025-09-09 00:40:19.524 [INFO][3865] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51 Sep 9 00:40:19.577189 env[1216]: 2025-09-09 00:40:19.535 [INFO][3865] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51" host="localhost" Sep 9 00:40:19.577189 env[1216]: 2025-09-09 00:40:19.544 [INFO][3865] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51" host="localhost" Sep 9 00:40:19.577189 env[1216]: 2025-09-09 00:40:19.544 [INFO][3865] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51" host="localhost" Sep 9 00:40:19.577189 env[1216]: 2025-09-09 00:40:19.544 [INFO][3865] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:19.577189 env[1216]: 2025-09-09 00:40:19.544 [INFO][3865] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51" HandleID="k8s-pod-network.68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51" Workload="localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0" Sep 9 00:40:19.577740 env[1216]: 2025-09-09 00:40:19.546 [INFO][3836] cni-plugin/k8s.go 418: Populated endpoint ContainerID="68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51" Namespace="calico-apiserver" Pod="calico-apiserver-64697c68d4-xvgpz" WorkloadEndpoint="localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0", GenerateName:"calico-apiserver-64697c68d4-", Namespace:"calico-apiserver", SelfLink:"", UID:"fe376a17-0c1c-493f-a52e-f913a3e988a4", ResourceVersion:"985", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64697c68d4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-64697c68d4-xvgpz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali719bb4d1963", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:19.577740 env[1216]: 2025-09-09 00:40:19.546 [INFO][3836] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51" Namespace="calico-apiserver" Pod="calico-apiserver-64697c68d4-xvgpz" WorkloadEndpoint="localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0" Sep 9 00:40:19.577740 env[1216]: 2025-09-09 00:40:19.546 [INFO][3836] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali719bb4d1963 ContainerID="68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51" Namespace="calico-apiserver" Pod="calico-apiserver-64697c68d4-xvgpz" WorkloadEndpoint="localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0" Sep 9 00:40:19.577740 env[1216]: 2025-09-09 00:40:19.551 [INFO][3836] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51" Namespace="calico-apiserver" Pod="calico-apiserver-64697c68d4-xvgpz" WorkloadEndpoint="localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0" Sep 9 00:40:19.577740 env[1216]: 2025-09-09 00:40:19.552 [INFO][3836] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51" Namespace="calico-apiserver" Pod="calico-apiserver-64697c68d4-xvgpz" WorkloadEndpoint="localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0", GenerateName:"calico-apiserver-64697c68d4-", Namespace:"calico-apiserver", SelfLink:"", UID:"fe376a17-0c1c-493f-a52e-f913a3e988a4", ResourceVersion:"985", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64697c68d4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51", Pod:"calico-apiserver-64697c68d4-xvgpz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali719bb4d1963", MAC:"c6:f4:20:fc:20:76", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:19.577740 env[1216]: 2025-09-09 00:40:19.561 [INFO][3836] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51" Namespace="calico-apiserver" Pod="calico-apiserver-64697c68d4-xvgpz" WorkloadEndpoint="localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0" Sep 9 00:40:19.623689 env[1216]: time="2025-09-09T00:40:19.623478735Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 9 00:40:19.623689 env[1216]: time="2025-09-09T00:40:19.623522736Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 9 00:40:19.623689 env[1216]: time="2025-09-09T00:40:19.623532816Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 9 00:40:19.626140 env[1216]: time="2025-09-09T00:40:19.626084327Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51 pid=3952 runtime=io.containerd.runc.v2 Sep 9 00:40:19.645067 systemd[1]: Started cri-containerd-68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51.scope. Sep 9 00:40:19.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit: BPF prog-id=184 op=LOAD Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3952 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:19.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638636639303239663834653865646232356666323961616561343365 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3952 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:19.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638636639303239663834653865646232356666323961616561343365 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit: BPF prog-id=185 op=LOAD Sep 9 00:40:19.668000 audit[3963]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3952 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:19.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638636639303239663834653865646232356666323961616561343365 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit: BPF prog-id=186 op=LOAD Sep 9 00:40:19.668000 audit[3963]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3952 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:19.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638636639303239663834653865646232356666323961616561343365 Sep 9 00:40:19.668000 audit: BPF prog-id=186 op=UNLOAD Sep 9 00:40:19.668000 audit: BPF prog-id=185 op=UNLOAD Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:19.668000 audit: BPF prog-id=187 op=LOAD Sep 9 00:40:19.668000 audit[3963]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3952 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:19.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638636639303239663834653865646232356666323961616561343365 Sep 9 00:40:19.671031 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 9 00:40:19.687968 env[1216]: time="2025-09-09T00:40:19.687910961Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64697c68d4-xvgpz,Uid:fe376a17-0c1c-493f-a52e-f913a3e988a4,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51\"" Sep 9 00:40:19.720442 systemd-networkd[1042]: califa9dfee1dc2: Gained IPv6LL Sep 9 00:40:20.177910 env[1216]: time="2025-09-09T00:40:20.177858774Z" level=info msg="StopPodSandbox for \"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\"" Sep 9 00:40:20.253569 env[1216]: 2025-09-09 00:40:20.220 [INFO][3997] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Sep 9 00:40:20.253569 env[1216]: 2025-09-09 00:40:20.220 [INFO][3997] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" iface="eth0" netns="/var/run/netns/cni-88872f9a-bfa7-2098-7516-964e86a252e3" Sep 9 00:40:20.253569 env[1216]: 2025-09-09 00:40:20.220 [INFO][3997] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" iface="eth0" netns="/var/run/netns/cni-88872f9a-bfa7-2098-7516-964e86a252e3" Sep 9 00:40:20.253569 env[1216]: 2025-09-09 00:40:20.221 [INFO][3997] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" iface="eth0" netns="/var/run/netns/cni-88872f9a-bfa7-2098-7516-964e86a252e3" Sep 9 00:40:20.253569 env[1216]: 2025-09-09 00:40:20.221 [INFO][3997] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Sep 9 00:40:20.253569 env[1216]: 2025-09-09 00:40:20.221 [INFO][3997] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Sep 9 00:40:20.253569 env[1216]: 2025-09-09 00:40:20.239 [INFO][4007] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" HandleID="k8s-pod-network.251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Workload="localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0" Sep 9 00:40:20.253569 env[1216]: 2025-09-09 00:40:20.240 [INFO][4007] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:20.253569 env[1216]: 2025-09-09 00:40:20.240 [INFO][4007] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:20.253569 env[1216]: 2025-09-09 00:40:20.248 [WARNING][4007] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" HandleID="k8s-pod-network.251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Workload="localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0" Sep 9 00:40:20.253569 env[1216]: 2025-09-09 00:40:20.248 [INFO][4007] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" HandleID="k8s-pod-network.251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Workload="localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0" Sep 9 00:40:20.253569 env[1216]: 2025-09-09 00:40:20.250 [INFO][4007] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:20.253569 env[1216]: 2025-09-09 00:40:20.251 [INFO][3997] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Sep 9 00:40:20.254235 env[1216]: time="2025-09-09T00:40:20.253705461Z" level=info msg="TearDown network for sandbox \"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\" successfully" Sep 9 00:40:20.254235 env[1216]: time="2025-09-09T00:40:20.253737942Z" level=info msg="StopPodSandbox for \"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\" returns successfully" Sep 9 00:40:20.260569 env[1216]: time="2025-09-09T00:40:20.260526485Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64697c68d4-lck72,Uid:4e264071-44ad-445c-9e02-e22ebf1a75c8,Namespace:calico-apiserver,Attempt:1,}" Sep 9 00:40:20.266359 systemd[1]: run-netns-cni\x2d88872f9a\x2dbfa7\x2d2098\x2d7516\x2d964e86a252e3.mount: Deactivated successfully. Sep 9 00:40:20.279748 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1040940408.mount: Deactivated successfully. Sep 9 00:40:20.411109 systemd-networkd[1042]: calie87bbd09d8a: Link UP Sep 9 00:40:20.413272 systemd-networkd[1042]: calie87bbd09d8a: Gained carrier Sep 9 00:40:20.413950 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie87bbd09d8a: link becomes ready Sep 9 00:40:20.423851 env[1216]: 2025-09-09 00:40:20.333 [INFO][4015] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0 calico-apiserver-64697c68d4- calico-apiserver 4e264071-44ad-445c-9e02-e22ebf1a75c8 997 0 2025-09-09 00:39:53 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:64697c68d4 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-64697c68d4-lck72 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calie87bbd09d8a [] [] }} ContainerID="b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8" Namespace="calico-apiserver" Pod="calico-apiserver-64697c68d4-lck72" WorkloadEndpoint="localhost-k8s-calico--apiserver--64697c68d4--lck72-" Sep 9 00:40:20.423851 env[1216]: 2025-09-09 00:40:20.333 [INFO][4015] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8" Namespace="calico-apiserver" Pod="calico-apiserver-64697c68d4-lck72" WorkloadEndpoint="localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0" Sep 9 00:40:20.423851 env[1216]: 2025-09-09 00:40:20.356 [INFO][4031] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8" HandleID="k8s-pod-network.b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8" Workload="localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0" Sep 9 00:40:20.423851 env[1216]: 2025-09-09 00:40:20.356 [INFO][4031] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8" HandleID="k8s-pod-network.b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8" Workload="localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400011a600), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-64697c68d4-lck72", "timestamp":"2025-09-09 00:40:20.356236149 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 9 00:40:20.423851 env[1216]: 2025-09-09 00:40:20.356 [INFO][4031] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:20.423851 env[1216]: 2025-09-09 00:40:20.356 [INFO][4031] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:20.423851 env[1216]: 2025-09-09 00:40:20.356 [INFO][4031] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 9 00:40:20.423851 env[1216]: 2025-09-09 00:40:20.366 [INFO][4031] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8" host="localhost" Sep 9 00:40:20.423851 env[1216]: 2025-09-09 00:40:20.380 [INFO][4031] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 9 00:40:20.423851 env[1216]: 2025-09-09 00:40:20.388 [INFO][4031] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 9 00:40:20.423851 env[1216]: 2025-09-09 00:40:20.394 [INFO][4031] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 9 00:40:20.423851 env[1216]: 2025-09-09 00:40:20.396 [INFO][4031] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 9 00:40:20.423851 env[1216]: 2025-09-09 00:40:20.396 [INFO][4031] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8" host="localhost" Sep 9 00:40:20.423851 env[1216]: 2025-09-09 00:40:20.398 [INFO][4031] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8 Sep 9 00:40:20.423851 env[1216]: 2025-09-09 00:40:20.402 [INFO][4031] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8" host="localhost" Sep 9 00:40:20.423851 env[1216]: 2025-09-09 00:40:20.407 [INFO][4031] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8" host="localhost" Sep 9 00:40:20.423851 env[1216]: 2025-09-09 00:40:20.407 [INFO][4031] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8" host="localhost" Sep 9 00:40:20.423851 env[1216]: 2025-09-09 00:40:20.407 [INFO][4031] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:20.423851 env[1216]: 2025-09-09 00:40:20.407 [INFO][4031] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8" HandleID="k8s-pod-network.b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8" Workload="localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0" Sep 9 00:40:20.424575 env[1216]: 2025-09-09 00:40:20.409 [INFO][4015] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8" Namespace="calico-apiserver" Pod="calico-apiserver-64697c68d4-lck72" WorkloadEndpoint="localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0", GenerateName:"calico-apiserver-64697c68d4-", Namespace:"calico-apiserver", SelfLink:"", UID:"4e264071-44ad-445c-9e02-e22ebf1a75c8", ResourceVersion:"997", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64697c68d4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-64697c68d4-lck72", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie87bbd09d8a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:20.424575 env[1216]: 2025-09-09 00:40:20.409 [INFO][4015] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8" Namespace="calico-apiserver" Pod="calico-apiserver-64697c68d4-lck72" WorkloadEndpoint="localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0" Sep 9 00:40:20.424575 env[1216]: 2025-09-09 00:40:20.409 [INFO][4015] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie87bbd09d8a ContainerID="b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8" Namespace="calico-apiserver" Pod="calico-apiserver-64697c68d4-lck72" WorkloadEndpoint="localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0" Sep 9 00:40:20.424575 env[1216]: 2025-09-09 00:40:20.411 [INFO][4015] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8" Namespace="calico-apiserver" Pod="calico-apiserver-64697c68d4-lck72" WorkloadEndpoint="localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0" Sep 9 00:40:20.424575 env[1216]: 2025-09-09 00:40:20.411 [INFO][4015] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8" Namespace="calico-apiserver" Pod="calico-apiserver-64697c68d4-lck72" WorkloadEndpoint="localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0", GenerateName:"calico-apiserver-64697c68d4-", Namespace:"calico-apiserver", SelfLink:"", UID:"4e264071-44ad-445c-9e02-e22ebf1a75c8", ResourceVersion:"997", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64697c68d4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8", Pod:"calico-apiserver-64697c68d4-lck72", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie87bbd09d8a", MAC:"d6:44:65:c8:bc:12", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:20.424575 env[1216]: 2025-09-09 00:40:20.421 [INFO][4015] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8" Namespace="calico-apiserver" Pod="calico-apiserver-64697c68d4-lck72" WorkloadEndpoint="localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0" Sep 9 00:40:20.436000 audit[4052]: NETFILTER_CFG table=filter:110 family=2 entries=55 op=nft_register_chain pid=4052 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 9 00:40:20.436000 audit[4052]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28304 a0=3 a1=ffffc8509000 a2=0 a3=ffffa55a0fa8 items=0 ppid=3299 pid=4052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:20.436000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 9 00:40:20.442205 env[1216]: time="2025-09-09T00:40:20.442146587Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 9 00:40:20.442205 env[1216]: time="2025-09-09T00:40:20.442184828Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 9 00:40:20.442205 env[1216]: time="2025-09-09T00:40:20.442194709Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 9 00:40:20.442557 env[1216]: time="2025-09-09T00:40:20.442513037Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8 pid=4055 runtime=io.containerd.runc.v2 Sep 9 00:40:20.468452 systemd[1]: Started cri-containerd-b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8.scope. Sep 9 00:40:20.488347 systemd-networkd[1042]: cali641633e9ad4: Gained IPv6LL Sep 9 00:40:20.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.489000 audit: BPF prog-id=188 op=LOAD Sep 9 00:40:20.490000 audit[4064]: AVC avc: denied { bpf } for pid=4064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.490000 audit[4064]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4055 pid=4064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:20.490000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232303434346265613364613238643231386463313837353162656133 Sep 9 00:40:20.490000 audit[4064]: AVC avc: denied { perfmon } for pid=4064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.490000 audit[4064]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4055 pid=4064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:20.490000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232303434346265613364613238643231386463313837353162656133 Sep 9 00:40:20.490000 audit[4064]: AVC avc: denied { bpf } for pid=4064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.490000 audit[4064]: AVC avc: denied { bpf } for pid=4064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.490000 audit[4064]: AVC avc: denied { bpf } for pid=4064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.490000 audit[4064]: AVC avc: denied { perfmon } for pid=4064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.490000 audit[4064]: AVC avc: denied { perfmon } for pid=4064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.490000 audit[4064]: AVC avc: denied { perfmon } for pid=4064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.490000 audit[4064]: AVC avc: denied { perfmon } for pid=4064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.490000 audit[4064]: AVC avc: denied { perfmon } for pid=4064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.490000 audit[4064]: AVC avc: denied { bpf } for pid=4064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.490000 audit[4064]: AVC avc: denied { bpf } for pid=4064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.490000 audit: BPF prog-id=189 op=LOAD Sep 9 00:40:20.490000 audit[4064]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4055 pid=4064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:20.490000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232303434346265613364613238643231386463313837353162656133 Sep 9 00:40:20.491000 audit[4064]: AVC avc: denied { bpf } for pid=4064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.491000 audit[4064]: AVC avc: denied { bpf } for pid=4064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.491000 audit[4064]: AVC avc: denied { perfmon } for pid=4064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.491000 audit[4064]: AVC avc: denied { perfmon } for pid=4064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.491000 audit[4064]: AVC avc: denied { perfmon } for pid=4064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.491000 audit[4064]: AVC avc: denied { perfmon } for pid=4064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.491000 audit[4064]: AVC avc: denied { perfmon } for pid=4064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.491000 audit[4064]: AVC avc: denied { bpf } for pid=4064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.491000 audit[4064]: AVC avc: denied { bpf } for pid=4064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.491000 audit: BPF prog-id=190 op=LOAD Sep 9 00:40:20.491000 audit[4064]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4055 pid=4064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:20.491000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232303434346265613364613238643231386463313837353162656133 Sep 9 00:40:20.492000 audit: BPF prog-id=190 op=UNLOAD Sep 9 00:40:20.492000 audit: BPF prog-id=189 op=UNLOAD Sep 9 00:40:20.492000 audit[4064]: AVC avc: denied { bpf } for pid=4064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.492000 audit[4064]: AVC avc: denied { bpf } for pid=4064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.492000 audit[4064]: AVC avc: denied { bpf } for pid=4064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.492000 audit[4064]: AVC avc: denied { perfmon } for pid=4064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.492000 audit[4064]: AVC avc: denied { perfmon } for pid=4064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.492000 audit[4064]: AVC avc: denied { perfmon } for pid=4064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.492000 audit[4064]: AVC avc: denied { perfmon } for pid=4064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.492000 audit[4064]: AVC avc: denied { perfmon } for pid=4064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.492000 audit[4064]: AVC avc: denied { bpf } for pid=4064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.492000 audit[4064]: AVC avc: denied { bpf } for pid=4064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:20.492000 audit: BPF prog-id=191 op=LOAD Sep 9 00:40:20.492000 audit[4064]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4055 pid=4064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:20.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232303434346265613364613238643231386463313837353162656133 Sep 9 00:40:20.494809 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 9 00:40:20.510303 env[1216]: time="2025-09-09T00:40:20.510263826Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64697c68d4-lck72,Uid:4e264071-44ad-445c-9e02-e22ebf1a75c8,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8\"" Sep 9 00:40:20.915816 env[1216]: time="2025-09-09T00:40:20.915748570Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:20.942850 env[1216]: time="2025-09-09T00:40:20.942778219Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14088376331a0622b7f6a2fbc2f2932806a6eafdd7b602f6139d3b985bf1e685,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:20.957544 env[1216]: time="2025-09-09T00:40:20.957506017Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:20.972993 env[1216]: time="2025-09-09T00:40:20.972966074Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:46297703ab3739331a00a58f0d6a5498c8d3b6523ad947eed68592ee0f3e79f0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:20.973701 env[1216]: time="2025-09-09T00:40:20.973652732Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\" returns image reference \"sha256:14088376331a0622b7f6a2fbc2f2932806a6eafdd7b602f6139d3b985bf1e685\"" Sep 9 00:40:20.975335 env[1216]: time="2025-09-09T00:40:20.975307057Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\"" Sep 9 00:40:20.977323 env[1216]: time="2025-09-09T00:40:20.977293431Z" level=info msg="CreateContainer within sandbox \"dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Sep 9 00:40:21.008169 env[1216]: time="2025-09-09T00:40:21.008127298Z" level=info msg="CreateContainer within sandbox \"dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"c168a57582a5ae16b1f3214c8171c530d976cc7d8c882876e3269de008651a17\"" Sep 9 00:40:21.008793 env[1216]: time="2025-09-09T00:40:21.008767515Z" level=info msg="StartContainer for \"c168a57582a5ae16b1f3214c8171c530d976cc7d8c882876e3269de008651a17\"" Sep 9 00:40:21.026297 systemd[1]: Started cri-containerd-c168a57582a5ae16b1f3214c8171c530d976cc7d8c882876e3269de008651a17.scope. Sep 9 00:40:21.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.045000 audit: BPF prog-id=192 op=LOAD Sep 9 00:40:21.046000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.046000 audit[4097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3748 pid=4097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:21.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331363861353735383261356165313662316633323134633831373163 Sep 9 00:40:21.046000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.046000 audit[4097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3748 pid=4097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:21.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331363861353735383261356165313662316633323134633831373163 Sep 9 00:40:21.047000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.047000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.047000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.047000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.047000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.047000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.047000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.047000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.047000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.047000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.047000 audit: BPF prog-id=193 op=LOAD Sep 9 00:40:21.047000 audit[4097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3748 pid=4097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:21.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331363861353735383261356165313662316633323134633831373163 Sep 9 00:40:21.048000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.048000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.048000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.048000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.048000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.048000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.048000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.048000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.048000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.048000 audit: BPF prog-id=194 op=LOAD Sep 9 00:40:21.048000 audit[4097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3748 pid=4097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:21.048000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331363861353735383261356165313662316633323134633831373163 Sep 9 00:40:21.049000 audit: BPF prog-id=194 op=UNLOAD Sep 9 00:40:21.049000 audit: BPF prog-id=193 op=UNLOAD Sep 9 00:40:21.049000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.049000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.049000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.049000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.049000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.049000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.049000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.049000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.049000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.049000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:21.049000 audit: BPF prog-id=195 op=LOAD Sep 9 00:40:21.049000 audit[4097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3748 pid=4097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:21.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331363861353735383261356165313662316633323134633831373163 Sep 9 00:40:21.074355 env[1216]: time="2025-09-09T00:40:21.074254877Z" level=info msg="StartContainer for \"c168a57582a5ae16b1f3214c8171c530d976cc7d8c882876e3269de008651a17\" returns successfully" Sep 9 00:40:21.320390 systemd-networkd[1042]: cali719bb4d1963: Gained IPv6LL Sep 9 00:40:21.366156 kubelet[1947]: I0909 00:40:21.366101 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-54d579b49d-cnb7f" podStartSLOduration=19.866711284 podStartE2EDuration="22.366085753s" podCreationTimestamp="2025-09-09 00:39:59 +0000 UTC" firstStartedPulling="2025-09-09 00:40:18.47527197 +0000 UTC m=+39.404382905" lastFinishedPulling="2025-09-09 00:40:20.974646439 +0000 UTC m=+41.903757374" observedRunningTime="2025-09-09 00:40:21.365486217 +0000 UTC m=+42.294597232" watchObservedRunningTime="2025-09-09 00:40:21.366085753 +0000 UTC m=+42.295196688" Sep 9 00:40:21.379000 audit[4138]: NETFILTER_CFG table=filter:111 family=2 entries=18 op=nft_register_rule pid=4138 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:21.379000 audit[4138]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffdaa74e30 a2=0 a3=1 items=0 ppid=2059 pid=4138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:21.379000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:21.386000 audit[4138]: NETFILTER_CFG table=nat:112 family=2 entries=16 op=nft_register_rule pid=4138 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:21.386000 audit[4138]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4236 a0=3 a1=ffffdaa74e30 a2=0 a3=1 items=0 ppid=2059 pid=4138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:21.386000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:22.024455 systemd-networkd[1042]: calie87bbd09d8a: Gained IPv6LL Sep 9 00:40:22.178825 env[1216]: time="2025-09-09T00:40:22.178782053Z" level=info msg="StopPodSandbox for \"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\"" Sep 9 00:40:22.179146 env[1216]: time="2025-09-09T00:40:22.178788654Z" level=info msg="StopPodSandbox for \"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\"" Sep 9 00:40:22.179146 env[1216]: time="2025-09-09T00:40:22.178795614Z" level=info msg="StopPodSandbox for \"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\"" Sep 9 00:40:22.252716 env[1216]: time="2025-09-09T00:40:22.252661429Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:22.254987 env[1216]: time="2025-09-09T00:40:22.254960368Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e2b30128ce4b607acd97d3edef62ce1a90be0259903090a51c360adbe4a8f3b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:22.256980 env[1216]: time="2025-09-09T00:40:22.256947379Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:22.259630 env[1216]: time="2025-09-09T00:40:22.259603967Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:f22c88018d8b58c4ef0052f594b216a13bd6852166ac131a538c5ab2fba23bb2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:22.263562 env[1216]: time="2025-09-09T00:40:22.263529188Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\" returns image reference \"sha256:5e2b30128ce4b607acd97d3edef62ce1a90be0259903090a51c360adbe4a8f3b\"" Sep 9 00:40:22.266248 env[1216]: time="2025-09-09T00:40:22.265524159Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 9 00:40:22.266332 env[1216]: time="2025-09-09T00:40:22.266287579Z" level=info msg="CreateContainer within sandbox \"ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Sep 9 00:40:22.284881 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount902341461.mount: Deactivated successfully. Sep 9 00:40:22.293056 env[1216]: time="2025-09-09T00:40:22.293006584Z" level=info msg="CreateContainer within sandbox \"ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"2e6717f0a52da1dfcdd3057a66bacfa5602fc4b362213d12509fba311aba33fb\"" Sep 9 00:40:22.297437 env[1216]: time="2025-09-09T00:40:22.297400537Z" level=info msg="StartContainer for \"2e6717f0a52da1dfcdd3057a66bacfa5602fc4b362213d12509fba311aba33fb\"" Sep 9 00:40:22.303085 systemd[1]: Started sshd@7-10.0.0.102:22-10.0.0.1:36514.service. Sep 9 00:40:22.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.102:22-10.0.0.1:36514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:22.331436 env[1216]: 2025-09-09 00:40:22.267 [INFO][4186] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Sep 9 00:40:22.331436 env[1216]: 2025-09-09 00:40:22.267 [INFO][4186] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" iface="eth0" netns="/var/run/netns/cni-b94a5121-5e86-7527-3a66-e6527fe1d20e" Sep 9 00:40:22.331436 env[1216]: 2025-09-09 00:40:22.267 [INFO][4186] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" iface="eth0" netns="/var/run/netns/cni-b94a5121-5e86-7527-3a66-e6527fe1d20e" Sep 9 00:40:22.331436 env[1216]: 2025-09-09 00:40:22.267 [INFO][4186] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" iface="eth0" netns="/var/run/netns/cni-b94a5121-5e86-7527-3a66-e6527fe1d20e" Sep 9 00:40:22.331436 env[1216]: 2025-09-09 00:40:22.267 [INFO][4186] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Sep 9 00:40:22.331436 env[1216]: 2025-09-09 00:40:22.267 [INFO][4186] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Sep 9 00:40:22.331436 env[1216]: 2025-09-09 00:40:22.310 [INFO][4212] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" HandleID="k8s-pod-network.300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Workload="localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0" Sep 9 00:40:22.331436 env[1216]: 2025-09-09 00:40:22.310 [INFO][4212] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:22.331436 env[1216]: 2025-09-09 00:40:22.310 [INFO][4212] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:22.331436 env[1216]: 2025-09-09 00:40:22.325 [WARNING][4212] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" HandleID="k8s-pod-network.300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Workload="localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0" Sep 9 00:40:22.331436 env[1216]: 2025-09-09 00:40:22.325 [INFO][4212] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" HandleID="k8s-pod-network.300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Workload="localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0" Sep 9 00:40:22.331436 env[1216]: 2025-09-09 00:40:22.327 [INFO][4212] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:22.331436 env[1216]: 2025-09-09 00:40:22.329 [INFO][4186] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Sep 9 00:40:22.334413 env[1216]: time="2025-09-09T00:40:22.334311964Z" level=info msg="TearDown network for sandbox \"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\" successfully" Sep 9 00:40:22.334413 env[1216]: time="2025-09-09T00:40:22.334349845Z" level=info msg="StopPodSandbox for \"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\" returns successfully" Sep 9 00:40:22.335931 systemd[1]: run-netns-cni\x2db94a5121\x2d5e86\x2d7527\x2d3a66\x2de6527fe1d20e.mount: Deactivated successfully. Sep 9 00:40:22.337439 env[1216]: time="2025-09-09T00:40:22.337190798Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-76895984bd-km4sd,Uid:c9c81cb9-9f4a-498f-9525-bd0bbd688f7c,Namespace:calico-system,Attempt:1,}" Sep 9 00:40:22.340264 systemd[1]: Started cri-containerd-2e6717f0a52da1dfcdd3057a66bacfa5602fc4b362213d12509fba311aba33fb.scope. Sep 9 00:40:22.351000 audit[4228]: USER_ACCT pid=4228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:22.352986 sshd[4228]: Accepted publickey for core from 10.0.0.1 port 36514 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:40:22.352000 audit[4228]: CRED_ACQ pid=4228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:22.352000 audit[4228]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8c79110 a2=3 a3=1 items=0 ppid=1 pid=4228 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.352000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 9 00:40:22.353867 sshd[4228]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:40:22.360170 systemd-logind[1205]: New session 8 of user core. Sep 9 00:40:22.360569 systemd[1]: Started session-8.scope. Sep 9 00:40:22.366000 audit[4228]: USER_START pid=4228 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:22.368467 kernel: kauditd_printk_skb: 305 callbacks suppressed Sep 9 00:40:22.368968 kernel: audit: type=1105 audit(1757378422.366:1278): pid=4228 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:22.371835 env[1216]: 2025-09-09 00:40:22.265 [INFO][4192] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Sep 9 00:40:22.371835 env[1216]: 2025-09-09 00:40:22.265 [INFO][4192] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" iface="eth0" netns="/var/run/netns/cni-59284cb1-0782-f42e-a433-d09bd1183683" Sep 9 00:40:22.371835 env[1216]: 2025-09-09 00:40:22.266 [INFO][4192] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" iface="eth0" netns="/var/run/netns/cni-59284cb1-0782-f42e-a433-d09bd1183683" Sep 9 00:40:22.371835 env[1216]: 2025-09-09 00:40:22.266 [INFO][4192] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" iface="eth0" netns="/var/run/netns/cni-59284cb1-0782-f42e-a433-d09bd1183683" Sep 9 00:40:22.371835 env[1216]: 2025-09-09 00:40:22.266 [INFO][4192] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Sep 9 00:40:22.371835 env[1216]: 2025-09-09 00:40:22.266 [INFO][4192] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Sep 9 00:40:22.371835 env[1216]: 2025-09-09 00:40:22.324 [INFO][4213] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" HandleID="k8s-pod-network.fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Workload="localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0" Sep 9 00:40:22.371835 env[1216]: 2025-09-09 00:40:22.324 [INFO][4213] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:22.371835 env[1216]: 2025-09-09 00:40:22.327 [INFO][4213] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:22.371835 env[1216]: 2025-09-09 00:40:22.350 [WARNING][4213] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" HandleID="k8s-pod-network.fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Workload="localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0" Sep 9 00:40:22.371835 env[1216]: 2025-09-09 00:40:22.350 [INFO][4213] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" HandleID="k8s-pod-network.fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Workload="localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0" Sep 9 00:40:22.371835 env[1216]: 2025-09-09 00:40:22.355 [INFO][4213] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:22.371835 env[1216]: 2025-09-09 00:40:22.363 [INFO][4192] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Sep 9 00:40:22.379578 kernel: audit: type=1103 audit(1757378422.372:1279): pid=4263 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:22.372000 audit[4263]: CRED_ACQ pid=4263 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:22.379702 kubelet[1947]: E0909 00:40:22.372331 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:40:22.380087 env[1216]: time="2025-09-09T00:40:22.372080173Z" level=info msg="TearDown network for sandbox \"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\" successfully" Sep 9 00:40:22.380087 env[1216]: time="2025-09-09T00:40:22.372111094Z" level=info msg="StopPodSandbox for \"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\" returns successfully" Sep 9 00:40:22.380087 env[1216]: time="2025-09-09T00:40:22.376101236Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-2fhpp,Uid:40967913-0d9d-4904-ba55-627e610389c1,Namespace:kube-system,Attempt:1,}" Sep 9 00:40:22.380000 audit[4245]: AVC avc: denied { perfmon } for pid=4245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.380000 audit[4245]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3901 pid=4245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.387442 kernel: audit: type=1400 audit(1757378422.380:1280): avc: denied { perfmon } for pid=4245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.387500 kernel: audit: type=1300 audit(1757378422.380:1280): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3901 pid=4245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.387525 kernel: audit: type=1327 audit(1757378422.380:1280): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265363731376630613532646131646663646433303537613636626163 Sep 9 00:40:22.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265363731376630613532646131646663646433303537613636626163 Sep 9 00:40:22.390512 env[1216]: 2025-09-09 00:40:22.305 [INFO][4196] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Sep 9 00:40:22.390512 env[1216]: 2025-09-09 00:40:22.306 [INFO][4196] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" iface="eth0" netns="/var/run/netns/cni-74257dcc-26f5-4f65-447e-90adaf39b552" Sep 9 00:40:22.390512 env[1216]: 2025-09-09 00:40:22.306 [INFO][4196] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" iface="eth0" netns="/var/run/netns/cni-74257dcc-26f5-4f65-447e-90adaf39b552" Sep 9 00:40:22.390512 env[1216]: 2025-09-09 00:40:22.306 [INFO][4196] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" iface="eth0" netns="/var/run/netns/cni-74257dcc-26f5-4f65-447e-90adaf39b552" Sep 9 00:40:22.390512 env[1216]: 2025-09-09 00:40:22.306 [INFO][4196] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Sep 9 00:40:22.390512 env[1216]: 2025-09-09 00:40:22.306 [INFO][4196] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Sep 9 00:40:22.390512 env[1216]: 2025-09-09 00:40:22.356 [INFO][4237] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" HandleID="k8s-pod-network.b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Workload="localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0" Sep 9 00:40:22.390512 env[1216]: 2025-09-09 00:40:22.356 [INFO][4237] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:22.390512 env[1216]: 2025-09-09 00:40:22.356 [INFO][4237] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:22.390512 env[1216]: 2025-09-09 00:40:22.366 [WARNING][4237] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" HandleID="k8s-pod-network.b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Workload="localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0" Sep 9 00:40:22.390512 env[1216]: 2025-09-09 00:40:22.366 [INFO][4237] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" HandleID="k8s-pod-network.b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Workload="localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0" Sep 9 00:40:22.390512 env[1216]: 2025-09-09 00:40:22.373 [INFO][4237] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:22.390512 env[1216]: 2025-09-09 00:40:22.378 [INFO][4196] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { bpf } for pid=4245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.391085 env[1216]: time="2025-09-09T00:40:22.390691090Z" level=info msg="TearDown network for sandbox \"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\" successfully" Sep 9 00:40:22.391085 env[1216]: time="2025-09-09T00:40:22.390733211Z" level=info msg="StopPodSandbox for \"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\" returns successfully" Sep 9 00:40:22.392784 kubelet[1947]: E0909 00:40:22.391401 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:40:22.392928 kernel: audit: type=1400 audit(1757378422.389:1281): avc: denied { bpf } for pid=4245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.393057 env[1216]: time="2025-09-09T00:40:22.393009470Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-nq8sq,Uid:6096770d-69d8-4927-a6b8-24f7381dda60,Namespace:kube-system,Attempt:1,}" Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { bpf } for pid=4245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.395684 kernel: audit: type=1400 audit(1757378422.389:1281): avc: denied { bpf } for pid=4245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { bpf } for pid=4245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.399177 kernel: audit: type=1400 audit(1757378422.389:1281): avc: denied { bpf } for pid=4245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.399814 kernel: audit: type=1400 audit(1757378422.389:1281): avc: denied { perfmon } for pid=4245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { perfmon } for pid=4245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { perfmon } for pid=4245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.404747 kernel: audit: type=1400 audit(1757378422.389:1281): avc: denied { perfmon } for pid=4245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { perfmon } for pid=4245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { perfmon } for pid=4245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { perfmon } for pid=4245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { bpf } for pid=4245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { bpf } for pid=4245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit: BPF prog-id=196 op=LOAD Sep 9 00:40:22.389000 audit[4245]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3901 pid=4245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265363731376630613532646131646663646433303537613636626163 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { bpf } for pid=4245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { bpf } for pid=4245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { perfmon } for pid=4245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { perfmon } for pid=4245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { perfmon } for pid=4245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { perfmon } for pid=4245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { perfmon } for pid=4245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { bpf } for pid=4245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { bpf } for pid=4245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit: BPF prog-id=197 op=LOAD Sep 9 00:40:22.389000 audit[4245]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3901 pid=4245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265363731376630613532646131646663646433303537613636626163 Sep 9 00:40:22.389000 audit: BPF prog-id=197 op=UNLOAD Sep 9 00:40:22.389000 audit: BPF prog-id=196 op=UNLOAD Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { bpf } for pid=4245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { bpf } for pid=4245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { bpf } for pid=4245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { perfmon } for pid=4245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { perfmon } for pid=4245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { perfmon } for pid=4245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { perfmon } for pid=4245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { perfmon } for pid=4245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { bpf } for pid=4245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit[4245]: AVC avc: denied { bpf } for pid=4245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.389000 audit: BPF prog-id=198 op=LOAD Sep 9 00:40:22.389000 audit[4245]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3901 pid=4245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265363731376630613532646131646663646433303537613636626163 Sep 9 00:40:22.427702 env[1216]: time="2025-09-09T00:40:22.427627758Z" level=info msg="StartContainer for \"2e6717f0a52da1dfcdd3057a66bacfa5602fc4b362213d12509fba311aba33fb\" returns successfully" Sep 9 00:40:22.589841 sshd[4228]: pam_unix(sshd:session): session closed for user core Sep 9 00:40:22.592000 audit[4228]: USER_END pid=4228 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:22.592000 audit[4228]: CRED_DISP pid=4228 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:22.594247 systemd-networkd[1042]: cali9f2abc1214d: Link UP Sep 9 00:40:22.594000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.102:22-10.0.0.1:36514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:22.594988 systemd[1]: sshd@7-10.0.0.102:22-10.0.0.1:36514.service: Deactivated successfully. Sep 9 00:40:22.595706 systemd[1]: session-8.scope: Deactivated successfully. Sep 9 00:40:22.598382 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 9 00:40:22.598446 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9f2abc1214d: link becomes ready Sep 9 00:40:22.598485 systemd-networkd[1042]: cali9f2abc1214d: Gained carrier Sep 9 00:40:22.598539 systemd-logind[1205]: Session 8 logged out. Waiting for processes to exit. Sep 9 00:40:22.599529 systemd-logind[1205]: Removed session 8. Sep 9 00:40:22.613417 env[1216]: 2025-09-09 00:40:22.499 [INFO][4306] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0 calico-kube-controllers-76895984bd- calico-system c9c81cb9-9f4a-498f-9525-bd0bbd688f7c 1049 0 2025-09-09 00:40:00 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:76895984bd projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-76895984bd-km4sd eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali9f2abc1214d [] [] }} ContainerID="08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637" Namespace="calico-system" Pod="calico-kube-controllers-76895984bd-km4sd" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--76895984bd--km4sd-" Sep 9 00:40:22.613417 env[1216]: 2025-09-09 00:40:22.500 [INFO][4306] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637" Namespace="calico-system" Pod="calico-kube-controllers-76895984bd-km4sd" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0" Sep 9 00:40:22.613417 env[1216]: 2025-09-09 00:40:22.544 [INFO][4347] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637" HandleID="k8s-pod-network.08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637" Workload="localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0" Sep 9 00:40:22.613417 env[1216]: 2025-09-09 00:40:22.544 [INFO][4347] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637" HandleID="k8s-pod-network.08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637" Workload="localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000137720), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-76895984bd-km4sd", "timestamp":"2025-09-09 00:40:22.544305552 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 9 00:40:22.613417 env[1216]: 2025-09-09 00:40:22.544 [INFO][4347] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:22.613417 env[1216]: 2025-09-09 00:40:22.544 [INFO][4347] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:22.613417 env[1216]: 2025-09-09 00:40:22.544 [INFO][4347] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 9 00:40:22.613417 env[1216]: 2025-09-09 00:40:22.556 [INFO][4347] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637" host="localhost" Sep 9 00:40:22.613417 env[1216]: 2025-09-09 00:40:22.561 [INFO][4347] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 9 00:40:22.613417 env[1216]: 2025-09-09 00:40:22.565 [INFO][4347] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 9 00:40:22.613417 env[1216]: 2025-09-09 00:40:22.568 [INFO][4347] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 9 00:40:22.613417 env[1216]: 2025-09-09 00:40:22.572 [INFO][4347] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 9 00:40:22.613417 env[1216]: 2025-09-09 00:40:22.572 [INFO][4347] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637" host="localhost" Sep 9 00:40:22.613417 env[1216]: 2025-09-09 00:40:22.573 [INFO][4347] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637 Sep 9 00:40:22.613417 env[1216]: 2025-09-09 00:40:22.579 [INFO][4347] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637" host="localhost" Sep 9 00:40:22.613417 env[1216]: 2025-09-09 00:40:22.586 [INFO][4347] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637" host="localhost" Sep 9 00:40:22.613417 env[1216]: 2025-09-09 00:40:22.586 [INFO][4347] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637" host="localhost" Sep 9 00:40:22.613417 env[1216]: 2025-09-09 00:40:22.586 [INFO][4347] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:22.613417 env[1216]: 2025-09-09 00:40:22.586 [INFO][4347] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637" HandleID="k8s-pod-network.08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637" Workload="localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0" Sep 9 00:40:22.614010 env[1216]: 2025-09-09 00:40:22.590 [INFO][4306] cni-plugin/k8s.go 418: Populated endpoint ContainerID="08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637" Namespace="calico-system" Pod="calico-kube-controllers-76895984bd-km4sd" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0", GenerateName:"calico-kube-controllers-76895984bd-", Namespace:"calico-system", SelfLink:"", UID:"c9c81cb9-9f4a-498f-9525-bd0bbd688f7c", ResourceVersion:"1049", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 40, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"76895984bd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-76895984bd-km4sd", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9f2abc1214d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:22.614010 env[1216]: 2025-09-09 00:40:22.590 [INFO][4306] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637" Namespace="calico-system" Pod="calico-kube-controllers-76895984bd-km4sd" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0" Sep 9 00:40:22.614010 env[1216]: 2025-09-09 00:40:22.590 [INFO][4306] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali9f2abc1214d ContainerID="08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637" Namespace="calico-system" Pod="calico-kube-controllers-76895984bd-km4sd" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0" Sep 9 00:40:22.614010 env[1216]: 2025-09-09 00:40:22.599 [INFO][4306] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637" Namespace="calico-system" Pod="calico-kube-controllers-76895984bd-km4sd" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0" Sep 9 00:40:22.614010 env[1216]: 2025-09-09 00:40:22.600 [INFO][4306] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637" Namespace="calico-system" Pod="calico-kube-controllers-76895984bd-km4sd" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0", GenerateName:"calico-kube-controllers-76895984bd-", Namespace:"calico-system", SelfLink:"", UID:"c9c81cb9-9f4a-498f-9525-bd0bbd688f7c", ResourceVersion:"1049", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 40, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"76895984bd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637", Pod:"calico-kube-controllers-76895984bd-km4sd", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9f2abc1214d", MAC:"7a:77:8e:0d:4b:b9", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:22.614010 env[1216]: 2025-09-09 00:40:22.610 [INFO][4306] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637" Namespace="calico-system" Pod="calico-kube-controllers-76895984bd-km4sd" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0" Sep 9 00:40:22.620000 audit[4388]: NETFILTER_CFG table=filter:113 family=2 entries=48 op=nft_register_chain pid=4388 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 9 00:40:22.620000 audit[4388]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23124 a0=3 a1=ffffc5bcf460 a2=0 a3=ffff834ddfa8 items=0 ppid=3299 pid=4388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.620000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 9 00:40:22.625175 env[1216]: time="2025-09-09T00:40:22.625097144Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 9 00:40:22.625175 env[1216]: time="2025-09-09T00:40:22.625151666Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 9 00:40:22.625175 env[1216]: time="2025-09-09T00:40:22.625161986Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 9 00:40:22.625404 env[1216]: time="2025-09-09T00:40:22.625371431Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637 pid=4397 runtime=io.containerd.runc.v2 Sep 9 00:40:22.635571 systemd[1]: Started cri-containerd-08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637.scope. Sep 9 00:40:22.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit: BPF prog-id=199 op=LOAD Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4397 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038653431396537333931376539626434663533636261306137623561 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4397 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038653431396537333931376539626434663533636261306137623561 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit: BPF prog-id=200 op=LOAD Sep 9 00:40:22.652000 audit[4408]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4397 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038653431396537333931376539626434663533636261306137623561 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit: BPF prog-id=201 op=LOAD Sep 9 00:40:22.652000 audit[4408]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4397 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038653431396537333931376539626434663533636261306137623561 Sep 9 00:40:22.652000 audit: BPF prog-id=201 op=UNLOAD Sep 9 00:40:22.652000 audit: BPF prog-id=200 op=UNLOAD Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.652000 audit: BPF prog-id=202 op=LOAD Sep 9 00:40:22.652000 audit[4408]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4397 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038653431396537333931376539626434663533636261306137623561 Sep 9 00:40:22.654116 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 9 00:40:22.677187 env[1216]: time="2025-09-09T00:40:22.677150560Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-76895984bd-km4sd,Uid:c9c81cb9-9f4a-498f-9525-bd0bbd688f7c,Namespace:calico-system,Attempt:1,} returns sandbox id \"08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637\"" Sep 9 00:40:22.692040 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif772c12523c: link becomes ready Sep 9 00:40:22.691693 systemd-networkd[1042]: calif772c12523c: Link UP Sep 9 00:40:22.691879 systemd-networkd[1042]: calif772c12523c: Gained carrier Sep 9 00:40:22.705958 env[1216]: 2025-09-09 00:40:22.533 [INFO][4318] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0 coredns-668d6bf9bc- kube-system 40967913-0d9d-4904-ba55-627e610389c1 1048 0 2025-09-09 00:39:44 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-2fhpp eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calif772c12523c [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22" Namespace="kube-system" Pod="coredns-668d6bf9bc-2fhpp" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--2fhpp-" Sep 9 00:40:22.705958 env[1216]: 2025-09-09 00:40:22.533 [INFO][4318] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22" Namespace="kube-system" Pod="coredns-668d6bf9bc-2fhpp" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0" Sep 9 00:40:22.705958 env[1216]: 2025-09-09 00:40:22.586 [INFO][4358] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22" HandleID="k8s-pod-network.be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22" Workload="localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0" Sep 9 00:40:22.705958 env[1216]: 2025-09-09 00:40:22.586 [INFO][4358] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22" HandleID="k8s-pod-network.be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22" Workload="localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004d730), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-2fhpp", "timestamp":"2025-09-09 00:40:22.586693839 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 9 00:40:22.705958 env[1216]: 2025-09-09 00:40:22.586 [INFO][4358] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:22.705958 env[1216]: 2025-09-09 00:40:22.586 [INFO][4358] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:22.705958 env[1216]: 2025-09-09 00:40:22.586 [INFO][4358] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 9 00:40:22.705958 env[1216]: 2025-09-09 00:40:22.655 [INFO][4358] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22" host="localhost" Sep 9 00:40:22.705958 env[1216]: 2025-09-09 00:40:22.661 [INFO][4358] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 9 00:40:22.705958 env[1216]: 2025-09-09 00:40:22.665 [INFO][4358] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 9 00:40:22.705958 env[1216]: 2025-09-09 00:40:22.667 [INFO][4358] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 9 00:40:22.705958 env[1216]: 2025-09-09 00:40:22.669 [INFO][4358] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 9 00:40:22.705958 env[1216]: 2025-09-09 00:40:22.669 [INFO][4358] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22" host="localhost" Sep 9 00:40:22.705958 env[1216]: 2025-09-09 00:40:22.671 [INFO][4358] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22 Sep 9 00:40:22.705958 env[1216]: 2025-09-09 00:40:22.679 [INFO][4358] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22" host="localhost" Sep 9 00:40:22.705958 env[1216]: 2025-09-09 00:40:22.685 [INFO][4358] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22" host="localhost" Sep 9 00:40:22.705958 env[1216]: 2025-09-09 00:40:22.685 [INFO][4358] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22" host="localhost" Sep 9 00:40:22.705958 env[1216]: 2025-09-09 00:40:22.685 [INFO][4358] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:22.705958 env[1216]: 2025-09-09 00:40:22.685 [INFO][4358] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22" HandleID="k8s-pod-network.be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22" Workload="localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0" Sep 9 00:40:22.706522 env[1216]: 2025-09-09 00:40:22.688 [INFO][4318] cni-plugin/k8s.go 418: Populated endpoint ContainerID="be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22" Namespace="kube-system" Pod="coredns-668d6bf9bc-2fhpp" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"40967913-0d9d-4904-ba55-627e610389c1", ResourceVersion:"1048", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-2fhpp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif772c12523c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:22.706522 env[1216]: 2025-09-09 00:40:22.688 [INFO][4318] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22" Namespace="kube-system" Pod="coredns-668d6bf9bc-2fhpp" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0" Sep 9 00:40:22.706522 env[1216]: 2025-09-09 00:40:22.688 [INFO][4318] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif772c12523c ContainerID="be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22" Namespace="kube-system" Pod="coredns-668d6bf9bc-2fhpp" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0" Sep 9 00:40:22.706522 env[1216]: 2025-09-09 00:40:22.692 [INFO][4318] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22" Namespace="kube-system" Pod="coredns-668d6bf9bc-2fhpp" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0" Sep 9 00:40:22.706522 env[1216]: 2025-09-09 00:40:22.692 [INFO][4318] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22" Namespace="kube-system" Pod="coredns-668d6bf9bc-2fhpp" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"40967913-0d9d-4904-ba55-627e610389c1", ResourceVersion:"1048", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22", Pod:"coredns-668d6bf9bc-2fhpp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif772c12523c", MAC:"aa:e3:46:f9:67:29", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:22.706522 env[1216]: 2025-09-09 00:40:22.703 [INFO][4318] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22" Namespace="kube-system" Pod="coredns-668d6bf9bc-2fhpp" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0" Sep 9 00:40:22.715835 env[1216]: time="2025-09-09T00:40:22.715763191Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 9 00:40:22.715835 env[1216]: time="2025-09-09T00:40:22.715806032Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 9 00:40:22.716033 env[1216]: time="2025-09-09T00:40:22.715994797Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 9 00:40:22.716245 env[1216]: time="2025-09-09T00:40:22.716202082Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22 pid=4447 runtime=io.containerd.runc.v2 Sep 9 00:40:22.720000 audit[4461]: NETFILTER_CFG table=filter:114 family=2 entries=64 op=nft_register_chain pid=4461 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 9 00:40:22.720000 audit[4461]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=30140 a0=3 a1=ffffe4f650b0 a2=0 a3=ffffb920bfa8 items=0 ppid=3299 pid=4461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.720000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 9 00:40:22.727816 systemd[1]: Started cri-containerd-be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22.scope. Sep 9 00:40:22.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit: BPF prog-id=203 op=LOAD Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { bpf } for pid=4456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4447 pid=4456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265323239663262633362653666636262613635333565373236313732 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { perfmon } for pid=4456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4447 pid=4456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265323239663262633362653666636262613635333565373236313732 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { bpf } for pid=4456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { bpf } for pid=4456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { bpf } for pid=4456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { perfmon } for pid=4456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { perfmon } for pid=4456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { perfmon } for pid=4456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { perfmon } for pid=4456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { perfmon } for pid=4456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { bpf } for pid=4456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { bpf } for pid=4456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit: BPF prog-id=204 op=LOAD Sep 9 00:40:22.742000 audit[4456]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4447 pid=4456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265323239663262633362653666636262613635333565373236313732 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { bpf } for pid=4456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { bpf } for pid=4456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { perfmon } for pid=4456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { perfmon } for pid=4456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { perfmon } for pid=4456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { perfmon } for pid=4456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { perfmon } for pid=4456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { bpf } for pid=4456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { bpf } for pid=4456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit: BPF prog-id=205 op=LOAD Sep 9 00:40:22.742000 audit[4456]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4447 pid=4456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265323239663262633362653666636262613635333565373236313732 Sep 9 00:40:22.742000 audit: BPF prog-id=205 op=UNLOAD Sep 9 00:40:22.742000 audit: BPF prog-id=204 op=UNLOAD Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { bpf } for pid=4456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { bpf } for pid=4456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { bpf } for pid=4456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { perfmon } for pid=4456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { perfmon } for pid=4456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { perfmon } for pid=4456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { perfmon } for pid=4456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { perfmon } for pid=4456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { bpf } for pid=4456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit[4456]: AVC avc: denied { bpf } for pid=4456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.742000 audit: BPF prog-id=206 op=LOAD Sep 9 00:40:22.742000 audit[4456]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4447 pid=4456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265323239663262633362653666636262613635333565373236313732 Sep 9 00:40:22.745165 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 9 00:40:22.760450 env[1216]: time="2025-09-09T00:40:22.760395616Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-2fhpp,Uid:40967913-0d9d-4904-ba55-627e610389c1,Namespace:kube-system,Attempt:1,} returns sandbox id \"be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22\"" Sep 9 00:40:22.761902 kubelet[1947]: E0909 00:40:22.761879 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:40:22.765120 env[1216]: time="2025-09-09T00:40:22.765083896Z" level=info msg="CreateContainer within sandbox \"be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 9 00:40:22.791958 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9bd20994330: link becomes ready Sep 9 00:40:22.788676 systemd-networkd[1042]: cali9bd20994330: Link UP Sep 9 00:40:22.790292 systemd-networkd[1042]: cali9bd20994330: Gained carrier Sep 9 00:40:22.796968 env[1216]: time="2025-09-09T00:40:22.795487116Z" level=info msg="CreateContainer within sandbox \"be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"53602e966b111e17196819e91d6b602bac2b4b69b92f8348a2ce660a1e0a8e8f\"" Sep 9 00:40:22.797559 env[1216]: time="2025-09-09T00:40:22.797444766Z" level=info msg="StartContainer for \"53602e966b111e17196819e91d6b602bac2b4b69b92f8348a2ce660a1e0a8e8f\"" Sep 9 00:40:22.804616 env[1216]: 2025-09-09 00:40:22.544 [INFO][4326] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0 coredns-668d6bf9bc- kube-system 6096770d-69d8-4927-a6b8-24f7381dda60 1052 0 2025-09-09 00:39:44 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-nq8sq eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali9bd20994330 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4" Namespace="kube-system" Pod="coredns-668d6bf9bc-nq8sq" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--nq8sq-" Sep 9 00:40:22.804616 env[1216]: 2025-09-09 00:40:22.544 [INFO][4326] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4" Namespace="kube-system" Pod="coredns-668d6bf9bc-nq8sq" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0" Sep 9 00:40:22.804616 env[1216]: 2025-09-09 00:40:22.610 [INFO][4367] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4" HandleID="k8s-pod-network.7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4" Workload="localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0" Sep 9 00:40:22.804616 env[1216]: 2025-09-09 00:40:22.610 [INFO][4367] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4" HandleID="k8s-pod-network.7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4" Workload="localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40005913f0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-nq8sq", "timestamp":"2025-09-09 00:40:22.609953196 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 9 00:40:22.804616 env[1216]: 2025-09-09 00:40:22.610 [INFO][4367] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:22.804616 env[1216]: 2025-09-09 00:40:22.686 [INFO][4367] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:22.804616 env[1216]: 2025-09-09 00:40:22.686 [INFO][4367] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 9 00:40:22.804616 env[1216]: 2025-09-09 00:40:22.755 [INFO][4367] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4" host="localhost" Sep 9 00:40:22.804616 env[1216]: 2025-09-09 00:40:22.762 [INFO][4367] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 9 00:40:22.804616 env[1216]: 2025-09-09 00:40:22.768 [INFO][4367] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 9 00:40:22.804616 env[1216]: 2025-09-09 00:40:22.770 [INFO][4367] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 9 00:40:22.804616 env[1216]: 2025-09-09 00:40:22.773 [INFO][4367] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 9 00:40:22.804616 env[1216]: 2025-09-09 00:40:22.773 [INFO][4367] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4" host="localhost" Sep 9 00:40:22.804616 env[1216]: 2025-09-09 00:40:22.775 [INFO][4367] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4 Sep 9 00:40:22.804616 env[1216]: 2025-09-09 00:40:22.778 [INFO][4367] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4" host="localhost" Sep 9 00:40:22.804616 env[1216]: 2025-09-09 00:40:22.784 [INFO][4367] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4" host="localhost" Sep 9 00:40:22.804616 env[1216]: 2025-09-09 00:40:22.784 [INFO][4367] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4" host="localhost" Sep 9 00:40:22.804616 env[1216]: 2025-09-09 00:40:22.784 [INFO][4367] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:22.804616 env[1216]: 2025-09-09 00:40:22.784 [INFO][4367] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4" HandleID="k8s-pod-network.7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4" Workload="localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0" Sep 9 00:40:22.805195 env[1216]: 2025-09-09 00:40:22.786 [INFO][4326] cni-plugin/k8s.go 418: Populated endpoint ContainerID="7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4" Namespace="kube-system" Pod="coredns-668d6bf9bc-nq8sq" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6096770d-69d8-4927-a6b8-24f7381dda60", ResourceVersion:"1052", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-nq8sq", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali9bd20994330", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:22.805195 env[1216]: 2025-09-09 00:40:22.787 [INFO][4326] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4" Namespace="kube-system" Pod="coredns-668d6bf9bc-nq8sq" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0" Sep 9 00:40:22.805195 env[1216]: 2025-09-09 00:40:22.787 [INFO][4326] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali9bd20994330 ContainerID="7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4" Namespace="kube-system" Pod="coredns-668d6bf9bc-nq8sq" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0" Sep 9 00:40:22.805195 env[1216]: 2025-09-09 00:40:22.790 [INFO][4326] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4" Namespace="kube-system" Pod="coredns-668d6bf9bc-nq8sq" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0" Sep 9 00:40:22.805195 env[1216]: 2025-09-09 00:40:22.790 [INFO][4326] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4" Namespace="kube-system" Pod="coredns-668d6bf9bc-nq8sq" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6096770d-69d8-4927-a6b8-24f7381dda60", ResourceVersion:"1052", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4", Pod:"coredns-668d6bf9bc-nq8sq", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali9bd20994330", MAC:"06:13:51:64:fd:f1", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:22.805195 env[1216]: 2025-09-09 00:40:22.801 [INFO][4326] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4" Namespace="kube-system" Pod="coredns-668d6bf9bc-nq8sq" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0" Sep 9 00:40:22.815773 systemd[1]: Started cri-containerd-53602e966b111e17196819e91d6b602bac2b4b69b92f8348a2ce660a1e0a8e8f.scope. Sep 9 00:40:22.816708 env[1216]: time="2025-09-09T00:40:22.816397213Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 9 00:40:22.816708 env[1216]: time="2025-09-09T00:40:22.816440494Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 9 00:40:22.816708 env[1216]: time="2025-09-09T00:40:22.816450814Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 9 00:40:22.816708 env[1216]: time="2025-09-09T00:40:22.816581497Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4 pid=4518 runtime=io.containerd.runc.v2 Sep 9 00:40:22.820000 audit[4528]: NETFILTER_CFG table=filter:115 family=2 entries=54 op=nft_register_chain pid=4528 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 9 00:40:22.820000 audit[4528]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=25540 a0=3 a1=fffff1e8a8a0 a2=0 a3=ffff86fc3fa8 items=0 ppid=3299 pid=4528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.820000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 9 00:40:22.836588 systemd[1]: Started cri-containerd-7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4.scope. Sep 9 00:40:22.839000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit: BPF prog-id=207 op=LOAD Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { bpf } for pid=4500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=4447 pid=4500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533363032653936366231313165313731393638313965393164366236 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { perfmon } for pid=4500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=4447 pid=4500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533363032653936366231313165313731393638313965393164366236 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { bpf } for pid=4500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { bpf } for pid=4500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { bpf } for pid=4500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { perfmon } for pid=4500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { perfmon } for pid=4500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { perfmon } for pid=4500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { perfmon } for pid=4500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { perfmon } for pid=4500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { bpf } for pid=4500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { bpf } for pid=4500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit: BPF prog-id=208 op=LOAD Sep 9 00:40:22.839000 audit[4500]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=4447 pid=4500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533363032653936366231313165313731393638313965393164366236 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { bpf } for pid=4500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { bpf } for pid=4500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { perfmon } for pid=4500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { perfmon } for pid=4500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { perfmon } for pid=4500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { perfmon } for pid=4500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { perfmon } for pid=4500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { bpf } for pid=4500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { bpf } for pid=4500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit: BPF prog-id=209 op=LOAD Sep 9 00:40:22.839000 audit[4500]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=4447 pid=4500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533363032653936366231313165313731393638313965393164366236 Sep 9 00:40:22.839000 audit: BPF prog-id=209 op=UNLOAD Sep 9 00:40:22.839000 audit: BPF prog-id=208 op=UNLOAD Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { bpf } for pid=4500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { bpf } for pid=4500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { bpf } for pid=4500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { perfmon } for pid=4500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { perfmon } for pid=4500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { perfmon } for pid=4500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { perfmon } for pid=4500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { perfmon } for pid=4500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { bpf } for pid=4500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit[4500]: AVC avc: denied { bpf } for pid=4500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.839000 audit: BPF prog-id=210 op=LOAD Sep 9 00:40:22.839000 audit[4500]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=4447 pid=4500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533363032653936366231313165313731393638313965393164366236 Sep 9 00:40:22.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.854000 audit: BPF prog-id=211 op=LOAD Sep 9 00:40:22.855000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.855000 audit[4529]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4518 pid=4529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732363165323138326433326333383363343462346233643431366136 Sep 9 00:40:22.855000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.855000 audit[4529]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4518 pid=4529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732363165323138326433326333383363343462346233643431366136 Sep 9 00:40:22.855000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.855000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.855000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.855000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.855000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.855000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.855000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.855000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.855000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.855000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.855000 audit: BPF prog-id=212 op=LOAD Sep 9 00:40:22.855000 audit[4529]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4518 pid=4529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732363165323138326433326333383363343462346233643431366136 Sep 9 00:40:22.856000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.856000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.856000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.856000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.856000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.856000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.856000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.856000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.856000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.856000 audit: BPF prog-id=213 op=LOAD Sep 9 00:40:22.856000 audit[4529]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4518 pid=4529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.856000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732363165323138326433326333383363343462346233643431366136 Sep 9 00:40:22.856000 audit: BPF prog-id=213 op=UNLOAD Sep 9 00:40:22.857000 audit: BPF prog-id=212 op=UNLOAD Sep 9 00:40:22.857000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.857000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.857000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.857000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.857000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.857000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.857000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.857000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.857000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.857000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.857000 audit: BPF prog-id=214 op=LOAD Sep 9 00:40:22.857000 audit[4529]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4518 pid=4529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.857000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732363165323138326433326333383363343462346233643431366136 Sep 9 00:40:22.860168 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 9 00:40:22.861119 env[1216]: time="2025-09-09T00:40:22.861080039Z" level=info msg="StartContainer for \"53602e966b111e17196819e91d6b602bac2b4b69b92f8348a2ce660a1e0a8e8f\" returns successfully" Sep 9 00:40:22.883284 env[1216]: time="2025-09-09T00:40:22.883246008Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-nq8sq,Uid:6096770d-69d8-4927-a6b8-24f7381dda60,Namespace:kube-system,Attempt:1,} returns sandbox id \"7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4\"" Sep 9 00:40:22.884540 kubelet[1947]: E0909 00:40:22.884222 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:40:22.887293 env[1216]: time="2025-09-09T00:40:22.886887621Z" level=info msg="CreateContainer within sandbox \"7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 9 00:40:22.899322 env[1216]: time="2025-09-09T00:40:22.899281659Z" level=info msg="CreateContainer within sandbox \"7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"3e02fb02b8bd22d6426babd0d837d4ee5188c690254a82b63e9ec5d0e26d3790\"" Sep 9 00:40:22.901046 env[1216]: time="2025-09-09T00:40:22.901021224Z" level=info msg="StartContainer for \"3e02fb02b8bd22d6426babd0d837d4ee5188c690254a82b63e9ec5d0e26d3790\"" Sep 9 00:40:22.910000 audit[4537]: AVC avc: denied { getattr } for pid=4537 comm="coredns" path="cgroup:[4026532620]" dev="nsfs" ino=4026532620 scontext=system_u:system_r:svirt_lxc_net_t:s0:c474,c1022 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 9 00:40:22.910000 audit[4537]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056a38 a2=40000da578 a3=0 items=0 ppid=4447 pid=4537 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c474,c1022 key=(null) Sep 9 00:40:22.910000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 9 00:40:22.918322 systemd[1]: Started cri-containerd-3e02fb02b8bd22d6426babd0d837d4ee5188c690254a82b63e9ec5d0e26d3790.scope. Sep 9 00:40:22.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.946000 audit: BPF prog-id=215 op=LOAD Sep 9 00:40:22.946000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.946000 audit[4577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4518 pid=4577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365303266623032623862643232643634323662616264306438333764 Sep 9 00:40:22.946000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.946000 audit[4577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4518 pid=4577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365303266623032623862643232643634323662616264306438333764 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit: BPF prog-id=216 op=LOAD Sep 9 00:40:22.947000 audit[4577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4518 pid=4577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365303266623032623862643232643634323662616264306438333764 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit: BPF prog-id=217 op=LOAD Sep 9 00:40:22.947000 audit[4577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4518 pid=4577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365303266623032623862643232643634323662616264306438333764 Sep 9 00:40:22.947000 audit: BPF prog-id=217 op=UNLOAD Sep 9 00:40:22.947000 audit: BPF prog-id=216 op=UNLOAD Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { perfmon } for pid=4577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit[4577]: AVC avc: denied { bpf } for pid=4577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:22.947000 audit: BPF prog-id=218 op=LOAD Sep 9 00:40:22.947000 audit[4577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4518 pid=4577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:22.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365303266623032623862643232643634323662616264306438333764 Sep 9 00:40:22.977033 env[1216]: time="2025-09-09T00:40:22.976980373Z" level=info msg="StartContainer for \"3e02fb02b8bd22d6426babd0d837d4ee5188c690254a82b63e9ec5d0e26d3790\" returns successfully" Sep 9 00:40:22.986000 audit[4589]: AVC avc: denied { getattr } for pid=4589 comm="coredns" path="cgroup:[4026532627]" dev="nsfs" ino=4026532627 scontext=system_u:system_r:svirt_lxc_net_t:s0:c486,c823 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 9 00:40:22.986000 audit[4589]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000054798 a2=4000156578 a3=0 items=0 ppid=4518 pid=4589 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c486,c823 key=(null) Sep 9 00:40:22.986000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 9 00:40:23.287759 systemd[1]: run-netns-cni\x2d74257dcc\x2d26f5\x2d4f65\x2d447e\x2d90adaf39b552.mount: Deactivated successfully. Sep 9 00:40:23.287849 systemd[1]: run-netns-cni\x2d59284cb1\x2d0782\x2df42e\x2da433\x2dd09bd1183683.mount: Deactivated successfully. Sep 9 00:40:23.373041 kubelet[1947]: E0909 00:40:23.372988 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:40:23.377040 kubelet[1947]: E0909 00:40:23.377015 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:40:23.383392 kubelet[1947]: I0909 00:40:23.382753 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-2fhpp" podStartSLOduration=39.382731952 podStartE2EDuration="39.382731952s" podCreationTimestamp="2025-09-09 00:39:44 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-09 00:40:23.381641965 +0000 UTC m=+44.310752900" watchObservedRunningTime="2025-09-09 00:40:23.382731952 +0000 UTC m=+44.311842887" Sep 9 00:40:23.395000 audit[4623]: NETFILTER_CFG table=filter:116 family=2 entries=18 op=nft_register_rule pid=4623 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:23.395000 audit[4623]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff1c94ea0 a2=0 a3=1 items=0 ppid=2059 pid=4623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:23.395000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:23.400000 audit[4623]: NETFILTER_CFG table=nat:117 family=2 entries=16 op=nft_register_rule pid=4623 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:23.400000 audit[4623]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4236 a0=3 a1=fffff1c94ea0 a2=0 a3=1 items=0 ppid=2059 pid=4623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:23.400000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:23.427000 audit[4632]: NETFILTER_CFG table=filter:118 family=2 entries=15 op=nft_register_rule pid=4632 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:23.427000 audit[4632]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffef9e3280 a2=0 a3=1 items=0 ppid=2059 pid=4632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:23.427000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:23.433000 audit[4632]: NETFILTER_CFG table=nat:119 family=2 entries=37 op=nft_register_chain pid=4632 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:23.433000 audit[4632]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=ffffef9e3280 a2=0 a3=1 items=0 ppid=2059 pid=4632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:23.433000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:23.816085 systemd-networkd[1042]: cali9bd20994330: Gained IPv6LL Sep 9 00:40:23.816337 systemd-networkd[1042]: cali9f2abc1214d: Gained IPv6LL Sep 9 00:40:23.816457 systemd-networkd[1042]: calif772c12523c: Gained IPv6LL Sep 9 00:40:24.378564 kubelet[1947]: E0909 00:40:24.378528 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:40:24.378899 kubelet[1947]: E0909 00:40:24.378879 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:40:24.391802 kubelet[1947]: I0909 00:40:24.391730 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-nq8sq" podStartSLOduration=40.391710968 podStartE2EDuration="40.391710968s" podCreationTimestamp="2025-09-09 00:39:44 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-09 00:40:23.420808026 +0000 UTC m=+44.349918961" watchObservedRunningTime="2025-09-09 00:40:24.391710968 +0000 UTC m=+45.320821903" Sep 9 00:40:24.409000 audit[4640]: NETFILTER_CFG table=filter:120 family=2 entries=12 op=nft_register_rule pid=4640 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:24.409000 audit[4640]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffffca72380 a2=0 a3=1 items=0 ppid=2059 pid=4640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:24.409000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:24.420000 audit[4640]: NETFILTER_CFG table=nat:121 family=2 entries=58 op=nft_register_chain pid=4640 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:24.420000 audit[4640]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=fffffca72380 a2=0 a3=1 items=0 ppid=2059 pid=4640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:24.420000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:24.607255 env[1216]: time="2025-09-09T00:40:24.607205524Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:24.609380 env[1216]: time="2025-09-09T00:40:24.609343576Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:24.611345 env[1216]: time="2025-09-09T00:40:24.611310945Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:24.612854 env[1216]: time="2025-09-09T00:40:24.612828382Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:24.613422 env[1216]: time="2025-09-09T00:40:24.613396076Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08\"" Sep 9 00:40:24.615036 env[1216]: time="2025-09-09T00:40:24.614796870Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 9 00:40:24.616275 env[1216]: time="2025-09-09T00:40:24.616224305Z" level=info msg="CreateContainer within sandbox \"68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 9 00:40:24.627820 env[1216]: time="2025-09-09T00:40:24.627767388Z" level=info msg="CreateContainer within sandbox \"68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"f294d69d19144b53ea2ef02ee1bc6b9ddd8c5c9c862f40444b4bdfbf6142e553\"" Sep 9 00:40:24.628528 env[1216]: time="2025-09-09T00:40:24.628502366Z" level=info msg="StartContainer for \"f294d69d19144b53ea2ef02ee1bc6b9ddd8c5c9c862f40444b4bdfbf6142e553\"" Sep 9 00:40:24.648391 systemd[1]: run-containerd-runc-k8s.io-f294d69d19144b53ea2ef02ee1bc6b9ddd8c5c9c862f40444b4bdfbf6142e553-runc.405G43.mount: Deactivated successfully. Sep 9 00:40:24.652973 systemd[1]: Started cri-containerd-f294d69d19144b53ea2ef02ee1bc6b9ddd8c5c9c862f40444b4bdfbf6142e553.scope. Sep 9 00:40:24.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.670000 audit: BPF prog-id=219 op=LOAD Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3952 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:24.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632393464363964313931343462353365613265663032656531626336 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3952 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:24.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632393464363964313931343462353365613265663032656531626336 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit: BPF prog-id=220 op=LOAD Sep 9 00:40:24.671000 audit[4655]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3952 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:24.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632393464363964313931343462353365613265663032656531626336 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit: BPF prog-id=221 op=LOAD Sep 9 00:40:24.671000 audit[4655]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3952 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:24.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632393464363964313931343462353365613265663032656531626336 Sep 9 00:40:24.671000 audit: BPF prog-id=221 op=UNLOAD Sep 9 00:40:24.671000 audit: BPF prog-id=220 op=UNLOAD Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.671000 audit: BPF prog-id=222 op=LOAD Sep 9 00:40:24.671000 audit[4655]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3952 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:24.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632393464363964313931343462353365613265663032656531626336 Sep 9 00:40:24.695907 env[1216]: time="2025-09-09T00:40:24.695846534Z" level=info msg="StartContainer for \"f294d69d19144b53ea2ef02ee1bc6b9ddd8c5c9c862f40444b4bdfbf6142e553\" returns successfully" Sep 9 00:40:24.847307 env[1216]: time="2025-09-09T00:40:24.847247002Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:24.848997 env[1216]: time="2025-09-09T00:40:24.848959963Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:24.851027 env[1216]: time="2025-09-09T00:40:24.850991813Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:24.852793 env[1216]: time="2025-09-09T00:40:24.852759417Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:24.853336 env[1216]: time="2025-09-09T00:40:24.853308150Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08\"" Sep 9 00:40:24.854697 env[1216]: time="2025-09-09T00:40:24.854520100Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\"" Sep 9 00:40:24.855538 env[1216]: time="2025-09-09T00:40:24.855498724Z" level=info msg="CreateContainer within sandbox \"b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 9 00:40:24.871042 env[1216]: time="2025-09-09T00:40:24.870985783Z" level=info msg="CreateContainer within sandbox \"b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"064cc618713a297bed017dfeb1963ee0dee7dfe67d43e03363994682197c23b2\"" Sep 9 00:40:24.871886 env[1216]: time="2025-09-09T00:40:24.871861124Z" level=info msg="StartContainer for \"064cc618713a297bed017dfeb1963ee0dee7dfe67d43e03363994682197c23b2\"" Sep 9 00:40:24.895407 systemd[1]: Started cri-containerd-064cc618713a297bed017dfeb1963ee0dee7dfe67d43e03363994682197c23b2.scope. Sep 9 00:40:24.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.915000 audit: BPF prog-id=223 op=LOAD Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4055 pid=4695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:24.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036346363363138373133613239376265643031376466656231393633 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4055 pid=4695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:24.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036346363363138373133613239376265643031376466656231393633 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit: BPF prog-id=224 op=LOAD Sep 9 00:40:24.916000 audit[4695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4055 pid=4695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:24.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036346363363138373133613239376265643031376466656231393633 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit: BPF prog-id=225 op=LOAD Sep 9 00:40:24.916000 audit[4695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4055 pid=4695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:24.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036346363363138373133613239376265643031376466656231393633 Sep 9 00:40:24.916000 audit: BPF prog-id=225 op=UNLOAD Sep 9 00:40:24.916000 audit: BPF prog-id=224 op=UNLOAD Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:24.916000 audit: BPF prog-id=226 op=LOAD Sep 9 00:40:24.916000 audit[4695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4055 pid=4695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:24.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036346363363138373133613239376265643031376466656231393633 Sep 9 00:40:24.942239 env[1216]: time="2025-09-09T00:40:24.942177286Z" level=info msg="StartContainer for \"064cc618713a297bed017dfeb1963ee0dee7dfe67d43e03363994682197c23b2\" returns successfully" Sep 9 00:40:25.384823 kubelet[1947]: E0909 00:40:25.384663 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:40:25.384823 kubelet[1947]: E0909 00:40:25.384748 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:40:25.416000 audit[4728]: NETFILTER_CFG table=filter:122 family=2 entries=12 op=nft_register_rule pid=4728 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:25.416000 audit[4728]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd3a93930 a2=0 a3=1 items=0 ppid=2059 pid=4728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:25.416000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:25.420000 audit[4728]: NETFILTER_CFG table=nat:123 family=2 entries=22 op=nft_register_rule pid=4728 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:25.420000 audit[4728]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffd3a93930 a2=0 a3=1 items=0 ppid=2059 pid=4728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:25.420000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:25.427641 kubelet[1947]: I0909 00:40:25.427585 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-64697c68d4-xvgpz" podStartSLOduration=27.502042512 podStartE2EDuration="32.427569224s" podCreationTimestamp="2025-09-09 00:39:53 +0000 UTC" firstStartedPulling="2025-09-09 00:40:19.689099194 +0000 UTC m=+40.618210129" lastFinishedPulling="2025-09-09 00:40:24.614625906 +0000 UTC m=+45.543736841" observedRunningTime="2025-09-09 00:40:25.426367635 +0000 UTC m=+46.355478570" watchObservedRunningTime="2025-09-09 00:40:25.427569224 +0000 UTC m=+46.356680159" Sep 9 00:40:25.428077 kubelet[1947]: I0909 00:40:25.428043 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-64697c68d4-lck72" podStartSLOduration=28.085116157 podStartE2EDuration="32.428033195s" podCreationTimestamp="2025-09-09 00:39:53 +0000 UTC" firstStartedPulling="2025-09-09 00:40:20.511414577 +0000 UTC m=+41.440525472" lastFinishedPulling="2025-09-09 00:40:24.854331615 +0000 UTC m=+45.783442510" observedRunningTime="2025-09-09 00:40:25.400291731 +0000 UTC m=+46.329402666" watchObservedRunningTime="2025-09-09 00:40:25.428033195 +0000 UTC m=+46.357144130" Sep 9 00:40:26.096000 audit[4666]: AVC avc: denied { watch } for pid=4666 comm="apiserver" path="/calico-apiserver-certs/..2025_09_09_00_40_06.1136002346/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c227,c750 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c227,c750 tclass=file permissive=0 Sep 9 00:40:26.096000 audit[4666]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4001109280 a2=fc6 a3=0 items=0 ppid=3952 pid=4666 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c227,c750 key=(null) Sep 9 00:40:26.096000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 9 00:40:26.118235 env[1216]: time="2025-09-09T00:40:26.118174709Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:26.121729 env[1216]: time="2025-09-09T00:40:26.121683391Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a319b5bdc1001e98875b68e2943279adb74bcb19d09f1db857bc27959a078a65,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:26.124127 env[1216]: time="2025-09-09T00:40:26.124097927Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:26.126149 env[1216]: time="2025-09-09T00:40:26.126108695Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:731ab232ca708102ab332340b1274d5cd656aa896ecc5368ee95850b811df86f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:26.126666 env[1216]: time="2025-09-09T00:40:26.126635667Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\" returns image reference \"sha256:a319b5bdc1001e98875b68e2943279adb74bcb19d09f1db857bc27959a078a65\"" Sep 9 00:40:26.128353 env[1216]: time="2025-09-09T00:40:26.128317626Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\"" Sep 9 00:40:26.130454 env[1216]: time="2025-09-09T00:40:26.130356074Z" level=info msg="CreateContainer within sandbox \"ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Sep 9 00:40:26.147579 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2809003191.mount: Deactivated successfully. Sep 9 00:40:26.158986 env[1216]: time="2025-09-09T00:40:26.158897224Z" level=info msg="CreateContainer within sandbox \"ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"1bfa917a97f284bdf789fcff5bd45b81590c189548ee49751e0222ac731b8034\"" Sep 9 00:40:26.163642 env[1216]: time="2025-09-09T00:40:26.163608614Z" level=info msg="StartContainer for \"1bfa917a97f284bdf789fcff5bd45b81590c189548ee49751e0222ac731b8034\"" Sep 9 00:40:26.195480 systemd[1]: Started cri-containerd-1bfa917a97f284bdf789fcff5bd45b81590c189548ee49751e0222ac731b8034.scope. Sep 9 00:40:26.215000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.215000 audit[4737]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3901 pid=4737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:26.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162666139313761393766323834626466373839666366663562643435 Sep 9 00:40:26.216000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.216000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.216000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.216000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.216000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.216000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.216000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.216000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.216000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.216000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.216000 audit: BPF prog-id=227 op=LOAD Sep 9 00:40:26.216000 audit[4737]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3901 pid=4737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:26.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162666139313761393766323834626466373839666366663562643435 Sep 9 00:40:26.216000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.216000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.216000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.216000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.216000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.216000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.216000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.216000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.216000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.216000 audit: BPF prog-id=228 op=LOAD Sep 9 00:40:26.216000 audit[4737]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3901 pid=4737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:26.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162666139313761393766323834626466373839666366663562643435 Sep 9 00:40:26.217000 audit: BPF prog-id=228 op=UNLOAD Sep 9 00:40:26.217000 audit: BPF prog-id=227 op=UNLOAD Sep 9 00:40:26.217000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.217000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.217000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.217000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.217000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.217000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.217000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.217000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.217000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.217000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:26.217000 audit: BPF prog-id=229 op=LOAD Sep 9 00:40:26.217000 audit[4737]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3901 pid=4737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:26.217000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162666139313761393766323834626466373839666366663562643435 Sep 9 00:40:26.232082 env[1216]: time="2025-09-09T00:40:26.232038099Z" level=info msg="StartContainer for \"1bfa917a97f284bdf789fcff5bd45b81590c189548ee49751e0222ac731b8034\" returns successfully" Sep 9 00:40:26.328324 kubelet[1947]: I0909 00:40:26.328280 1947 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Sep 9 00:40:26.328324 kubelet[1947]: I0909 00:40:26.328323 1947 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Sep 9 00:40:26.388599 kubelet[1947]: E0909 00:40:26.388504 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:40:26.389386 kubelet[1947]: I0909 00:40:26.389362 1947 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 9 00:40:26.389580 kubelet[1947]: I0909 00:40:26.389386 1947 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 9 00:40:26.435000 audit[4770]: NETFILTER_CFG table=filter:124 family=2 entries=12 op=nft_register_rule pid=4770 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:26.435000 audit[4770]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd027ec10 a2=0 a3=1 items=0 ppid=2059 pid=4770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:26.435000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:26.442000 audit[4770]: NETFILTER_CFG table=nat:125 family=2 entries=22 op=nft_register_rule pid=4770 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:26.442000 audit[4770]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffd027ec10 a2=0 a3=1 items=0 ppid=2059 pid=4770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:26.442000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:26.624735 systemd[1]: run-containerd-runc-k8s.io-1bfa917a97f284bdf789fcff5bd45b81590c189548ee49751e0222ac731b8034-runc.3oEJKZ.mount: Deactivated successfully. Sep 9 00:40:26.765000 audit[4706]: AVC avc: denied { watch } for pid=4706 comm="apiserver" path="/calico-apiserver-certs/..2025_09_09_00_40_06.2533675062/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c565,c602 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c565,c602 tclass=file permissive=0 Sep 9 00:40:26.765000 audit[4706]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000cd2000 a2=fc6 a3=0 items=0 ppid=4055 pid=4706 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c565,c602 key=(null) Sep 9 00:40:26.765000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 9 00:40:27.595884 kernel: kauditd_printk_skb: 531 callbacks suppressed Sep 9 00:40:27.596052 kernel: audit: type=1130 audit(1757378427.593:1438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.102:22-10.0.0.1:36530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:27.593000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.102:22-10.0.0.1:36530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:27.594577 systemd[1]: Started sshd@8-10.0.0.102:22-10.0.0.1:36530.service. Sep 9 00:40:27.657202 sshd[4773]: Accepted publickey for core from 10.0.0.1 port 36530 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:40:27.656000 audit[4773]: USER_ACCT pid=4773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:27.659998 kernel: audit: type=1101 audit(1757378427.656:1439): pid=4773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:27.660000 audit[4773]: CRED_ACQ pid=4773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:27.664144 sshd[4773]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:40:27.665363 kernel: audit: type=1103 audit(1757378427.660:1440): pid=4773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:27.665469 kernel: audit: type=1006 audit(1757378427.660:1441): pid=4773 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Sep 9 00:40:27.665504 kernel: audit: type=1300 audit(1757378427.660:1441): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1788070 a2=3 a3=1 items=0 ppid=1 pid=4773 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:27.660000 audit[4773]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1788070 a2=3 a3=1 items=0 ppid=1 pid=4773 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:27.660000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 9 00:40:27.668979 kernel: audit: type=1327 audit(1757378427.660:1441): proctitle=737368643A20636F7265205B707269765D Sep 9 00:40:27.673445 systemd[1]: Started session-9.scope. Sep 9 00:40:27.673804 systemd-logind[1205]: New session 9 of user core. Sep 9 00:40:27.682000 audit[4773]: USER_START pid=4773 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:27.685000 audit[4775]: CRED_ACQ pid=4775 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:27.689051 kernel: audit: type=1105 audit(1757378427.682:1442): pid=4773 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:27.689191 kernel: audit: type=1103 audit(1757378427.685:1443): pid=4775 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:27.981888 sshd[4773]: pam_unix(sshd:session): session closed for user core Sep 9 00:40:27.982000 audit[4773]: USER_END pid=4773 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:27.984978 systemd[1]: sshd@8-10.0.0.102:22-10.0.0.1:36530.service: Deactivated successfully. Sep 9 00:40:27.985707 systemd[1]: session-9.scope: Deactivated successfully. Sep 9 00:40:27.982000 audit[4773]: CRED_DISP pid=4773 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:27.986154 systemd-logind[1205]: Session 9 logged out. Waiting for processes to exit. Sep 9 00:40:27.986727 systemd-logind[1205]: Removed session 9. Sep 9 00:40:27.988291 kernel: audit: type=1106 audit(1757378427.982:1444): pid=4773 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:27.988354 kernel: audit: type=1104 audit(1757378427.982:1445): pid=4773 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:27.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.102:22-10.0.0.1:36530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:28.334157 env[1216]: time="2025-09-09T00:40:28.334081156Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:28.336118 env[1216]: time="2025-09-09T00:40:28.336091361Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:34117caf92350e1565610f2254377d7455b11e36666b5ce11b4a13670720432a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:28.339545 env[1216]: time="2025-09-09T00:40:28.339508358Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:28.341329 env[1216]: time="2025-09-09T00:40:28.341293078Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:27c4187717f08f0a5727019d8beb7597665eb47e69eaa1d7d091a7e28913e577,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 9 00:40:28.341730 env[1216]: time="2025-09-09T00:40:28.341702288Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\" returns image reference \"sha256:34117caf92350e1565610f2254377d7455b11e36666b5ce11b4a13670720432a\"" Sep 9 00:40:28.355652 env[1216]: time="2025-09-09T00:40:28.355616441Z" level=info msg="CreateContainer within sandbox \"08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Sep 9 00:40:28.371303 env[1216]: time="2025-09-09T00:40:28.371256754Z" level=info msg="CreateContainer within sandbox \"08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"0e3d09fee794c00346725a4db127eeefc816751be9babc0e09c733bf5a3f8e31\"" Sep 9 00:40:28.371814 env[1216]: time="2025-09-09T00:40:28.371786966Z" level=info msg="StartContainer for \"0e3d09fee794c00346725a4db127eeefc816751be9babc0e09c733bf5a3f8e31\"" Sep 9 00:40:28.398009 systemd[1]: Started cri-containerd-0e3d09fee794c00346725a4db127eeefc816751be9babc0e09c733bf5a3f8e31.scope. Sep 9 00:40:28.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.428000 audit: BPF prog-id=230 op=LOAD Sep 9 00:40:28.429000 audit[4798]: AVC avc: denied { bpf } for pid=4798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.429000 audit[4798]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4397 pid=4798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:28.429000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065336430396665653739346330303334363732356134646231323765 Sep 9 00:40:28.429000 audit[4798]: AVC avc: denied { perfmon } for pid=4798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.429000 audit[4798]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4397 pid=4798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:28.429000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065336430396665653739346330303334363732356134646231323765 Sep 9 00:40:28.429000 audit[4798]: AVC avc: denied { bpf } for pid=4798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.429000 audit[4798]: AVC avc: denied { bpf } for pid=4798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.429000 audit[4798]: AVC avc: denied { bpf } for pid=4798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.429000 audit[4798]: AVC avc: denied { perfmon } for pid=4798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.429000 audit[4798]: AVC avc: denied { perfmon } for pid=4798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.429000 audit[4798]: AVC avc: denied { perfmon } for pid=4798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.429000 audit[4798]: AVC avc: denied { perfmon } for pid=4798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.429000 audit[4798]: AVC avc: denied { perfmon } for pid=4798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.429000 audit[4798]: AVC avc: denied { bpf } for pid=4798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.429000 audit[4798]: AVC avc: denied { bpf } for pid=4798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.429000 audit: BPF prog-id=231 op=LOAD Sep 9 00:40:28.429000 audit[4798]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4397 pid=4798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:28.429000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065336430396665653739346330303334363732356134646231323765 Sep 9 00:40:28.429000 audit[4798]: AVC avc: denied { bpf } for pid=4798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.429000 audit[4798]: AVC avc: denied { bpf } for pid=4798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.429000 audit[4798]: AVC avc: denied { perfmon } for pid=4798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.429000 audit[4798]: AVC avc: denied { perfmon } for pid=4798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.429000 audit[4798]: AVC avc: denied { perfmon } for pid=4798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.429000 audit[4798]: AVC avc: denied { perfmon } for pid=4798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.429000 audit[4798]: AVC avc: denied { perfmon } for pid=4798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.429000 audit[4798]: AVC avc: denied { bpf } for pid=4798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.429000 audit[4798]: AVC avc: denied { bpf } for pid=4798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.429000 audit: BPF prog-id=232 op=LOAD Sep 9 00:40:28.429000 audit[4798]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4397 pid=4798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:28.429000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065336430396665653739346330303334363732356134646231323765 Sep 9 00:40:28.430000 audit: BPF prog-id=232 op=UNLOAD Sep 9 00:40:28.430000 audit: BPF prog-id=231 op=UNLOAD Sep 9 00:40:28.430000 audit[4798]: AVC avc: denied { bpf } for pid=4798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.430000 audit[4798]: AVC avc: denied { bpf } for pid=4798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.430000 audit[4798]: AVC avc: denied { bpf } for pid=4798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.430000 audit[4798]: AVC avc: denied { perfmon } for pid=4798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.430000 audit[4798]: AVC avc: denied { perfmon } for pid=4798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.430000 audit[4798]: AVC avc: denied { perfmon } for pid=4798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.430000 audit[4798]: AVC avc: denied { perfmon } for pid=4798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.430000 audit[4798]: AVC avc: denied { perfmon } for pid=4798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.430000 audit[4798]: AVC avc: denied { bpf } for pid=4798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.430000 audit[4798]: AVC avc: denied { bpf } for pid=4798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 9 00:40:28.430000 audit: BPF prog-id=233 op=LOAD Sep 9 00:40:28.430000 audit[4798]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4397 pid=4798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:28.430000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065336430396665653739346330303334363732356134646231323765 Sep 9 00:40:28.498713 env[1216]: time="2025-09-09T00:40:28.498669147Z" level=info msg="StartContainer for \"0e3d09fee794c00346725a4db127eeefc816751be9babc0e09c733bf5a3f8e31\" returns successfully" Sep 9 00:40:29.418315 kubelet[1947]: I0909 00:40:29.418248 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-bbwbd" podStartSLOduration=23.82179592 podStartE2EDuration="30.418223313s" podCreationTimestamp="2025-09-09 00:39:59 +0000 UTC" firstStartedPulling="2025-09-09 00:40:19.531202097 +0000 UTC m=+40.460313032" lastFinishedPulling="2025-09-09 00:40:26.12762949 +0000 UTC m=+47.056740425" observedRunningTime="2025-09-09 00:40:26.413147827 +0000 UTC m=+47.342258762" watchObservedRunningTime="2025-09-09 00:40:29.418223313 +0000 UTC m=+50.347334248" Sep 9 00:40:29.419021 kubelet[1947]: I0909 00:40:29.418986 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-76895984bd-km4sd" podStartSLOduration=23.755321548 podStartE2EDuration="29.41897809s" podCreationTimestamp="2025-09-09 00:40:00 +0000 UTC" firstStartedPulling="2025-09-09 00:40:22.679074609 +0000 UTC m=+43.608185504" lastFinishedPulling="2025-09-09 00:40:28.342731111 +0000 UTC m=+49.271842046" observedRunningTime="2025-09-09 00:40:29.417539258 +0000 UTC m=+50.346650153" watchObservedRunningTime="2025-09-09 00:40:29.41897809 +0000 UTC m=+50.348089025" Sep 9 00:40:29.425022 systemd[1]: run-containerd-runc-k8s.io-0e3d09fee794c00346725a4db127eeefc816751be9babc0e09c733bf5a3f8e31-runc.TxlwNA.mount: Deactivated successfully. Sep 9 00:40:32.986748 systemd[1]: Started sshd@9-10.0.0.102:22-10.0.0.1:36206.service. Sep 9 00:40:32.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.102:22-10.0.0.1:36206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:32.990884 kernel: kauditd_printk_skb: 58 callbacks suppressed Sep 9 00:40:32.991075 kernel: audit: type=1130 audit(1757378432.985:1465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.102:22-10.0.0.1:36206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:33.028000 audit[4887]: USER_ACCT pid=4887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.029719 sshd[4887]: Accepted publickey for core from 10.0.0.1 port 36206 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:40:33.031622 sshd[4887]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:40:33.030000 audit[4887]: CRED_ACQ pid=4887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.034793 kernel: audit: type=1101 audit(1757378433.028:1466): pid=4887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.034861 kernel: audit: type=1103 audit(1757378433.030:1467): pid=4887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.036634 kernel: audit: type=1006 audit(1757378433.030:1468): pid=4887 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Sep 9 00:40:33.030000 audit[4887]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1f430a0 a2=3 a3=1 items=0 ppid=1 pid=4887 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:33.039844 kernel: audit: type=1300 audit(1757378433.030:1468): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1f430a0 a2=3 a3=1 items=0 ppid=1 pid=4887 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:33.030000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 9 00:40:33.040933 kernel: audit: type=1327 audit(1757378433.030:1468): proctitle=737368643A20636F7265205B707269765D Sep 9 00:40:33.045316 systemd[1]: Started session-10.scope. Sep 9 00:40:33.045680 systemd-logind[1205]: New session 10 of user core. Sep 9 00:40:33.048000 audit[4887]: USER_START pid=4887 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.050000 audit[4889]: CRED_ACQ pid=4889 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.055262 kernel: audit: type=1105 audit(1757378433.048:1469): pid=4887 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.055308 kernel: audit: type=1103 audit(1757378433.050:1470): pid=4889 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.220201 sshd[4887]: pam_unix(sshd:session): session closed for user core Sep 9 00:40:33.221000 audit[4887]: USER_END pid=4887 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.224465 systemd[1]: Started sshd@10-10.0.0.102:22-10.0.0.1:36216.service. Sep 9 00:40:33.225051 systemd[1]: sshd@9-10.0.0.102:22-10.0.0.1:36206.service: Deactivated successfully. Sep 9 00:40:33.225824 systemd[1]: session-10.scope: Deactivated successfully. Sep 9 00:40:33.221000 audit[4887]: CRED_DISP pid=4887 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.227852 systemd-logind[1205]: Session 10 logged out. Waiting for processes to exit. Sep 9 00:40:33.229035 kernel: audit: type=1106 audit(1757378433.221:1471): pid=4887 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.229282 kernel: audit: type=1104 audit(1757378433.221:1472): pid=4887 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.223000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.102:22-10.0.0.1:36216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:33.224000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.102:22-10.0.0.1:36206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:33.229038 systemd-logind[1205]: Removed session 10. Sep 9 00:40:33.263000 audit[4900]: USER_ACCT pid=4900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.264718 sshd[4900]: Accepted publickey for core from 10.0.0.1 port 36216 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:40:33.265000 audit[4900]: CRED_ACQ pid=4900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.265000 audit[4900]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffaffe560 a2=3 a3=1 items=0 ppid=1 pid=4900 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:33.265000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 9 00:40:33.267328 sshd[4900]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:40:33.271572 systemd[1]: Started session-11.scope. Sep 9 00:40:33.271880 systemd-logind[1205]: New session 11 of user core. Sep 9 00:40:33.274000 audit[4900]: USER_START pid=4900 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.275000 audit[4903]: CRED_ACQ pid=4903 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.451229 sshd[4900]: pam_unix(sshd:session): session closed for user core Sep 9 00:40:33.452000 audit[4900]: USER_END pid=4900 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.452000 audit[4900]: CRED_DISP pid=4900 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.455278 systemd[1]: Started sshd@11-10.0.0.102:22-10.0.0.1:36232.service. Sep 9 00:40:33.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.102:22-10.0.0.1:36232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:33.455833 systemd[1]: sshd@10-10.0.0.102:22-10.0.0.1:36216.service: Deactivated successfully. Sep 9 00:40:33.455000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.102:22-10.0.0.1:36216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:33.456645 systemd[1]: session-11.scope: Deactivated successfully. Sep 9 00:40:33.457273 systemd-logind[1205]: Session 11 logged out. Waiting for processes to exit. Sep 9 00:40:33.457998 systemd-logind[1205]: Removed session 11. Sep 9 00:40:33.496000 audit[4911]: USER_ACCT pid=4911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.498127 sshd[4911]: Accepted publickey for core from 10.0.0.1 port 36232 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:40:33.497000 audit[4911]: CRED_ACQ pid=4911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.498000 audit[4911]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5b40170 a2=3 a3=1 items=0 ppid=1 pid=4911 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:33.498000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 9 00:40:33.499558 sshd[4911]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:40:33.503025 systemd-logind[1205]: New session 12 of user core. Sep 9 00:40:33.503855 systemd[1]: Started session-12.scope. Sep 9 00:40:33.507000 audit[4911]: USER_START pid=4911 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.508000 audit[4914]: CRED_ACQ pid=4914 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.632355 sshd[4911]: pam_unix(sshd:session): session closed for user core Sep 9 00:40:33.632000 audit[4911]: USER_END pid=4911 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.632000 audit[4911]: CRED_DISP pid=4911 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:33.635698 systemd[1]: sshd@11-10.0.0.102:22-10.0.0.1:36232.service: Deactivated successfully. Sep 9 00:40:33.634000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.102:22-10.0.0.1:36232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:33.636475 systemd[1]: session-12.scope: Deactivated successfully. Sep 9 00:40:33.636936 systemd-logind[1205]: Session 12 logged out. Waiting for processes to exit. Sep 9 00:40:33.637512 systemd-logind[1205]: Removed session 12. Sep 9 00:40:35.930000 audit[1805]: AVC avc: denied { watch } for pid=1805 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:40:35.930000 audit[1805]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400278c090 a2=fc6 a3=0 items=0 ppid=1669 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 key=(null) Sep 9 00:40:35.930000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 9 00:40:35.930000 audit[1805]: AVC avc: denied { watch } for pid=1805 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:40:35.930000 audit[1805]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002efc060 a2=fc6 a3=0 items=0 ppid=1669 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 key=(null) Sep 9 00:40:35.930000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 9 00:40:36.257000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:40:36.257000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=4013681710 a2=fc6 a3=0 items=0 ppid=1654 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 key=(null) Sep 9 00:40:36.257000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313032002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 9 00:40:36.261000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:40:36.261000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=401383c780 a2=fc6 a3=0 items=0 ppid=1654 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 key=(null) Sep 9 00:40:36.261000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313032002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 9 00:40:36.261000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:40:36.261000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=401184d220 a2=fc6 a3=0 items=0 ppid=1654 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 key=(null) Sep 9 00:40:36.261000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313032002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 9 00:40:36.262000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:40:36.262000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=401383c7b0 a2=fc6 a3=0 items=0 ppid=1654 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 key=(null) Sep 9 00:40:36.262000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313032002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 9 00:40:36.269000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:40:36.269000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:40:36.269000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=4013681890 a2=fc6 a3=0 items=0 ppid=1654 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 key=(null) Sep 9 00:40:36.269000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313032002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 9 00:40:36.269000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=401096dd00 a2=fc6 a3=0 items=0 ppid=1654 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c82,c638 key=(null) Sep 9 00:40:36.269000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313032002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 9 00:40:38.636992 systemd[1]: Started sshd@12-10.0.0.102:22-10.0.0.1:36246.service. Sep 9 00:40:38.636000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.102:22-10.0.0.1:36246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:38.638149 kernel: kauditd_printk_skb: 47 callbacks suppressed Sep 9 00:40:38.638211 kernel: audit: type=1130 audit(1757378438.636:1500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.102:22-10.0.0.1:36246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:38.682000 audit[4936]: USER_ACCT pid=4936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:38.683595 sshd[4936]: Accepted publickey for core from 10.0.0.1 port 36246 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:40:38.685282 sshd[4936]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:40:38.683000 audit[4936]: CRED_ACQ pid=4936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:38.688479 kernel: audit: type=1101 audit(1757378438.682:1501): pid=4936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:38.688555 kernel: audit: type=1103 audit(1757378438.683:1502): pid=4936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:38.688769 kernel: audit: type=1006 audit(1757378438.684:1503): pid=4936 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Sep 9 00:40:38.684000 audit[4936]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc126f030 a2=3 a3=1 items=0 ppid=1 pid=4936 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:38.690382 systemd-logind[1205]: New session 13 of user core. Sep 9 00:40:38.690786 systemd[1]: Started session-13.scope. Sep 9 00:40:38.692927 kernel: audit: type=1300 audit(1757378438.684:1503): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc126f030 a2=3 a3=1 items=0 ppid=1 pid=4936 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:38.693017 kernel: audit: type=1327 audit(1757378438.684:1503): proctitle=737368643A20636F7265205B707269765D Sep 9 00:40:38.684000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 9 00:40:38.694000 audit[4936]: USER_START pid=4936 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:38.695000 audit[4938]: CRED_ACQ pid=4938 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:38.701430 kernel: audit: type=1105 audit(1757378438.694:1504): pid=4936 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:38.701505 kernel: audit: type=1103 audit(1757378438.695:1505): pid=4938 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:38.811450 sshd[4936]: pam_unix(sshd:session): session closed for user core Sep 9 00:40:38.811000 audit[4936]: USER_END pid=4936 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:38.814728 systemd[1]: sshd@12-10.0.0.102:22-10.0.0.1:36246.service: Deactivated successfully. Sep 9 00:40:38.815497 systemd[1]: session-13.scope: Deactivated successfully. Sep 9 00:40:38.815994 systemd-logind[1205]: Session 13 logged out. Waiting for processes to exit. Sep 9 00:40:38.811000 audit[4936]: CRED_DISP pid=4936 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:38.816596 systemd-logind[1205]: Removed session 13. Sep 9 00:40:38.818660 kernel: audit: type=1106 audit(1757378438.811:1506): pid=4936 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:38.818742 kernel: audit: type=1104 audit(1757378438.811:1507): pid=4936 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:38.814000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.102:22-10.0.0.1:36246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:39.155096 env[1216]: time="2025-09-09T00:40:39.155052795Z" level=info msg="StopPodSandbox for \"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\"" Sep 9 00:40:39.231804 env[1216]: 2025-09-09 00:40:39.194 [WARNING][4959] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0", GenerateName:"calico-apiserver-64697c68d4-", Namespace:"calico-apiserver", SelfLink:"", UID:"fe376a17-0c1c-493f-a52e-f913a3e988a4", ResourceVersion:"1132", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64697c68d4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51", Pod:"calico-apiserver-64697c68d4-xvgpz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali719bb4d1963", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:39.231804 env[1216]: 2025-09-09 00:40:39.195 [INFO][4959] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Sep 9 00:40:39.231804 env[1216]: 2025-09-09 00:40:39.195 [INFO][4959] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" iface="eth0" netns="" Sep 9 00:40:39.231804 env[1216]: 2025-09-09 00:40:39.195 [INFO][4959] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Sep 9 00:40:39.231804 env[1216]: 2025-09-09 00:40:39.195 [INFO][4959] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Sep 9 00:40:39.231804 env[1216]: 2025-09-09 00:40:39.217 [INFO][4970] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" HandleID="k8s-pod-network.2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Workload="localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0" Sep 9 00:40:39.231804 env[1216]: 2025-09-09 00:40:39.217 [INFO][4970] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:39.231804 env[1216]: 2025-09-09 00:40:39.217 [INFO][4970] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:39.231804 env[1216]: 2025-09-09 00:40:39.227 [WARNING][4970] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" HandleID="k8s-pod-network.2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Workload="localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0" Sep 9 00:40:39.231804 env[1216]: 2025-09-09 00:40:39.227 [INFO][4970] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" HandleID="k8s-pod-network.2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Workload="localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0" Sep 9 00:40:39.231804 env[1216]: 2025-09-09 00:40:39.228 [INFO][4970] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:39.231804 env[1216]: 2025-09-09 00:40:39.230 [INFO][4959] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Sep 9 00:40:39.232293 env[1216]: time="2025-09-09T00:40:39.231848190Z" level=info msg="TearDown network for sandbox \"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\" successfully" Sep 9 00:40:39.232293 env[1216]: time="2025-09-09T00:40:39.231878791Z" level=info msg="StopPodSandbox for \"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\" returns successfully" Sep 9 00:40:39.232618 env[1216]: time="2025-09-09T00:40:39.232583924Z" level=info msg="RemovePodSandbox for \"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\"" Sep 9 00:40:39.232791 env[1216]: time="2025-09-09T00:40:39.232734447Z" level=info msg="Forcibly stopping sandbox \"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\"" Sep 9 00:40:39.300177 env[1216]: 2025-09-09 00:40:39.266 [WARNING][4989] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0", GenerateName:"calico-apiserver-64697c68d4-", Namespace:"calico-apiserver", SelfLink:"", UID:"fe376a17-0c1c-493f-a52e-f913a3e988a4", ResourceVersion:"1132", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64697c68d4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"68cf9029f84e8edb25ff29aaea43e46e11b9943bacf5ef03a981a998e4a71a51", Pod:"calico-apiserver-64697c68d4-xvgpz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali719bb4d1963", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:39.300177 env[1216]: 2025-09-09 00:40:39.266 [INFO][4989] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Sep 9 00:40:39.300177 env[1216]: 2025-09-09 00:40:39.266 [INFO][4989] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" iface="eth0" netns="" Sep 9 00:40:39.300177 env[1216]: 2025-09-09 00:40:39.266 [INFO][4989] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Sep 9 00:40:39.300177 env[1216]: 2025-09-09 00:40:39.266 [INFO][4989] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Sep 9 00:40:39.300177 env[1216]: 2025-09-09 00:40:39.283 [INFO][4998] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" HandleID="k8s-pod-network.2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Workload="localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0" Sep 9 00:40:39.300177 env[1216]: 2025-09-09 00:40:39.283 [INFO][4998] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:39.300177 env[1216]: 2025-09-09 00:40:39.283 [INFO][4998] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:39.300177 env[1216]: 2025-09-09 00:40:39.292 [WARNING][4998] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" HandleID="k8s-pod-network.2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Workload="localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0" Sep 9 00:40:39.300177 env[1216]: 2025-09-09 00:40:39.292 [INFO][4998] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" HandleID="k8s-pod-network.2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Workload="localhost-k8s-calico--apiserver--64697c68d4--xvgpz-eth0" Sep 9 00:40:39.300177 env[1216]: 2025-09-09 00:40:39.295 [INFO][4998] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:39.300177 env[1216]: 2025-09-09 00:40:39.298 [INFO][4989] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9" Sep 9 00:40:39.300695 env[1216]: time="2025-09-09T00:40:39.300663032Z" level=info msg="TearDown network for sandbox \"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\" successfully" Sep 9 00:40:39.309553 env[1216]: time="2025-09-09T00:40:39.309510922Z" level=info msg="RemovePodSandbox \"2353bf4667f349c1fecd2a7a2c699f224d98b8d8519f0574ca253179ae9778d9\" returns successfully" Sep 9 00:40:39.310361 env[1216]: time="2025-09-09T00:40:39.310335258Z" level=info msg="StopPodSandbox for \"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\"" Sep 9 00:40:39.379506 env[1216]: 2025-09-09 00:40:39.342 [WARNING][5016] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0", GenerateName:"calico-apiserver-64697c68d4-", Namespace:"calico-apiserver", SelfLink:"", UID:"4e264071-44ad-445c-9e02-e22ebf1a75c8", ResourceVersion:"1128", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64697c68d4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8", Pod:"calico-apiserver-64697c68d4-lck72", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie87bbd09d8a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:39.379506 env[1216]: 2025-09-09 00:40:39.342 [INFO][5016] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Sep 9 00:40:39.379506 env[1216]: 2025-09-09 00:40:39.342 [INFO][5016] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" iface="eth0" netns="" Sep 9 00:40:39.379506 env[1216]: 2025-09-09 00:40:39.342 [INFO][5016] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Sep 9 00:40:39.379506 env[1216]: 2025-09-09 00:40:39.342 [INFO][5016] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Sep 9 00:40:39.379506 env[1216]: 2025-09-09 00:40:39.363 [INFO][5025] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" HandleID="k8s-pod-network.251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Workload="localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0" Sep 9 00:40:39.379506 env[1216]: 2025-09-09 00:40:39.363 [INFO][5025] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:39.379506 env[1216]: 2025-09-09 00:40:39.363 [INFO][5025] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:39.379506 env[1216]: 2025-09-09 00:40:39.372 [WARNING][5025] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" HandleID="k8s-pod-network.251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Workload="localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0" Sep 9 00:40:39.379506 env[1216]: 2025-09-09 00:40:39.372 [INFO][5025] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" HandleID="k8s-pod-network.251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Workload="localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0" Sep 9 00:40:39.379506 env[1216]: 2025-09-09 00:40:39.374 [INFO][5025] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:39.379506 env[1216]: 2025-09-09 00:40:39.378 [INFO][5016] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Sep 9 00:40:39.380038 env[1216]: time="2025-09-09T00:40:39.379993116Z" level=info msg="TearDown network for sandbox \"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\" successfully" Sep 9 00:40:39.380118 env[1216]: time="2025-09-09T00:40:39.380101118Z" level=info msg="StopPodSandbox for \"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\" returns successfully" Sep 9 00:40:39.380599 env[1216]: time="2025-09-09T00:40:39.380573447Z" level=info msg="RemovePodSandbox for \"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\"" Sep 9 00:40:39.380731 env[1216]: time="2025-09-09T00:40:39.380693570Z" level=info msg="Forcibly stopping sandbox \"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\"" Sep 9 00:40:39.454151 env[1216]: 2025-09-09 00:40:39.420 [WARNING][5047] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0", GenerateName:"calico-apiserver-64697c68d4-", Namespace:"calico-apiserver", SelfLink:"", UID:"4e264071-44ad-445c-9e02-e22ebf1a75c8", ResourceVersion:"1128", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64697c68d4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b20444bea3da28d218dc18751bea36619e83334acdc254baae3a8e76c18cd6d8", Pod:"calico-apiserver-64697c68d4-lck72", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie87bbd09d8a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:39.454151 env[1216]: 2025-09-09 00:40:39.420 [INFO][5047] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Sep 9 00:40:39.454151 env[1216]: 2025-09-09 00:40:39.421 [INFO][5047] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" iface="eth0" netns="" Sep 9 00:40:39.454151 env[1216]: 2025-09-09 00:40:39.421 [INFO][5047] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Sep 9 00:40:39.454151 env[1216]: 2025-09-09 00:40:39.421 [INFO][5047] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Sep 9 00:40:39.454151 env[1216]: 2025-09-09 00:40:39.438 [INFO][5055] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" HandleID="k8s-pod-network.251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Workload="localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0" Sep 9 00:40:39.454151 env[1216]: 2025-09-09 00:40:39.438 [INFO][5055] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:39.454151 env[1216]: 2025-09-09 00:40:39.438 [INFO][5055] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:39.454151 env[1216]: 2025-09-09 00:40:39.448 [WARNING][5055] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" HandleID="k8s-pod-network.251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Workload="localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0" Sep 9 00:40:39.454151 env[1216]: 2025-09-09 00:40:39.448 [INFO][5055] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" HandleID="k8s-pod-network.251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Workload="localhost-k8s-calico--apiserver--64697c68d4--lck72-eth0" Sep 9 00:40:39.454151 env[1216]: 2025-09-09 00:40:39.449 [INFO][5055] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:39.454151 env[1216]: 2025-09-09 00:40:39.451 [INFO][5047] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d" Sep 9 00:40:39.454678 env[1216]: time="2025-09-09T00:40:39.454641270Z" level=info msg="TearDown network for sandbox \"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\" successfully" Sep 9 00:40:39.457712 env[1216]: time="2025-09-09T00:40:39.457682489Z" level=info msg="RemovePodSandbox \"251bcee793c369b7d37913179ab94624d4bd0a9cd5db5150dfb61feaf890e72d\" returns successfully" Sep 9 00:40:39.458378 env[1216]: time="2025-09-09T00:40:39.458351462Z" level=info msg="StopPodSandbox for \"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\"" Sep 9 00:40:39.522770 env[1216]: 2025-09-09 00:40:39.490 [WARNING][5073] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--bbwbd-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"98779d2b-0a70-471f-9d22-2046c220906c", ResourceVersion:"1142", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1", Pod:"csi-node-driver-bbwbd", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali641633e9ad4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:39.522770 env[1216]: 2025-09-09 00:40:39.490 [INFO][5073] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Sep 9 00:40:39.522770 env[1216]: 2025-09-09 00:40:39.490 [INFO][5073] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" iface="eth0" netns="" Sep 9 00:40:39.522770 env[1216]: 2025-09-09 00:40:39.490 [INFO][5073] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Sep 9 00:40:39.522770 env[1216]: 2025-09-09 00:40:39.490 [INFO][5073] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Sep 9 00:40:39.522770 env[1216]: 2025-09-09 00:40:39.509 [INFO][5081] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" HandleID="k8s-pod-network.70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Workload="localhost-k8s-csi--node--driver--bbwbd-eth0" Sep 9 00:40:39.522770 env[1216]: 2025-09-09 00:40:39.509 [INFO][5081] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:39.522770 env[1216]: 2025-09-09 00:40:39.509 [INFO][5081] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:39.522770 env[1216]: 2025-09-09 00:40:39.518 [WARNING][5081] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" HandleID="k8s-pod-network.70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Workload="localhost-k8s-csi--node--driver--bbwbd-eth0" Sep 9 00:40:39.522770 env[1216]: 2025-09-09 00:40:39.518 [INFO][5081] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" HandleID="k8s-pod-network.70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Workload="localhost-k8s-csi--node--driver--bbwbd-eth0" Sep 9 00:40:39.522770 env[1216]: 2025-09-09 00:40:39.519 [INFO][5081] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:39.522770 env[1216]: 2025-09-09 00:40:39.521 [INFO][5073] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Sep 9 00:40:39.523405 env[1216]: time="2025-09-09T00:40:39.522797940Z" level=info msg="TearDown network for sandbox \"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\" successfully" Sep 9 00:40:39.523405 env[1216]: time="2025-09-09T00:40:39.522826140Z" level=info msg="StopPodSandbox for \"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\" returns successfully" Sep 9 00:40:39.523739 env[1216]: time="2025-09-09T00:40:39.523716438Z" level=info msg="RemovePodSandbox for \"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\"" Sep 9 00:40:39.523857 env[1216]: time="2025-09-09T00:40:39.523819000Z" level=info msg="Forcibly stopping sandbox \"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\"" Sep 9 00:40:39.588773 env[1216]: 2025-09-09 00:40:39.558 [WARNING][5098] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--bbwbd-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"98779d2b-0a70-471f-9d22-2046c220906c", ResourceVersion:"1142", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ff8a48fa2706017ccb4d70dfbdd31d82855a362494758e10b7b1a9f1f915b2f1", Pod:"csi-node-driver-bbwbd", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali641633e9ad4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:39.588773 env[1216]: 2025-09-09 00:40:39.559 [INFO][5098] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Sep 9 00:40:39.588773 env[1216]: 2025-09-09 00:40:39.559 [INFO][5098] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" iface="eth0" netns="" Sep 9 00:40:39.588773 env[1216]: 2025-09-09 00:40:39.559 [INFO][5098] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Sep 9 00:40:39.588773 env[1216]: 2025-09-09 00:40:39.559 [INFO][5098] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Sep 9 00:40:39.588773 env[1216]: 2025-09-09 00:40:39.576 [INFO][5108] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" HandleID="k8s-pod-network.70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Workload="localhost-k8s-csi--node--driver--bbwbd-eth0" Sep 9 00:40:39.588773 env[1216]: 2025-09-09 00:40:39.576 [INFO][5108] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:39.588773 env[1216]: 2025-09-09 00:40:39.576 [INFO][5108] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:39.588773 env[1216]: 2025-09-09 00:40:39.584 [WARNING][5108] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" HandleID="k8s-pod-network.70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Workload="localhost-k8s-csi--node--driver--bbwbd-eth0" Sep 9 00:40:39.588773 env[1216]: 2025-09-09 00:40:39.584 [INFO][5108] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" HandleID="k8s-pod-network.70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Workload="localhost-k8s-csi--node--driver--bbwbd-eth0" Sep 9 00:40:39.588773 env[1216]: 2025-09-09 00:40:39.585 [INFO][5108] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:39.588773 env[1216]: 2025-09-09 00:40:39.587 [INFO][5098] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047" Sep 9 00:40:39.589360 env[1216]: time="2025-09-09T00:40:39.589325338Z" level=info msg="TearDown network for sandbox \"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\" successfully" Sep 9 00:40:39.592562 env[1216]: time="2025-09-09T00:40:39.592533320Z" level=info msg="RemovePodSandbox \"70e0d0e6177a6e3940279d1f27d1967d8b90a16da0ba67c4fb34ab0c39657047\" returns successfully" Sep 9 00:40:39.593104 env[1216]: time="2025-09-09T00:40:39.593076810Z" level=info msg="StopPodSandbox for \"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\"" Sep 9 00:40:39.655847 env[1216]: 2025-09-09 00:40:39.624 [WARNING][5126] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--54d579b49d--cnb7f-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"e08827d1-22aa-43c6-828d-2487b6eede6f", ResourceVersion:"1011", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c", Pod:"goldmane-54d579b49d-cnb7f", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"califa9dfee1dc2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:39.655847 env[1216]: 2025-09-09 00:40:39.624 [INFO][5126] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Sep 9 00:40:39.655847 env[1216]: 2025-09-09 00:40:39.624 [INFO][5126] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" iface="eth0" netns="" Sep 9 00:40:39.655847 env[1216]: 2025-09-09 00:40:39.624 [INFO][5126] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Sep 9 00:40:39.655847 env[1216]: 2025-09-09 00:40:39.624 [INFO][5126] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Sep 9 00:40:39.655847 env[1216]: 2025-09-09 00:40:39.641 [INFO][5135] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" HandleID="k8s-pod-network.860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Workload="localhost-k8s-goldmane--54d579b49d--cnb7f-eth0" Sep 9 00:40:39.655847 env[1216]: 2025-09-09 00:40:39.641 [INFO][5135] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:39.655847 env[1216]: 2025-09-09 00:40:39.641 [INFO][5135] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:39.655847 env[1216]: 2025-09-09 00:40:39.650 [WARNING][5135] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" HandleID="k8s-pod-network.860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Workload="localhost-k8s-goldmane--54d579b49d--cnb7f-eth0" Sep 9 00:40:39.655847 env[1216]: 2025-09-09 00:40:39.650 [INFO][5135] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" HandleID="k8s-pod-network.860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Workload="localhost-k8s-goldmane--54d579b49d--cnb7f-eth0" Sep 9 00:40:39.655847 env[1216]: 2025-09-09 00:40:39.652 [INFO][5135] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:39.655847 env[1216]: 2025-09-09 00:40:39.654 [INFO][5126] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Sep 9 00:40:39.656353 env[1216]: time="2025-09-09T00:40:39.655879297Z" level=info msg="TearDown network for sandbox \"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\" successfully" Sep 9 00:40:39.656353 env[1216]: time="2025-09-09T00:40:39.655909537Z" level=info msg="StopPodSandbox for \"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\" returns successfully" Sep 9 00:40:39.656892 env[1216]: time="2025-09-09T00:40:39.656863796Z" level=info msg="RemovePodSandbox for \"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\"" Sep 9 00:40:39.656981 env[1216]: time="2025-09-09T00:40:39.656901956Z" level=info msg="Forcibly stopping sandbox \"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\"" Sep 9 00:40:39.721955 env[1216]: 2025-09-09 00:40:39.689 [WARNING][5153] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--54d579b49d--cnb7f-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"e08827d1-22aa-43c6-828d-2487b6eede6f", ResourceVersion:"1011", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dd07126ac192b79372bc47436ead8098d028cfbe9c1f54f6077bd4720c71081c", Pod:"goldmane-54d579b49d-cnb7f", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"califa9dfee1dc2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:39.721955 env[1216]: 2025-09-09 00:40:39.689 [INFO][5153] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Sep 9 00:40:39.721955 env[1216]: 2025-09-09 00:40:39.689 [INFO][5153] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" iface="eth0" netns="" Sep 9 00:40:39.721955 env[1216]: 2025-09-09 00:40:39.689 [INFO][5153] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Sep 9 00:40:39.721955 env[1216]: 2025-09-09 00:40:39.689 [INFO][5153] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Sep 9 00:40:39.721955 env[1216]: 2025-09-09 00:40:39.707 [INFO][5163] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" HandleID="k8s-pod-network.860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Workload="localhost-k8s-goldmane--54d579b49d--cnb7f-eth0" Sep 9 00:40:39.721955 env[1216]: 2025-09-09 00:40:39.707 [INFO][5163] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:39.721955 env[1216]: 2025-09-09 00:40:39.707 [INFO][5163] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:39.721955 env[1216]: 2025-09-09 00:40:39.716 [WARNING][5163] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" HandleID="k8s-pod-network.860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Workload="localhost-k8s-goldmane--54d579b49d--cnb7f-eth0" Sep 9 00:40:39.721955 env[1216]: 2025-09-09 00:40:39.716 [INFO][5163] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" HandleID="k8s-pod-network.860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Workload="localhost-k8s-goldmane--54d579b49d--cnb7f-eth0" Sep 9 00:40:39.721955 env[1216]: 2025-09-09 00:40:39.717 [INFO][5163] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:39.721955 env[1216]: 2025-09-09 00:40:39.718 [INFO][5153] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300" Sep 9 00:40:39.722597 env[1216]: time="2025-09-09T00:40:39.722559298Z" level=info msg="TearDown network for sandbox \"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\" successfully" Sep 9 00:40:39.729028 env[1216]: time="2025-09-09T00:40:39.728982421Z" level=info msg="RemovePodSandbox \"860f187f405d0b44a8a411999eb0fc94786484a7f33c903043bf915c8dcab300\" returns successfully" Sep 9 00:40:39.729688 env[1216]: time="2025-09-09T00:40:39.729661434Z" level=info msg="StopPodSandbox for \"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\"" Sep 9 00:40:39.793328 env[1216]: 2025-09-09 00:40:39.763 [WARNING][5181] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" WorkloadEndpoint="localhost-k8s-whisker--bc4dfcc87--pskdq-eth0" Sep 9 00:40:39.793328 env[1216]: 2025-09-09 00:40:39.763 [INFO][5181] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Sep 9 00:40:39.793328 env[1216]: 2025-09-09 00:40:39.763 [INFO][5181] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" iface="eth0" netns="" Sep 9 00:40:39.793328 env[1216]: 2025-09-09 00:40:39.763 [INFO][5181] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Sep 9 00:40:39.793328 env[1216]: 2025-09-09 00:40:39.763 [INFO][5181] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Sep 9 00:40:39.793328 env[1216]: 2025-09-09 00:40:39.780 [INFO][5190] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" HandleID="k8s-pod-network.d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Workload="localhost-k8s-whisker--bc4dfcc87--pskdq-eth0" Sep 9 00:40:39.793328 env[1216]: 2025-09-09 00:40:39.780 [INFO][5190] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:39.793328 env[1216]: 2025-09-09 00:40:39.780 [INFO][5190] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:39.793328 env[1216]: 2025-09-09 00:40:39.788 [WARNING][5190] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" HandleID="k8s-pod-network.d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Workload="localhost-k8s-whisker--bc4dfcc87--pskdq-eth0" Sep 9 00:40:39.793328 env[1216]: 2025-09-09 00:40:39.788 [INFO][5190] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" HandleID="k8s-pod-network.d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Workload="localhost-k8s-whisker--bc4dfcc87--pskdq-eth0" Sep 9 00:40:39.793328 env[1216]: 2025-09-09 00:40:39.789 [INFO][5190] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:39.793328 env[1216]: 2025-09-09 00:40:39.791 [INFO][5181] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Sep 9 00:40:39.793709 env[1216]: time="2025-09-09T00:40:39.793361138Z" level=info msg="TearDown network for sandbox \"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\" successfully" Sep 9 00:40:39.793709 env[1216]: time="2025-09-09T00:40:39.793393579Z" level=info msg="StopPodSandbox for \"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\" returns successfully" Sep 9 00:40:39.793841 env[1216]: time="2025-09-09T00:40:39.793811187Z" level=info msg="RemovePodSandbox for \"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\"" Sep 9 00:40:39.793881 env[1216]: time="2025-09-09T00:40:39.793850548Z" level=info msg="Forcibly stopping sandbox \"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\"" Sep 9 00:40:39.855350 env[1216]: 2025-09-09 00:40:39.824 [WARNING][5209] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" WorkloadEndpoint="localhost-k8s-whisker--bc4dfcc87--pskdq-eth0" Sep 9 00:40:39.855350 env[1216]: 2025-09-09 00:40:39.824 [INFO][5209] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Sep 9 00:40:39.855350 env[1216]: 2025-09-09 00:40:39.824 [INFO][5209] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" iface="eth0" netns="" Sep 9 00:40:39.855350 env[1216]: 2025-09-09 00:40:39.824 [INFO][5209] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Sep 9 00:40:39.855350 env[1216]: 2025-09-09 00:40:39.824 [INFO][5209] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Sep 9 00:40:39.855350 env[1216]: 2025-09-09 00:40:39.842 [INFO][5217] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" HandleID="k8s-pod-network.d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Workload="localhost-k8s-whisker--bc4dfcc87--pskdq-eth0" Sep 9 00:40:39.855350 env[1216]: 2025-09-09 00:40:39.842 [INFO][5217] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:39.855350 env[1216]: 2025-09-09 00:40:39.842 [INFO][5217] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:39.855350 env[1216]: 2025-09-09 00:40:39.850 [WARNING][5217] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" HandleID="k8s-pod-network.d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Workload="localhost-k8s-whisker--bc4dfcc87--pskdq-eth0" Sep 9 00:40:39.855350 env[1216]: 2025-09-09 00:40:39.850 [INFO][5217] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" HandleID="k8s-pod-network.d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Workload="localhost-k8s-whisker--bc4dfcc87--pskdq-eth0" Sep 9 00:40:39.855350 env[1216]: 2025-09-09 00:40:39.852 [INFO][5217] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:39.855350 env[1216]: 2025-09-09 00:40:39.853 [INFO][5209] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6" Sep 9 00:40:39.855837 env[1216]: time="2025-09-09T00:40:39.855788257Z" level=info msg="TearDown network for sandbox \"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\" successfully" Sep 9 00:40:39.858858 env[1216]: time="2025-09-09T00:40:39.858822876Z" level=info msg="RemovePodSandbox \"d4ac560447048605c60ff116206198ce388a2922301db659ba3b4f1f6ec8f2c6\" returns successfully" Sep 9 00:40:39.859563 env[1216]: time="2025-09-09T00:40:39.859510409Z" level=info msg="StopPodSandbox for \"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\"" Sep 9 00:40:39.925505 env[1216]: 2025-09-09 00:40:39.891 [WARNING][5234] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0", GenerateName:"calico-kube-controllers-76895984bd-", Namespace:"calico-system", SelfLink:"", UID:"c9c81cb9-9f4a-498f-9525-bd0bbd688f7c", ResourceVersion:"1171", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 40, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"76895984bd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637", Pod:"calico-kube-controllers-76895984bd-km4sd", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9f2abc1214d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:39.925505 env[1216]: 2025-09-09 00:40:39.891 [INFO][5234] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Sep 9 00:40:39.925505 env[1216]: 2025-09-09 00:40:39.891 [INFO][5234] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" iface="eth0" netns="" Sep 9 00:40:39.925505 env[1216]: 2025-09-09 00:40:39.891 [INFO][5234] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Sep 9 00:40:39.925505 env[1216]: 2025-09-09 00:40:39.891 [INFO][5234] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Sep 9 00:40:39.925505 env[1216]: 2025-09-09 00:40:39.909 [INFO][5243] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" HandleID="k8s-pod-network.300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Workload="localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0" Sep 9 00:40:39.925505 env[1216]: 2025-09-09 00:40:39.909 [INFO][5243] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:39.925505 env[1216]: 2025-09-09 00:40:39.910 [INFO][5243] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:39.925505 env[1216]: 2025-09-09 00:40:39.920 [WARNING][5243] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" HandleID="k8s-pod-network.300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Workload="localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0" Sep 9 00:40:39.925505 env[1216]: 2025-09-09 00:40:39.920 [INFO][5243] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" HandleID="k8s-pod-network.300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Workload="localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0" Sep 9 00:40:39.925505 env[1216]: 2025-09-09 00:40:39.921 [INFO][5243] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:39.925505 env[1216]: 2025-09-09 00:40:39.923 [INFO][5234] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Sep 9 00:40:39.925958 env[1216]: time="2025-09-09T00:40:39.925533397Z" level=info msg="TearDown network for sandbox \"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\" successfully" Sep 9 00:40:39.925958 env[1216]: time="2025-09-09T00:40:39.925574518Z" level=info msg="StopPodSandbox for \"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\" returns successfully" Sep 9 00:40:39.926009 env[1216]: time="2025-09-09T00:40:39.925981686Z" level=info msg="RemovePodSandbox for \"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\"" Sep 9 00:40:39.926070 env[1216]: time="2025-09-09T00:40:39.926031807Z" level=info msg="Forcibly stopping sandbox \"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\"" Sep 9 00:40:39.994939 env[1216]: 2025-09-09 00:40:39.959 [WARNING][5261] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0", GenerateName:"calico-kube-controllers-76895984bd-", Namespace:"calico-system", SelfLink:"", UID:"c9c81cb9-9f4a-498f-9525-bd0bbd688f7c", ResourceVersion:"1171", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 40, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"76895984bd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"08e419e73917e9bd4f53cba0a7b5a09a12cbe30a6983ca8349c3ad40096dd637", Pod:"calico-kube-controllers-76895984bd-km4sd", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9f2abc1214d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:39.994939 env[1216]: 2025-09-09 00:40:39.960 [INFO][5261] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Sep 9 00:40:39.994939 env[1216]: 2025-09-09 00:40:39.960 [INFO][5261] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" iface="eth0" netns="" Sep 9 00:40:39.994939 env[1216]: 2025-09-09 00:40:39.960 [INFO][5261] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Sep 9 00:40:39.994939 env[1216]: 2025-09-09 00:40:39.960 [INFO][5261] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Sep 9 00:40:39.994939 env[1216]: 2025-09-09 00:40:39.981 [INFO][5270] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" HandleID="k8s-pod-network.300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Workload="localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0" Sep 9 00:40:39.994939 env[1216]: 2025-09-09 00:40:39.981 [INFO][5270] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:39.994939 env[1216]: 2025-09-09 00:40:39.981 [INFO][5270] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:39.994939 env[1216]: 2025-09-09 00:40:39.989 [WARNING][5270] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" HandleID="k8s-pod-network.300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Workload="localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0" Sep 9 00:40:39.994939 env[1216]: 2025-09-09 00:40:39.989 [INFO][5270] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" HandleID="k8s-pod-network.300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Workload="localhost-k8s-calico--kube--controllers--76895984bd--km4sd-eth0" Sep 9 00:40:39.994939 env[1216]: 2025-09-09 00:40:39.991 [INFO][5270] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:39.994939 env[1216]: 2025-09-09 00:40:39.993 [INFO][5261] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba" Sep 9 00:40:39.995526 env[1216]: time="2025-09-09T00:40:39.995484941Z" level=info msg="TearDown network for sandbox \"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\" successfully" Sep 9 00:40:40.002336 env[1216]: time="2025-09-09T00:40:40.002269351Z" level=info msg="RemovePodSandbox \"300f9d1afce08c0a328e73e86bcb053d1a76ad2d17e8166a6b45ffe61cea17ba\" returns successfully" Sep 9 00:40:40.002848 env[1216]: time="2025-09-09T00:40:40.002815842Z" level=info msg="StopPodSandbox for \"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\"" Sep 9 00:40:40.069822 env[1216]: 2025-09-09 00:40:40.036 [WARNING][5288] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"40967913-0d9d-4904-ba55-627e610389c1", ResourceVersion:"1091", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22", Pod:"coredns-668d6bf9bc-2fhpp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif772c12523c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:40.069822 env[1216]: 2025-09-09 00:40:40.037 [INFO][5288] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Sep 9 00:40:40.069822 env[1216]: 2025-09-09 00:40:40.037 [INFO][5288] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" iface="eth0" netns="" Sep 9 00:40:40.069822 env[1216]: 2025-09-09 00:40:40.037 [INFO][5288] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Sep 9 00:40:40.069822 env[1216]: 2025-09-09 00:40:40.037 [INFO][5288] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Sep 9 00:40:40.069822 env[1216]: 2025-09-09 00:40:40.055 [INFO][5297] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" HandleID="k8s-pod-network.fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Workload="localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0" Sep 9 00:40:40.069822 env[1216]: 2025-09-09 00:40:40.055 [INFO][5297] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:40.069822 env[1216]: 2025-09-09 00:40:40.055 [INFO][5297] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:40.069822 env[1216]: 2025-09-09 00:40:40.064 [WARNING][5297] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" HandleID="k8s-pod-network.fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Workload="localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0" Sep 9 00:40:40.069822 env[1216]: 2025-09-09 00:40:40.064 [INFO][5297] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" HandleID="k8s-pod-network.fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Workload="localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0" Sep 9 00:40:40.069822 env[1216]: 2025-09-09 00:40:40.066 [INFO][5297] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:40.069822 env[1216]: 2025-09-09 00:40:40.068 [INFO][5288] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Sep 9 00:40:40.070306 env[1216]: time="2025-09-09T00:40:40.069857156Z" level=info msg="TearDown network for sandbox \"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\" successfully" Sep 9 00:40:40.070306 env[1216]: time="2025-09-09T00:40:40.069892477Z" level=info msg="StopPodSandbox for \"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\" returns successfully" Sep 9 00:40:40.070556 env[1216]: time="2025-09-09T00:40:40.070521649Z" level=info msg="RemovePodSandbox for \"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\"" Sep 9 00:40:40.070673 env[1216]: time="2025-09-09T00:40:40.070636371Z" level=info msg="Forcibly stopping sandbox \"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\"" Sep 9 00:40:40.138871 env[1216]: 2025-09-09 00:40:40.106 [WARNING][5315] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"40967913-0d9d-4904-ba55-627e610389c1", ResourceVersion:"1091", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"be229f2bc3be6fcbba6535e72617219048103a0c3885a5d84fc614cf35771d22", Pod:"coredns-668d6bf9bc-2fhpp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif772c12523c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:40.138871 env[1216]: 2025-09-09 00:40:40.106 [INFO][5315] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Sep 9 00:40:40.138871 env[1216]: 2025-09-09 00:40:40.106 [INFO][5315] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" iface="eth0" netns="" Sep 9 00:40:40.138871 env[1216]: 2025-09-09 00:40:40.106 [INFO][5315] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Sep 9 00:40:40.138871 env[1216]: 2025-09-09 00:40:40.106 [INFO][5315] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Sep 9 00:40:40.138871 env[1216]: 2025-09-09 00:40:40.125 [INFO][5324] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" HandleID="k8s-pod-network.fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Workload="localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0" Sep 9 00:40:40.138871 env[1216]: 2025-09-09 00:40:40.125 [INFO][5324] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:40.138871 env[1216]: 2025-09-09 00:40:40.125 [INFO][5324] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:40.138871 env[1216]: 2025-09-09 00:40:40.133 [WARNING][5324] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" HandleID="k8s-pod-network.fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Workload="localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0" Sep 9 00:40:40.138871 env[1216]: 2025-09-09 00:40:40.133 [INFO][5324] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" HandleID="k8s-pod-network.fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Workload="localhost-k8s-coredns--668d6bf9bc--2fhpp-eth0" Sep 9 00:40:40.138871 env[1216]: 2025-09-09 00:40:40.135 [INFO][5324] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:40.138871 env[1216]: 2025-09-09 00:40:40.137 [INFO][5315] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a" Sep 9 00:40:40.139351 env[1216]: time="2025-09-09T00:40:40.138911349Z" level=info msg="TearDown network for sandbox \"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\" successfully" Sep 9 00:40:40.142144 env[1216]: time="2025-09-09T00:40:40.142101890Z" level=info msg="RemovePodSandbox \"fa139ff676333ec43f5826b0aa91362031ca10a9a018d965fd66b4a8f2a4ee5a\" returns successfully" Sep 9 00:40:40.142625 env[1216]: time="2025-09-09T00:40:40.142595699Z" level=info msg="StopPodSandbox for \"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\"" Sep 9 00:40:40.208560 env[1216]: 2025-09-09 00:40:40.178 [WARNING][5341] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6096770d-69d8-4927-a6b8-24f7381dda60", ResourceVersion:"1108", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4", Pod:"coredns-668d6bf9bc-nq8sq", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali9bd20994330", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:40.208560 env[1216]: 2025-09-09 00:40:40.178 [INFO][5341] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Sep 9 00:40:40.208560 env[1216]: 2025-09-09 00:40:40.178 [INFO][5341] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" iface="eth0" netns="" Sep 9 00:40:40.208560 env[1216]: 2025-09-09 00:40:40.178 [INFO][5341] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Sep 9 00:40:40.208560 env[1216]: 2025-09-09 00:40:40.178 [INFO][5341] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Sep 9 00:40:40.208560 env[1216]: 2025-09-09 00:40:40.195 [INFO][5349] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" HandleID="k8s-pod-network.b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Workload="localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0" Sep 9 00:40:40.208560 env[1216]: 2025-09-09 00:40:40.195 [INFO][5349] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:40.208560 env[1216]: 2025-09-09 00:40:40.195 [INFO][5349] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:40.208560 env[1216]: 2025-09-09 00:40:40.204 [WARNING][5349] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" HandleID="k8s-pod-network.b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Workload="localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0" Sep 9 00:40:40.208560 env[1216]: 2025-09-09 00:40:40.204 [INFO][5349] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" HandleID="k8s-pod-network.b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Workload="localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0" Sep 9 00:40:40.208560 env[1216]: 2025-09-09 00:40:40.205 [INFO][5349] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:40.208560 env[1216]: 2025-09-09 00:40:40.207 [INFO][5341] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Sep 9 00:40:40.209367 env[1216]: time="2025-09-09T00:40:40.209324968Z" level=info msg="TearDown network for sandbox \"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\" successfully" Sep 9 00:40:40.209467 env[1216]: time="2025-09-09T00:40:40.209451330Z" level=info msg="StopPodSandbox for \"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\" returns successfully" Sep 9 00:40:40.209997 env[1216]: time="2025-09-09T00:40:40.209970260Z" level=info msg="RemovePodSandbox for \"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\"" Sep 9 00:40:40.210065 env[1216]: time="2025-09-09T00:40:40.210009181Z" level=info msg="Forcibly stopping sandbox \"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\"" Sep 9 00:40:40.279474 env[1216]: 2025-09-09 00:40:40.244 [WARNING][5367] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6096770d-69d8-4927-a6b8-24f7381dda60", ResourceVersion:"1108", Generation:0, CreationTimestamp:time.Date(2025, time.September, 9, 0, 39, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7261e2182d32c383c44b4b3d416a6b54425f59d1651fecca129ef8cd2d6335b4", Pod:"coredns-668d6bf9bc-nq8sq", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali9bd20994330", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 9 00:40:40.279474 env[1216]: 2025-09-09 00:40:40.244 [INFO][5367] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Sep 9 00:40:40.279474 env[1216]: 2025-09-09 00:40:40.245 [INFO][5367] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" iface="eth0" netns="" Sep 9 00:40:40.279474 env[1216]: 2025-09-09 00:40:40.245 [INFO][5367] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Sep 9 00:40:40.279474 env[1216]: 2025-09-09 00:40:40.245 [INFO][5367] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Sep 9 00:40:40.279474 env[1216]: 2025-09-09 00:40:40.265 [INFO][5375] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" HandleID="k8s-pod-network.b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Workload="localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0" Sep 9 00:40:40.279474 env[1216]: 2025-09-09 00:40:40.265 [INFO][5375] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 9 00:40:40.279474 env[1216]: 2025-09-09 00:40:40.265 [INFO][5375] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 9 00:40:40.279474 env[1216]: 2025-09-09 00:40:40.274 [WARNING][5375] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" HandleID="k8s-pod-network.b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Workload="localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0" Sep 9 00:40:40.279474 env[1216]: 2025-09-09 00:40:40.274 [INFO][5375] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" HandleID="k8s-pod-network.b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Workload="localhost-k8s-coredns--668d6bf9bc--nq8sq-eth0" Sep 9 00:40:40.279474 env[1216]: 2025-09-09 00:40:40.275 [INFO][5375] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 9 00:40:40.279474 env[1216]: 2025-09-09 00:40:40.277 [INFO][5367] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6" Sep 9 00:40:40.279474 env[1216]: time="2025-09-09T00:40:40.279436581Z" level=info msg="TearDown network for sandbox \"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\" successfully" Sep 9 00:40:40.283593 env[1216]: time="2025-09-09T00:40:40.283556459Z" level=info msg="RemovePodSandbox \"b2bb219655d470260d9f3b29f8a8826b14fd54307b5557464c34c41a655c47a6\" returns successfully" Sep 9 00:40:40.400000 audit[1805]: AVC avc: denied { watch } for pid=1805 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:40:40.400000 audit[1805]: AVC avc: denied { watch } for pid=1805 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:40:40.400000 audit[1805]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40031fa2c0 a2=fc6 a3=0 items=0 ppid=1669 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 key=(null) Sep 9 00:40:40.400000 audit[1805]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001fea440 a2=fc6 a3=0 items=0 ppid=1669 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 key=(null) Sep 9 00:40:40.400000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 9 00:40:40.400000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 9 00:40:40.400000 audit[1805]: AVC avc: denied { watch } for pid=1805 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:40:40.400000 audit[1805]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001fea480 a2=fc6 a3=0 items=0 ppid=1669 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 key=(null) Sep 9 00:40:40.400000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 9 00:40:40.400000 audit[1805]: AVC avc: denied { watch } for pid=1805 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 9 00:40:40.400000 audit[1805]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40031fa2e0 a2=fc6 a3=0 items=0 ppid=1669 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c25,c531 key=(null) Sep 9 00:40:40.400000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 9 00:40:43.511943 kubelet[1947]: I0909 00:40:43.510605 1947 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 9 00:40:43.558000 audit[5387]: NETFILTER_CFG table=filter:126 family=2 entries=11 op=nft_register_rule pid=5387 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:43.558000 audit[5387]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffc4067c10 a2=0 a3=1 items=0 ppid=2059 pid=5387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:43.558000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:43.577000 audit[5387]: NETFILTER_CFG table=nat:127 family=2 entries=29 op=nft_register_chain pid=5387 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:43.577000 audit[5387]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffc4067c10 a2=0 a3=1 items=0 ppid=2059 pid=5387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:43.577000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:43.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.102:22-10.0.0.1:57348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:43.816298 systemd[1]: Started sshd@13-10.0.0.102:22-10.0.0.1:57348.service. Sep 9 00:40:43.817243 kernel: kauditd_printk_skb: 19 callbacks suppressed Sep 9 00:40:43.817300 kernel: audit: type=1130 audit(1757378443.815:1515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.102:22-10.0.0.1:57348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:43.857000 audit[5389]: USER_ACCT pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:43.859110 sshd[5389]: Accepted publickey for core from 10.0.0.1 port 57348 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:40:43.860738 sshd[5389]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:40:43.859000 audit[5389]: CRED_ACQ pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:43.863941 kernel: audit: type=1101 audit(1757378443.857:1516): pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:43.864002 kernel: audit: type=1103 audit(1757378443.859:1517): pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:43.864036 kernel: audit: type=1006 audit(1757378443.859:1518): pid=5389 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Sep 9 00:40:43.864242 systemd-logind[1205]: New session 14 of user core. Sep 9 00:40:43.865692 kernel: audit: type=1300 audit(1757378443.859:1518): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6e742b0 a2=3 a3=1 items=0 ppid=1 pid=5389 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:43.859000 audit[5389]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6e742b0 a2=3 a3=1 items=0 ppid=1 pid=5389 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:43.865312 systemd[1]: Started session-14.scope. Sep 9 00:40:43.859000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 9 00:40:43.868677 kernel: audit: type=1327 audit(1757378443.859:1518): proctitle=737368643A20636F7265205B707269765D Sep 9 00:40:43.868000 audit[5389]: USER_START pid=5389 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:43.869000 audit[5391]: CRED_ACQ pid=5391 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:43.874362 kernel: audit: type=1105 audit(1757378443.868:1519): pid=5389 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:43.874423 kernel: audit: type=1103 audit(1757378443.869:1520): pid=5391 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:44.090159 sshd[5389]: pam_unix(sshd:session): session closed for user core Sep 9 00:40:44.090000 audit[5389]: USER_END pid=5389 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:44.092975 systemd[1]: sshd@13-10.0.0.102:22-10.0.0.1:57348.service: Deactivated successfully. Sep 9 00:40:44.093721 systemd[1]: session-14.scope: Deactivated successfully. Sep 9 00:40:44.090000 audit[5389]: CRED_DISP pid=5389 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:44.094545 systemd-logind[1205]: Session 14 logged out. Waiting for processes to exit. Sep 9 00:40:44.095272 systemd-logind[1205]: Removed session 14. Sep 9 00:40:44.096940 kernel: audit: type=1106 audit(1757378444.090:1521): pid=5389 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:44.097018 kernel: audit: type=1104 audit(1757378444.090:1522): pid=5389 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:44.092000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.102:22-10.0.0.1:57348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:49.095241 systemd[1]: Started sshd@14-10.0.0.102:22-10.0.0.1:57350.service. Sep 9 00:40:49.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.102:22-10.0.0.1:57350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:49.099510 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 9 00:40:49.099660 kernel: audit: type=1130 audit(1757378449.094:1524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.102:22-10.0.0.1:57350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:49.137000 audit[5426]: USER_ACCT pid=5426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:49.138552 sshd[5426]: Accepted publickey for core from 10.0.0.1 port 57350 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:40:49.139700 sshd[5426]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:40:49.138000 audit[5426]: CRED_ACQ pid=5426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:49.144092 kernel: audit: type=1101 audit(1757378449.137:1525): pid=5426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:49.144161 kernel: audit: type=1103 audit(1757378449.138:1526): pid=5426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:49.144194 kernel: audit: type=1006 audit(1757378449.138:1527): pid=5426 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Sep 9 00:40:49.142901 systemd-logind[1205]: New session 15 of user core. Sep 9 00:40:49.143775 systemd[1]: Started session-15.scope. Sep 9 00:40:49.145134 kernel: audit: type=1300 audit(1757378449.138:1527): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd81e730 a2=3 a3=1 items=0 ppid=1 pid=5426 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:49.138000 audit[5426]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd81e730 a2=3 a3=1 items=0 ppid=1 pid=5426 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:49.138000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 9 00:40:49.149001 kernel: audit: type=1327 audit(1757378449.138:1527): proctitle=737368643A20636F7265205B707269765D Sep 9 00:40:49.146000 audit[5426]: USER_START pid=5426 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:49.152292 kernel: audit: type=1105 audit(1757378449.146:1528): pid=5426 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:49.152393 kernel: audit: type=1103 audit(1757378449.147:1529): pid=5428 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:49.147000 audit[5428]: CRED_ACQ pid=5428 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:49.302233 sshd[5426]: pam_unix(sshd:session): session closed for user core Sep 9 00:40:49.302000 audit[5426]: USER_END pid=5426 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:49.305477 systemd[1]: sshd@14-10.0.0.102:22-10.0.0.1:57350.service: Deactivated successfully. Sep 9 00:40:49.306123 systemd[1]: session-15.scope: Deactivated successfully. Sep 9 00:40:49.306677 systemd-logind[1205]: Session 15 logged out. Waiting for processes to exit. Sep 9 00:40:49.302000 audit[5426]: CRED_DISP pid=5426 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:49.307909 systemd[1]: Started sshd@15-10.0.0.102:22-10.0.0.1:57362.service. Sep 9 00:40:49.308639 systemd-logind[1205]: Removed session 15. Sep 9 00:40:49.309118 kernel: audit: type=1106 audit(1757378449.302:1530): pid=5426 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:49.309187 kernel: audit: type=1104 audit(1757378449.302:1531): pid=5426 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:49.304000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.102:22-10.0.0.1:57350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:49.307000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.102:22-10.0.0.1:57362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:49.345000 audit[5440]: USER_ACCT pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:49.347668 sshd[5440]: Accepted publickey for core from 10.0.0.1 port 57362 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:40:49.346000 audit[5440]: CRED_ACQ pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:49.347000 audit[5440]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6069a80 a2=3 a3=1 items=0 ppid=1 pid=5440 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:49.347000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 9 00:40:49.348267 sshd[5440]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:40:49.351842 systemd-logind[1205]: New session 16 of user core. Sep 9 00:40:49.352691 systemd[1]: Started session-16.scope. Sep 9 00:40:49.355000 audit[5440]: USER_START pid=5440 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:49.356000 audit[5442]: CRED_ACQ pid=5442 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:49.590971 sshd[5440]: pam_unix(sshd:session): session closed for user core Sep 9 00:40:49.591000 audit[5440]: USER_END pid=5440 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:49.591000 audit[5440]: CRED_DISP pid=5440 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:49.595262 systemd[1]: Started sshd@16-10.0.0.102:22-10.0.0.1:57364.service. Sep 9 00:40:49.594000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.102:22-10.0.0.1:57364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:49.595000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.102:22-10.0.0.1:57362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:49.596101 systemd[1]: sshd@15-10.0.0.102:22-10.0.0.1:57362.service: Deactivated successfully. Sep 9 00:40:49.596103 systemd-logind[1205]: Session 16 logged out. Waiting for processes to exit. Sep 9 00:40:49.596903 systemd[1]: session-16.scope: Deactivated successfully. Sep 9 00:40:49.597817 systemd-logind[1205]: Removed session 16. Sep 9 00:40:49.635000 audit[5451]: USER_ACCT pid=5451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:49.636850 sshd[5451]: Accepted publickey for core from 10.0.0.1 port 57364 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:40:49.636000 audit[5451]: CRED_ACQ pid=5451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:49.636000 audit[5451]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd46f82d0 a2=3 a3=1 items=0 ppid=1 pid=5451 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:49.636000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 9 00:40:49.638138 sshd[5451]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:40:49.641673 systemd-logind[1205]: New session 17 of user core. Sep 9 00:40:49.642882 systemd[1]: Started session-17.scope. Sep 9 00:40:49.645000 audit[5451]: USER_START pid=5451 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:49.646000 audit[5454]: CRED_ACQ pid=5454 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:50.272000 audit[5468]: NETFILTER_CFG table=filter:128 family=2 entries=22 op=nft_register_rule pid=5468 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:50.272000 audit[5468]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffd0836a00 a2=0 a3=1 items=0 ppid=2059 pid=5468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:50.272000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:50.275463 sshd[5451]: pam_unix(sshd:session): session closed for user core Sep 9 00:40:50.275000 audit[5451]: USER_END pid=5451 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:50.275000 audit[5451]: CRED_DISP pid=5451 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:50.277000 audit[5468]: NETFILTER_CFG table=nat:129 family=2 entries=24 op=nft_register_rule pid=5468 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:50.277000 audit[5468]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffd0836a00 a2=0 a3=1 items=0 ppid=2059 pid=5468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:50.277000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:50.278000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.102:22-10.0.0.1:57364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:50.279650 systemd[1]: sshd@16-10.0.0.102:22-10.0.0.1:57364.service: Deactivated successfully. Sep 9 00:40:50.280318 systemd[1]: session-17.scope: Deactivated successfully. Sep 9 00:40:50.281436 systemd-logind[1205]: Session 17 logged out. Waiting for processes to exit. Sep 9 00:40:50.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.102:22-10.0.0.1:59602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:50.282946 systemd[1]: Started sshd@17-10.0.0.102:22-10.0.0.1:59602.service. Sep 9 00:40:50.284488 systemd-logind[1205]: Removed session 17. Sep 9 00:40:50.289000 audit[5473]: NETFILTER_CFG table=filter:130 family=2 entries=34 op=nft_register_rule pid=5473 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:50.289000 audit[5473]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffd8cb17f0 a2=0 a3=1 items=0 ppid=2059 pid=5473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:50.289000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:50.297000 audit[5473]: NETFILTER_CFG table=nat:131 family=2 entries=24 op=nft_register_rule pid=5473 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:50.297000 audit[5473]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffd8cb17f0 a2=0 a3=1 items=0 ppid=2059 pid=5473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:50.297000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:50.324000 audit[5471]: USER_ACCT pid=5471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:50.325298 sshd[5471]: Accepted publickey for core from 10.0.0.1 port 59602 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:40:50.325000 audit[5471]: CRED_ACQ pid=5471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:50.325000 audit[5471]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd56f8ab0 a2=3 a3=1 items=0 ppid=1 pid=5471 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:50.325000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 9 00:40:50.326578 sshd[5471]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:40:50.331180 systemd-logind[1205]: New session 18 of user core. Sep 9 00:40:50.331249 systemd[1]: Started session-18.scope. Sep 9 00:40:50.334000 audit[5471]: USER_START pid=5471 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:50.336000 audit[5476]: CRED_ACQ pid=5476 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:50.657729 sshd[5471]: pam_unix(sshd:session): session closed for user core Sep 9 00:40:50.658000 audit[5471]: USER_END pid=5471 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:50.658000 audit[5471]: CRED_DISP pid=5471 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:50.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.102:22-10.0.0.1:59618 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:50.661824 systemd[1]: Started sshd@18-10.0.0.102:22-10.0.0.1:59618.service. Sep 9 00:40:50.662750 systemd[1]: sshd@17-10.0.0.102:22-10.0.0.1:59602.service: Deactivated successfully. Sep 9 00:40:50.662000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.102:22-10.0.0.1:59602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:50.663896 systemd[1]: session-18.scope: Deactivated successfully. Sep 9 00:40:50.665723 systemd-logind[1205]: Session 18 logged out. Waiting for processes to exit. Sep 9 00:40:50.667027 systemd-logind[1205]: Removed session 18. Sep 9 00:40:50.705000 audit[5484]: USER_ACCT pid=5484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:50.706534 sshd[5484]: Accepted publickey for core from 10.0.0.1 port 59618 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:40:50.706000 audit[5484]: CRED_ACQ pid=5484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:50.707000 audit[5484]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd25d9de0 a2=3 a3=1 items=0 ppid=1 pid=5484 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:50.707000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 9 00:40:50.709208 sshd[5484]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:40:50.715989 systemd-logind[1205]: New session 19 of user core. Sep 9 00:40:50.716688 systemd[1]: Started session-19.scope. Sep 9 00:40:50.719000 audit[5484]: USER_START pid=5484 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:50.721000 audit[5487]: CRED_ACQ pid=5487 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:50.871340 sshd[5484]: pam_unix(sshd:session): session closed for user core Sep 9 00:40:50.872000 audit[5484]: USER_END pid=5484 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:50.872000 audit[5484]: CRED_DISP pid=5484 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:50.874416 systemd[1]: sshd@18-10.0.0.102:22-10.0.0.1:59618.service: Deactivated successfully. Sep 9 00:40:50.873000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.102:22-10.0.0.1:59618 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:50.875309 systemd[1]: session-19.scope: Deactivated successfully. Sep 9 00:40:50.875845 systemd-logind[1205]: Session 19 logged out. Waiting for processes to exit. Sep 9 00:40:50.876616 systemd-logind[1205]: Removed session 19. Sep 9 00:40:53.490000 audit[5521]: NETFILTER_CFG table=filter:132 family=2 entries=33 op=nft_register_rule pid=5521 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:53.490000 audit[5521]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffdef16990 a2=0 a3=1 items=0 ppid=2059 pid=5521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:53.490000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:53.498000 audit[5521]: NETFILTER_CFG table=nat:133 family=2 entries=31 op=nft_register_chain pid=5521 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:53.498000 audit[5521]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffdef16990 a2=0 a3=1 items=0 ppid=2059 pid=5521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:53.498000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:54.178233 kubelet[1947]: E0909 00:40:54.177878 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:40:55.071000 audit[5529]: NETFILTER_CFG table=filter:134 family=2 entries=20 op=nft_register_rule pid=5529 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:55.074421 kernel: kauditd_printk_skb: 63 callbacks suppressed Sep 9 00:40:55.074482 kernel: audit: type=1325 audit(1757378455.071:1575): table=filter:134 family=2 entries=20 op=nft_register_rule pid=5529 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:55.074515 kernel: audit: type=1300 audit(1757378455.071:1575): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=fffffff43290 a2=0 a3=1 items=0 ppid=2059 pid=5529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:55.071000 audit[5529]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=fffffff43290 a2=0 a3=1 items=0 ppid=2059 pid=5529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:55.077496 kernel: audit: type=1327 audit(1757378455.071:1575): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:55.071000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:55.081000 audit[5529]: NETFILTER_CFG table=nat:135 family=2 entries=110 op=nft_register_chain pid=5529 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:55.081000 audit[5529]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=fffffff43290 a2=0 a3=1 items=0 ppid=2059 pid=5529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:55.087692 kernel: audit: type=1325 audit(1757378455.081:1576): table=nat:135 family=2 entries=110 op=nft_register_chain pid=5529 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:55.087742 kernel: audit: type=1300 audit(1757378455.081:1576): arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=fffffff43290 a2=0 a3=1 items=0 ppid=2059 pid=5529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:55.081000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:55.091948 kernel: audit: type=1327 audit(1757378455.081:1576): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:55.876353 systemd[1]: Started sshd@19-10.0.0.102:22-10.0.0.1:59622.service. Sep 9 00:40:55.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.102:22-10.0.0.1:59622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:55.879952 kernel: audit: type=1130 audit(1757378455.875:1577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.102:22-10.0.0.1:59622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:55.920000 audit[5531]: USER_ACCT pid=5531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:55.921211 sshd[5531]: Accepted publickey for core from 10.0.0.1 port 59622 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:40:55.922702 sshd[5531]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:40:55.921000 audit[5531]: CRED_ACQ pid=5531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:55.926556 kernel: audit: type=1101 audit(1757378455.920:1578): pid=5531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:55.926637 kernel: audit: type=1103 audit(1757378455.921:1579): pid=5531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:55.926662 kernel: audit: type=1006 audit(1757378455.921:1580): pid=5531 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Sep 9 00:40:55.921000 audit[5531]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf2b73a0 a2=3 a3=1 items=0 ppid=1 pid=5531 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:55.921000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 9 00:40:55.930839 systemd-logind[1205]: New session 20 of user core. Sep 9 00:40:55.931661 systemd[1]: Started session-20.scope. Sep 9 00:40:55.934000 audit[5531]: USER_START pid=5531 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:55.936000 audit[5533]: CRED_ACQ pid=5533 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:56.059296 sshd[5531]: pam_unix(sshd:session): session closed for user core Sep 9 00:40:56.059000 audit[5531]: USER_END pid=5531 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:56.059000 audit[5531]: CRED_DISP pid=5531 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:40:56.061721 systemd[1]: sshd@19-10.0.0.102:22-10.0.0.1:59622.service: Deactivated successfully. Sep 9 00:40:56.061000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.102:22-10.0.0.1:59622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:40:56.062612 systemd[1]: session-20.scope: Deactivated successfully. Sep 9 00:40:56.063137 systemd-logind[1205]: Session 20 logged out. Waiting for processes to exit. Sep 9 00:40:56.063861 systemd-logind[1205]: Removed session 20. Sep 9 00:40:57.177932 kubelet[1947]: E0909 00:40:57.177890 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:40:58.195288 kubelet[1947]: I0909 00:40:58.195189 1947 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 9 00:40:58.235000 audit[5545]: NETFILTER_CFG table=filter:136 family=2 entries=8 op=nft_register_rule pid=5545 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:58.235000 audit[5545]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd121f780 a2=0 a3=1 items=0 ppid=2059 pid=5545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:58.235000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:40:58.243000 audit[5545]: NETFILTER_CFG table=nat:137 family=2 entries=62 op=nft_register_chain pid=5545 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 9 00:40:58.243000 audit[5545]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21988 a0=3 a1=ffffd121f780 a2=0 a3=1 items=0 ppid=2059 pid=5545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:40:58.243000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 9 00:41:01.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.102:22-10.0.0.1:36164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:41:01.063776 systemd[1]: Started sshd@20-10.0.0.102:22-10.0.0.1:36164.service. Sep 9 00:41:01.067498 kernel: kauditd_printk_skb: 13 callbacks suppressed Sep 9 00:41:01.067671 kernel: audit: type=1130 audit(1757378461.063:1588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.102:22-10.0.0.1:36164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:41:01.106000 audit[5567]: USER_ACCT pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:01.107350 sshd[5567]: Accepted publickey for core from 10.0.0.1 port 36164 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:41:01.109403 sshd[5567]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:41:01.107000 audit[5567]: CRED_ACQ pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:01.113178 kernel: audit: type=1101 audit(1757378461.106:1589): pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:01.114908 kernel: audit: type=1103 audit(1757378461.107:1590): pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:01.115060 kernel: audit: type=1006 audit(1757378461.107:1591): pid=5567 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Sep 9 00:41:01.114478 systemd[1]: Started session-21.scope. Sep 9 00:41:01.107000 audit[5567]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff8485f60 a2=3 a3=1 items=0 ppid=1 pid=5567 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:41:01.115223 systemd-logind[1205]: New session 21 of user core. Sep 9 00:41:01.118448 kernel: audit: type=1300 audit(1757378461.107:1591): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff8485f60 a2=3 a3=1 items=0 ppid=1 pid=5567 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:41:01.107000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 9 00:41:01.120452 kernel: audit: type=1327 audit(1757378461.107:1591): proctitle=737368643A20636F7265205B707269765D Sep 9 00:41:01.120989 kernel: audit: type=1105 audit(1757378461.119:1592): pid=5567 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:01.119000 audit[5567]: USER_START pid=5567 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:01.121000 audit[5569]: CRED_ACQ pid=5569 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:01.127778 kernel: audit: type=1103 audit(1757378461.121:1593): pid=5569 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:01.179172 kubelet[1947]: E0909 00:41:01.178689 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 9 00:41:01.311412 sshd[5567]: pam_unix(sshd:session): session closed for user core Sep 9 00:41:01.311000 audit[5567]: USER_END pid=5567 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:01.311000 audit[5567]: CRED_DISP pid=5567 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:01.314522 systemd[1]: sshd@20-10.0.0.102:22-10.0.0.1:36164.service: Deactivated successfully. Sep 9 00:41:01.315390 systemd[1]: session-21.scope: Deactivated successfully. Sep 9 00:41:01.315734 systemd-logind[1205]: Session 21 logged out. Waiting for processes to exit. Sep 9 00:41:01.316746 systemd-logind[1205]: Removed session 21. Sep 9 00:41:01.318415 kernel: audit: type=1106 audit(1757378461.311:1594): pid=5567 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:01.318490 kernel: audit: type=1104 audit(1757378461.311:1595): pid=5567 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:01.314000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.102:22-10.0.0.1:36164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:41:06.315844 systemd[1]: Started sshd@21-10.0.0.102:22-10.0.0.1:36174.service. Sep 9 00:41:06.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.102:22-10.0.0.1:36174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:41:06.319316 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 9 00:41:06.319391 kernel: audit: type=1130 audit(1757378466.315:1597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.102:22-10.0.0.1:36174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:41:06.357000 audit[5583]: USER_ACCT pid=5583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:06.358437 sshd[5583]: Accepted publickey for core from 10.0.0.1 port 36174 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:41:06.359000 audit[5583]: CRED_ACQ pid=5583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:06.361135 sshd[5583]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:41:06.364286 kernel: audit: type=1101 audit(1757378466.357:1598): pid=5583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:06.364357 kernel: audit: type=1103 audit(1757378466.359:1599): pid=5583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:06.364377 kernel: audit: type=1006 audit(1757378466.359:1600): pid=5583 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Sep 9 00:41:06.366995 kernel: audit: type=1300 audit(1757378466.359:1600): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4ea70a0 a2=3 a3=1 items=0 ppid=1 pid=5583 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:41:06.359000 audit[5583]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4ea70a0 a2=3 a3=1 items=0 ppid=1 pid=5583 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:41:06.359000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 9 00:41:06.370906 kernel: audit: type=1327 audit(1757378466.359:1600): proctitle=737368643A20636F7265205B707269765D Sep 9 00:41:06.374961 systemd-logind[1205]: New session 22 of user core. Sep 9 00:41:06.375258 systemd[1]: Started session-22.scope. Sep 9 00:41:06.378000 audit[5583]: USER_START pid=5583 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:06.382000 audit[5585]: CRED_ACQ pid=5585 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:06.386352 kernel: audit: type=1105 audit(1757378466.378:1601): pid=5583 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:06.386438 kernel: audit: type=1103 audit(1757378466.382:1602): pid=5585 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:06.507075 sshd[5583]: pam_unix(sshd:session): session closed for user core Sep 9 00:41:06.507000 audit[5583]: USER_END pid=5583 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:06.510416 systemd[1]: sshd@21-10.0.0.102:22-10.0.0.1:36174.service: Deactivated successfully. Sep 9 00:41:06.511385 systemd[1]: session-22.scope: Deactivated successfully. Sep 9 00:41:06.507000 audit[5583]: CRED_DISP pid=5583 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:06.513583 systemd-logind[1205]: Session 22 logged out. Waiting for processes to exit. Sep 9 00:41:06.514402 systemd-logind[1205]: Removed session 22. Sep 9 00:41:06.515612 kernel: audit: type=1106 audit(1757378466.507:1603): pid=5583 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:06.515690 kernel: audit: type=1104 audit(1757378466.507:1604): pid=5583 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:06.507000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.102:22-10.0.0.1:36174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:41:10.064271 kernel: hrtimer: interrupt took 3185366 ns Sep 9 00:41:11.512426 systemd[1]: Started sshd@22-10.0.0.102:22-10.0.0.1:35306.service. Sep 9 00:41:11.511000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.102:22-10.0.0.1:35306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:41:11.513229 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 9 00:41:11.513257 kernel: audit: type=1130 audit(1757378471.511:1606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.102:22-10.0.0.1:35306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:41:11.550000 audit[5596]: USER_ACCT pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:11.551647 sshd[5596]: Accepted publickey for core from 10.0.0.1 port 35306 ssh2: RSA SHA256:SJL83fEN2Ip3G6nq+SFahxwHER39rSdiWTx9teXxMXo Sep 9 00:41:11.553075 sshd[5596]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 9 00:41:11.551000 audit[5596]: CRED_ACQ pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:11.558425 kernel: audit: type=1101 audit(1757378471.550:1607): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:11.558471 kernel: audit: type=1103 audit(1757378471.551:1608): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:11.560057 kernel: audit: type=1006 audit(1757378471.551:1609): pid=5596 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Sep 9 00:41:11.551000 audit[5596]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeac72f60 a2=3 a3=1 items=0 ppid=1 pid=5596 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:41:11.562903 kernel: audit: type=1300 audit(1757378471.551:1609): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeac72f60 a2=3 a3=1 items=0 ppid=1 pid=5596 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 9 00:41:11.551000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 9 00:41:11.563932 kernel: audit: type=1327 audit(1757378471.551:1609): proctitle=737368643A20636F7265205B707269765D Sep 9 00:41:11.565010 systemd-logind[1205]: New session 23 of user core. Sep 9 00:41:11.565861 systemd[1]: Started session-23.scope. Sep 9 00:41:11.568000 audit[5596]: USER_START pid=5596 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:11.571000 audit[5598]: CRED_ACQ pid=5598 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:11.575273 kernel: audit: type=1105 audit(1757378471.568:1610): pid=5596 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:11.575315 kernel: audit: type=1103 audit(1757378471.571:1611): pid=5598 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:11.678768 sshd[5596]: pam_unix(sshd:session): session closed for user core Sep 9 00:41:11.679000 audit[5596]: USER_END pid=5596 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:11.683471 systemd[1]: sshd@22-10.0.0.102:22-10.0.0.1:35306.service: Deactivated successfully. Sep 9 00:41:11.679000 audit[5596]: CRED_DISP pid=5596 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:11.684343 systemd[1]: session-23.scope: Deactivated successfully. Sep 9 00:41:11.686190 kernel: audit: type=1106 audit(1757378471.679:1612): pid=5596 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:11.686264 kernel: audit: type=1104 audit(1757378471.679:1613): pid=5596 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 9 00:41:11.682000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.102:22-10.0.0.1:35306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 9 00:41:11.686615 systemd-logind[1205]: Session 23 logged out. Waiting for processes to exit. Sep 9 00:41:11.687449 systemd-logind[1205]: Removed session 23.