Sep 10 00:50:41.850730 kernel: Linux version 5.15.191-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Tue Sep 9 23:10:34 -00 2025 Sep 10 00:50:41.850753 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=ebdf135b7dd8c9596dea7f2ca48bf31be0143f7cba32a9cc0282a66ca6db3272 Sep 10 00:50:41.850765 kernel: BIOS-provided physical RAM map: Sep 10 00:50:41.850773 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Sep 10 00:50:41.850780 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000007fffff] usable Sep 10 00:50:41.850787 kernel: BIOS-e820: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Sep 10 00:50:41.850797 kernel: BIOS-e820: [mem 0x0000000000808000-0x000000000080afff] usable Sep 10 00:50:41.850805 kernel: BIOS-e820: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Sep 10 00:50:41.850812 kernel: BIOS-e820: [mem 0x000000000080c000-0x000000000080ffff] usable Sep 10 00:50:41.850822 kernel: BIOS-e820: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Sep 10 00:50:41.850829 kernel: BIOS-e820: [mem 0x0000000000900000-0x000000009c8eefff] usable Sep 10 00:50:41.850837 kernel: BIOS-e820: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Sep 10 00:50:41.850845 kernel: BIOS-e820: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Sep 10 00:50:41.850852 kernel: BIOS-e820: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Sep 10 00:50:41.850862 kernel: BIOS-e820: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Sep 10 00:50:41.850872 kernel: BIOS-e820: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Sep 10 00:50:41.850880 kernel: BIOS-e820: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Sep 10 00:50:41.850888 kernel: BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Sep 10 00:50:41.850896 kernel: NX (Execute Disable) protection: active Sep 10 00:50:41.850904 kernel: e820: update [mem 0x9b475018-0x9b47ec57] usable ==> usable Sep 10 00:50:41.850913 kernel: e820: update [mem 0x9b475018-0x9b47ec57] usable ==> usable Sep 10 00:50:41.850921 kernel: e820: update [mem 0x9b438018-0x9b474e57] usable ==> usable Sep 10 00:50:41.850930 kernel: e820: update [mem 0x9b438018-0x9b474e57] usable ==> usable Sep 10 00:50:41.850938 kernel: extended physical RAM map: Sep 10 00:50:41.850946 kernel: reserve setup_data: [mem 0x0000000000000000-0x000000000009ffff] usable Sep 10 00:50:41.850957 kernel: reserve setup_data: [mem 0x0000000000100000-0x00000000007fffff] usable Sep 10 00:50:41.850965 kernel: reserve setup_data: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Sep 10 00:50:41.850973 kernel: reserve setup_data: [mem 0x0000000000808000-0x000000000080afff] usable Sep 10 00:50:41.850982 kernel: reserve setup_data: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Sep 10 00:50:41.850990 kernel: reserve setup_data: [mem 0x000000000080c000-0x000000000080ffff] usable Sep 10 00:50:41.850998 kernel: reserve setup_data: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Sep 10 00:50:41.851006 kernel: reserve setup_data: [mem 0x0000000000900000-0x000000009b438017] usable Sep 10 00:50:41.851015 kernel: reserve setup_data: [mem 0x000000009b438018-0x000000009b474e57] usable Sep 10 00:50:41.851023 kernel: reserve setup_data: [mem 0x000000009b474e58-0x000000009b475017] usable Sep 10 00:50:41.851031 kernel: reserve setup_data: [mem 0x000000009b475018-0x000000009b47ec57] usable Sep 10 00:50:41.851039 kernel: reserve setup_data: [mem 0x000000009b47ec58-0x000000009c8eefff] usable Sep 10 00:50:41.851049 kernel: reserve setup_data: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Sep 10 00:50:41.851057 kernel: reserve setup_data: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Sep 10 00:50:41.851065 kernel: reserve setup_data: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Sep 10 00:50:41.851074 kernel: reserve setup_data: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Sep 10 00:50:41.851085 kernel: reserve setup_data: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Sep 10 00:50:41.851094 kernel: reserve setup_data: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Sep 10 00:50:41.851103 kernel: reserve setup_data: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Sep 10 00:50:41.851113 kernel: efi: EFI v2.70 by EDK II Sep 10 00:50:41.851122 kernel: efi: SMBIOS=0x9c9ab000 ACPI=0x9cb7e000 ACPI 2.0=0x9cb7e014 MEMATTR=0x9b673018 RNG=0x9cb73018 Sep 10 00:50:41.851131 kernel: random: crng init done Sep 10 00:50:41.851140 kernel: SMBIOS 2.8 present. Sep 10 00:50:41.851149 kernel: DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 Sep 10 00:50:41.851157 kernel: Hypervisor detected: KVM Sep 10 00:50:41.851166 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Sep 10 00:50:41.851175 kernel: kvm-clock: cpu 0, msr 4719f001, primary cpu clock Sep 10 00:50:41.851184 kernel: kvm-clock: using sched offset of 4629797826 cycles Sep 10 00:50:41.851194 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Sep 10 00:50:41.851204 kernel: tsc: Detected 2794.748 MHz processor Sep 10 00:50:41.851213 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Sep 10 00:50:41.851222 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Sep 10 00:50:41.851231 kernel: last_pfn = 0x9cf40 max_arch_pfn = 0x400000000 Sep 10 00:50:41.851240 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Sep 10 00:50:41.851249 kernel: Using GB pages for direct mapping Sep 10 00:50:41.851258 kernel: Secure boot disabled Sep 10 00:50:41.851268 kernel: ACPI: Early table checksum verification disabled Sep 10 00:50:41.851278 kernel: ACPI: RSDP 0x000000009CB7E014 000024 (v02 BOCHS ) Sep 10 00:50:41.851287 kernel: ACPI: XSDT 0x000000009CB7D0E8 000054 (v01 BOCHS BXPC 00000001 01000013) Sep 10 00:50:41.851297 kernel: ACPI: FACP 0x000000009CB79000 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Sep 10 00:50:41.851306 kernel: ACPI: DSDT 0x000000009CB7A000 0021BA (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 10 00:50:41.851315 kernel: ACPI: FACS 0x000000009CBDD000 000040 Sep 10 00:50:41.851324 kernel: ACPI: APIC 0x000000009CB78000 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 10 00:50:41.851333 kernel: ACPI: HPET 0x000000009CB77000 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 10 00:50:41.851343 kernel: ACPI: MCFG 0x000000009CB76000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 10 00:50:41.851352 kernel: ACPI: WAET 0x000000009CB75000 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 10 00:50:41.851362 kernel: ACPI: BGRT 0x000000009CB74000 000038 (v01 INTEL EDK2 00000002 01000013) Sep 10 00:50:41.851372 kernel: ACPI: Reserving FACP table memory at [mem 0x9cb79000-0x9cb790f3] Sep 10 00:50:41.851381 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cb7a000-0x9cb7c1b9] Sep 10 00:50:41.851390 kernel: ACPI: Reserving FACS table memory at [mem 0x9cbdd000-0x9cbdd03f] Sep 10 00:50:41.851399 kernel: ACPI: Reserving APIC table memory at [mem 0x9cb78000-0x9cb7808f] Sep 10 00:50:41.851408 kernel: ACPI: Reserving HPET table memory at [mem 0x9cb77000-0x9cb77037] Sep 10 00:50:41.851417 kernel: ACPI: Reserving MCFG table memory at [mem 0x9cb76000-0x9cb7603b] Sep 10 00:50:41.851426 kernel: ACPI: Reserving WAET table memory at [mem 0x9cb75000-0x9cb75027] Sep 10 00:50:41.851435 kernel: ACPI: Reserving BGRT table memory at [mem 0x9cb74000-0x9cb74037] Sep 10 00:50:41.851446 kernel: No NUMA configuration found Sep 10 00:50:41.851465 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cf3ffff] Sep 10 00:50:41.851474 kernel: NODE_DATA(0) allocated [mem 0x9cea6000-0x9ceabfff] Sep 10 00:50:41.851483 kernel: Zone ranges: Sep 10 00:50:41.851491 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Sep 10 00:50:41.851500 kernel: DMA32 [mem 0x0000000001000000-0x000000009cf3ffff] Sep 10 00:50:41.851509 kernel: Normal empty Sep 10 00:50:41.851518 kernel: Movable zone start for each node Sep 10 00:50:41.851527 kernel: Early memory node ranges Sep 10 00:50:41.851537 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Sep 10 00:50:41.851546 kernel: node 0: [mem 0x0000000000100000-0x00000000007fffff] Sep 10 00:50:41.851556 kernel: node 0: [mem 0x0000000000808000-0x000000000080afff] Sep 10 00:50:41.851565 kernel: node 0: [mem 0x000000000080c000-0x000000000080ffff] Sep 10 00:50:41.851574 kernel: node 0: [mem 0x0000000000900000-0x000000009c8eefff] Sep 10 00:50:41.851583 kernel: node 0: [mem 0x000000009cbff000-0x000000009cf3ffff] Sep 10 00:50:41.851592 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cf3ffff] Sep 10 00:50:41.851612 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Sep 10 00:50:41.851621 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Sep 10 00:50:41.851631 kernel: On node 0, zone DMA: 8 pages in unavailable ranges Sep 10 00:50:41.851642 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Sep 10 00:50:41.851651 kernel: On node 0, zone DMA: 240 pages in unavailable ranges Sep 10 00:50:41.851661 kernel: On node 0, zone DMA32: 784 pages in unavailable ranges Sep 10 00:50:41.851670 kernel: On node 0, zone DMA32: 12480 pages in unavailable ranges Sep 10 00:50:41.851679 kernel: ACPI: PM-Timer IO Port: 0x608 Sep 10 00:50:41.851688 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Sep 10 00:50:41.851697 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Sep 10 00:50:41.851706 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Sep 10 00:50:41.851715 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Sep 10 00:50:41.851726 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Sep 10 00:50:41.851735 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Sep 10 00:50:41.851744 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Sep 10 00:50:41.851753 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Sep 10 00:50:41.851762 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Sep 10 00:50:41.851771 kernel: TSC deadline timer available Sep 10 00:50:41.851780 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Sep 10 00:50:41.851789 kernel: kvm-guest: KVM setup pv remote TLB flush Sep 10 00:50:41.851798 kernel: kvm-guest: setup PV sched yield Sep 10 00:50:41.851809 kernel: [mem 0xc0000000-0xffffffff] available for PCI devices Sep 10 00:50:41.851818 kernel: Booting paravirtualized kernel on KVM Sep 10 00:50:41.851834 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Sep 10 00:50:41.851845 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Sep 10 00:50:41.851854 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Sep 10 00:50:41.851864 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Sep 10 00:50:41.851873 kernel: pcpu-alloc: [0] 0 1 2 3 Sep 10 00:50:41.851882 kernel: kvm-guest: setup async PF for cpu 0 Sep 10 00:50:41.851891 kernel: kvm-guest: stealtime: cpu 0, msr 9b21c0c0 Sep 10 00:50:41.851901 kernel: kvm-guest: PV spinlocks enabled Sep 10 00:50:41.851910 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Sep 10 00:50:41.851925 kernel: Built 1 zonelists, mobility grouping on. Total pages: 629759 Sep 10 00:50:41.851936 kernel: Policy zone: DMA32 Sep 10 00:50:41.851947 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=ebdf135b7dd8c9596dea7f2ca48bf31be0143f7cba32a9cc0282a66ca6db3272 Sep 10 00:50:41.851957 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Sep 10 00:50:41.851967 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Sep 10 00:50:41.851978 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Sep 10 00:50:41.851988 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Sep 10 00:50:41.851999 kernel: Memory: 2397432K/2567000K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47492K init, 4088K bss, 169308K reserved, 0K cma-reserved) Sep 10 00:50:41.852008 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Sep 10 00:50:41.852018 kernel: ftrace: allocating 34612 entries in 136 pages Sep 10 00:50:41.852027 kernel: ftrace: allocated 136 pages with 2 groups Sep 10 00:50:41.852037 kernel: rcu: Hierarchical RCU implementation. Sep 10 00:50:41.852047 kernel: rcu: RCU event tracing is enabled. Sep 10 00:50:41.852057 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Sep 10 00:50:41.852068 kernel: Rude variant of Tasks RCU enabled. Sep 10 00:50:41.852078 kernel: Tracing variant of Tasks RCU enabled. Sep 10 00:50:41.852087 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Sep 10 00:50:41.852097 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Sep 10 00:50:41.852107 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Sep 10 00:50:41.852116 kernel: Console: colour dummy device 80x25 Sep 10 00:50:41.852126 kernel: printk: console [ttyS0] enabled Sep 10 00:50:41.852135 kernel: ACPI: Core revision 20210730 Sep 10 00:50:41.852145 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Sep 10 00:50:41.852156 kernel: APIC: Switch to symmetric I/O mode setup Sep 10 00:50:41.852165 kernel: x2apic enabled Sep 10 00:50:41.852175 kernel: Switched APIC routing to physical x2apic. Sep 10 00:50:41.852184 kernel: kvm-guest: setup PV IPIs Sep 10 00:50:41.852194 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Sep 10 00:50:41.852203 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Sep 10 00:50:41.852213 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794748) Sep 10 00:50:41.852223 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Sep 10 00:50:41.852232 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Sep 10 00:50:41.852243 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Sep 10 00:50:41.852253 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Sep 10 00:50:41.852263 kernel: Spectre V2 : Mitigation: Retpolines Sep 10 00:50:41.852272 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Sep 10 00:50:41.852282 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Sep 10 00:50:41.852291 kernel: active return thunk: retbleed_return_thunk Sep 10 00:50:41.852301 kernel: RETBleed: Mitigation: untrained return thunk Sep 10 00:50:41.852311 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Sep 10 00:50:41.852320 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Sep 10 00:50:41.852332 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Sep 10 00:50:41.852342 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Sep 10 00:50:41.852351 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Sep 10 00:50:41.852360 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Sep 10 00:50:41.852370 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Sep 10 00:50:41.852380 kernel: Freeing SMP alternatives memory: 32K Sep 10 00:50:41.852389 kernel: pid_max: default: 32768 minimum: 301 Sep 10 00:50:41.852399 kernel: LSM: Security Framework initializing Sep 10 00:50:41.852408 kernel: SELinux: Initializing. Sep 10 00:50:41.852419 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 10 00:50:41.852429 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 10 00:50:41.852439 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Sep 10 00:50:41.852458 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Sep 10 00:50:41.852468 kernel: ... version: 0 Sep 10 00:50:41.852477 kernel: ... bit width: 48 Sep 10 00:50:41.852487 kernel: ... generic registers: 6 Sep 10 00:50:41.852496 kernel: ... value mask: 0000ffffffffffff Sep 10 00:50:41.852506 kernel: ... max period: 00007fffffffffff Sep 10 00:50:41.852517 kernel: ... fixed-purpose events: 0 Sep 10 00:50:41.852526 kernel: ... event mask: 000000000000003f Sep 10 00:50:41.852536 kernel: signal: max sigframe size: 1776 Sep 10 00:50:41.852545 kernel: rcu: Hierarchical SRCU implementation. Sep 10 00:50:41.852555 kernel: smp: Bringing up secondary CPUs ... Sep 10 00:50:41.852564 kernel: x86: Booting SMP configuration: Sep 10 00:50:41.852574 kernel: .... node #0, CPUs: #1 Sep 10 00:50:41.852583 kernel: kvm-clock: cpu 1, msr 4719f041, secondary cpu clock Sep 10 00:50:41.852593 kernel: kvm-guest: setup async PF for cpu 1 Sep 10 00:50:41.852614 kernel: kvm-guest: stealtime: cpu 1, msr 9b29c0c0 Sep 10 00:50:41.852623 kernel: #2 Sep 10 00:50:41.852633 kernel: kvm-clock: cpu 2, msr 4719f081, secondary cpu clock Sep 10 00:50:41.852642 kernel: kvm-guest: setup async PF for cpu 2 Sep 10 00:50:41.852652 kernel: kvm-guest: stealtime: cpu 2, msr 9b31c0c0 Sep 10 00:50:41.852661 kernel: #3 Sep 10 00:50:41.852671 kernel: kvm-clock: cpu 3, msr 4719f0c1, secondary cpu clock Sep 10 00:50:41.852680 kernel: kvm-guest: setup async PF for cpu 3 Sep 10 00:50:41.852690 kernel: kvm-guest: stealtime: cpu 3, msr 9b39c0c0 Sep 10 00:50:41.852700 kernel: smp: Brought up 1 node, 4 CPUs Sep 10 00:50:41.852712 kernel: smpboot: Max logical packages: 1 Sep 10 00:50:41.852722 kernel: smpboot: Total of 4 processors activated (22357.98 BogoMIPS) Sep 10 00:50:41.852731 kernel: devtmpfs: initialized Sep 10 00:50:41.852740 kernel: x86/mm: Memory block size: 128MB Sep 10 00:50:41.852750 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00800000-0x00807fff] (32768 bytes) Sep 10 00:50:41.852760 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x0080b000-0x0080bfff] (4096 bytes) Sep 10 00:50:41.852769 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00810000-0x008fffff] (983040 bytes) Sep 10 00:50:41.852779 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cb7f000-0x9cbfefff] (524288 bytes) Sep 10 00:50:41.852788 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cf60000-0x9cffffff] (655360 bytes) Sep 10 00:50:41.852799 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Sep 10 00:50:41.852809 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Sep 10 00:50:41.852819 kernel: pinctrl core: initialized pinctrl subsystem Sep 10 00:50:41.852828 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Sep 10 00:50:41.852838 kernel: audit: initializing netlink subsys (disabled) Sep 10 00:50:41.852847 kernel: audit: type=2000 audit(1757465441.280:1): state=initialized audit_enabled=0 res=1 Sep 10 00:50:41.852857 kernel: thermal_sys: Registered thermal governor 'step_wise' Sep 10 00:50:41.852866 kernel: thermal_sys: Registered thermal governor 'user_space' Sep 10 00:50:41.852875 kernel: cpuidle: using governor menu Sep 10 00:50:41.852886 kernel: ACPI: bus type PCI registered Sep 10 00:50:41.852896 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Sep 10 00:50:41.852905 kernel: dca service started, version 1.12.1 Sep 10 00:50:41.852915 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) Sep 10 00:50:41.852924 kernel: PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 Sep 10 00:50:41.852933 kernel: PCI: Using configuration type 1 for base access Sep 10 00:50:41.852943 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Sep 10 00:50:41.852953 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Sep 10 00:50:41.852964 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Sep 10 00:50:41.852973 kernel: ACPI: Added _OSI(Module Device) Sep 10 00:50:41.852983 kernel: ACPI: Added _OSI(Processor Device) Sep 10 00:50:41.852992 kernel: ACPI: Added _OSI(Processor Aggregator Device) Sep 10 00:50:41.853002 kernel: ACPI: Added _OSI(Linux-Dell-Video) Sep 10 00:50:41.853011 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Sep 10 00:50:41.853021 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Sep 10 00:50:41.853030 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Sep 10 00:50:41.853040 kernel: ACPI: Interpreter enabled Sep 10 00:50:41.853049 kernel: ACPI: PM: (supports S0 S3 S5) Sep 10 00:50:41.853060 kernel: ACPI: Using IOAPIC for interrupt routing Sep 10 00:50:41.853070 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Sep 10 00:50:41.853080 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Sep 10 00:50:41.853089 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Sep 10 00:50:41.853246 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Sep 10 00:50:41.853339 kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] Sep 10 00:50:41.853426 kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Sep 10 00:50:41.853441 kernel: PCI host bridge to bus 0000:00 Sep 10 00:50:41.853550 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Sep 10 00:50:41.853647 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Sep 10 00:50:41.853736 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Sep 10 00:50:41.853813 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xafffffff window] Sep 10 00:50:41.853890 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Sep 10 00:50:41.853971 kernel: pci_bus 0000:00: root bus resource [mem 0x800000000-0xfffffffff window] Sep 10 00:50:41.854051 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Sep 10 00:50:41.854175 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 Sep 10 00:50:41.854283 kernel: pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 Sep 10 00:50:41.854373 kernel: pci 0000:00:01.0: reg 0x10: [mem 0xc0000000-0xc0ffffff pref] Sep 10 00:50:41.854480 kernel: pci 0000:00:01.0: reg 0x18: [mem 0xc1044000-0xc1044fff] Sep 10 00:50:41.854568 kernel: pci 0000:00:01.0: reg 0x30: [mem 0xffff0000-0xffffffff pref] Sep 10 00:50:41.854676 kernel: pci 0000:00:01.0: BAR 0: assigned to efifb Sep 10 00:50:41.854763 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Sep 10 00:50:41.854866 kernel: pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 Sep 10 00:50:41.854963 kernel: pci 0000:00:02.0: reg 0x10: [io 0x6100-0x611f] Sep 10 00:50:41.855061 kernel: pci 0000:00:02.0: reg 0x14: [mem 0xc1043000-0xc1043fff] Sep 10 00:50:41.855152 kernel: pci 0000:00:02.0: reg 0x20: [mem 0x800000000-0x800003fff 64bit pref] Sep 10 00:50:41.855253 kernel: pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 Sep 10 00:50:41.855347 kernel: pci 0000:00:03.0: reg 0x10: [io 0x6000-0x607f] Sep 10 00:50:41.855438 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xc1042000-0xc1042fff] Sep 10 00:50:41.855542 kernel: pci 0000:00:03.0: reg 0x20: [mem 0x800004000-0x800007fff 64bit pref] Sep 10 00:50:41.855668 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 Sep 10 00:50:41.856027 kernel: pci 0000:00:04.0: reg 0x10: [io 0x60e0-0x60ff] Sep 10 00:50:41.856121 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xc1041000-0xc1041fff] Sep 10 00:50:41.856216 kernel: pci 0000:00:04.0: reg 0x20: [mem 0x800008000-0x80000bfff 64bit pref] Sep 10 00:50:41.856309 kernel: pci 0000:00:04.0: reg 0x30: [mem 0xfffc0000-0xffffffff pref] Sep 10 00:50:41.856401 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 Sep 10 00:50:41.856505 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Sep 10 00:50:41.856647 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 Sep 10 00:50:41.856741 kernel: pci 0000:00:1f.2: reg 0x20: [io 0x60c0-0x60df] Sep 10 00:50:41.856825 kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xc1040000-0xc1040fff] Sep 10 00:50:41.856926 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 Sep 10 00:50:41.857017 kernel: pci 0000:00:1f.3: reg 0x20: [io 0x6080-0x60bf] Sep 10 00:50:41.857031 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Sep 10 00:50:41.857041 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Sep 10 00:50:41.857051 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Sep 10 00:50:41.857060 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Sep 10 00:50:41.857070 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Sep 10 00:50:41.857080 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Sep 10 00:50:41.857089 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Sep 10 00:50:41.857101 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Sep 10 00:50:41.857111 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Sep 10 00:50:41.857120 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Sep 10 00:50:41.857130 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Sep 10 00:50:41.857140 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Sep 10 00:50:41.857149 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Sep 10 00:50:41.857159 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Sep 10 00:50:41.857168 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Sep 10 00:50:41.857177 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Sep 10 00:50:41.857189 kernel: iommu: Default domain type: Translated Sep 10 00:50:41.857198 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Sep 10 00:50:41.857285 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Sep 10 00:50:41.857370 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Sep 10 00:50:41.857469 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Sep 10 00:50:41.857482 kernel: vgaarb: loaded Sep 10 00:50:41.857492 kernel: pps_core: LinuxPPS API ver. 1 registered Sep 10 00:50:41.857502 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Sep 10 00:50:41.857512 kernel: PTP clock support registered Sep 10 00:50:41.857524 kernel: Registered efivars operations Sep 10 00:50:41.857534 kernel: PCI: Using ACPI for IRQ routing Sep 10 00:50:41.857543 kernel: PCI: pci_cache_line_size set to 64 bytes Sep 10 00:50:41.857553 kernel: e820: reserve RAM buffer [mem 0x0080b000-0x008fffff] Sep 10 00:50:41.857562 kernel: e820: reserve RAM buffer [mem 0x00810000-0x008fffff] Sep 10 00:50:41.857572 kernel: e820: reserve RAM buffer [mem 0x9b438018-0x9bffffff] Sep 10 00:50:41.857581 kernel: e820: reserve RAM buffer [mem 0x9b475018-0x9bffffff] Sep 10 00:50:41.857591 kernel: e820: reserve RAM buffer [mem 0x9c8ef000-0x9fffffff] Sep 10 00:50:41.857614 kernel: e820: reserve RAM buffer [mem 0x9cf40000-0x9fffffff] Sep 10 00:50:41.857631 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Sep 10 00:50:41.857641 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Sep 10 00:50:41.857650 kernel: clocksource: Switched to clocksource kvm-clock Sep 10 00:50:41.857660 kernel: VFS: Disk quotas dquot_6.6.0 Sep 10 00:50:41.857670 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Sep 10 00:50:41.857679 kernel: pnp: PnP ACPI init Sep 10 00:50:41.857778 kernel: system 00:05: [mem 0xb0000000-0xbfffffff window] has been reserved Sep 10 00:50:41.857792 kernel: pnp: PnP ACPI: found 6 devices Sep 10 00:50:41.857804 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Sep 10 00:50:41.857814 kernel: NET: Registered PF_INET protocol family Sep 10 00:50:41.857824 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Sep 10 00:50:41.857833 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Sep 10 00:50:41.857843 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Sep 10 00:50:41.857853 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Sep 10 00:50:41.857863 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Sep 10 00:50:41.857872 kernel: TCP: Hash tables configured (established 32768 bind 32768) Sep 10 00:50:41.857884 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 10 00:50:41.857893 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 10 00:50:41.857903 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Sep 10 00:50:41.857913 kernel: NET: Registered PF_XDP protocol family Sep 10 00:50:41.858017 kernel: pci 0000:00:04.0: can't claim BAR 6 [mem 0xfffc0000-0xffffffff pref]: no compatible bridge window Sep 10 00:50:41.858111 kernel: pci 0000:00:04.0: BAR 6: assigned [mem 0x9d000000-0x9d03ffff pref] Sep 10 00:50:41.858190 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Sep 10 00:50:41.858267 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Sep 10 00:50:41.858355 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Sep 10 00:50:41.858434 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xafffffff window] Sep 10 00:50:41.858525 kernel: pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] Sep 10 00:50:41.858625 kernel: pci_bus 0000:00: resource 9 [mem 0x800000000-0xfffffffff window] Sep 10 00:50:41.858715 kernel: PCI: CLS 0 bytes, default 64 Sep 10 00:50:41.858727 kernel: Initialise system trusted keyrings Sep 10 00:50:41.858738 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Sep 10 00:50:41.858748 kernel: Key type asymmetric registered Sep 10 00:50:41.858757 kernel: Asymmetric key parser 'x509' registered Sep 10 00:50:41.858770 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Sep 10 00:50:41.858780 kernel: io scheduler mq-deadline registered Sep 10 00:50:41.858800 kernel: io scheduler kyber registered Sep 10 00:50:41.858811 kernel: io scheduler bfq registered Sep 10 00:50:41.858821 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Sep 10 00:50:41.858831 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Sep 10 00:50:41.858849 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Sep 10 00:50:41.858859 kernel: ACPI: \_SB_.GSIE: Enabled at IRQ 20 Sep 10 00:50:41.858869 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Sep 10 00:50:41.858881 kernel: 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Sep 10 00:50:41.858891 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Sep 10 00:50:41.858901 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Sep 10 00:50:41.858911 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Sep 10 00:50:41.859016 kernel: rtc_cmos 00:04: RTC can wake from S4 Sep 10 00:50:41.859032 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Sep 10 00:50:41.859116 kernel: rtc_cmos 00:04: registered as rtc0 Sep 10 00:50:41.859198 kernel: rtc_cmos 00:04: setting system clock to 2025-09-10T00:50:41 UTC (1757465441) Sep 10 00:50:41.859286 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Sep 10 00:50:41.859298 kernel: efifb: probing for efifb Sep 10 00:50:41.859309 kernel: efifb: framebuffer at 0xc0000000, using 4000k, total 4000k Sep 10 00:50:41.859319 kernel: efifb: mode is 1280x800x32, linelength=5120, pages=1 Sep 10 00:50:41.859329 kernel: efifb: scrolling: redraw Sep 10 00:50:41.859339 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Sep 10 00:50:41.859349 kernel: Console: switching to colour frame buffer device 160x50 Sep 10 00:50:41.859359 kernel: fb0: EFI VGA frame buffer device Sep 10 00:50:41.859369 kernel: pstore: Registered efi as persistent store backend Sep 10 00:50:41.859381 kernel: NET: Registered PF_INET6 protocol family Sep 10 00:50:41.859391 kernel: Segment Routing with IPv6 Sep 10 00:50:41.859401 kernel: In-situ OAM (IOAM) with IPv6 Sep 10 00:50:41.859413 kernel: NET: Registered PF_PACKET protocol family Sep 10 00:50:41.859422 kernel: Key type dns_resolver registered Sep 10 00:50:41.859432 kernel: IPI shorthand broadcast: enabled Sep 10 00:50:41.859444 kernel: sched_clock: Marking stable (443653786, 129770958)->(643532944, -70108200) Sep 10 00:50:41.859467 kernel: registered taskstats version 1 Sep 10 00:50:41.859477 kernel: Loading compiled-in X.509 certificates Sep 10 00:50:41.859487 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.191-flatcar: 3af57cd809cc9e43d7af9f276bb20b532a4147af' Sep 10 00:50:41.859497 kernel: Key type .fscrypt registered Sep 10 00:50:41.859507 kernel: Key type fscrypt-provisioning registered Sep 10 00:50:41.859517 kernel: pstore: Using crash dump compression: deflate Sep 10 00:50:41.859527 kernel: ima: No TPM chip found, activating TPM-bypass! Sep 10 00:50:41.859540 kernel: ima: Allocated hash algorithm: sha1 Sep 10 00:50:41.859550 kernel: ima: No architecture policies found Sep 10 00:50:41.859560 kernel: clk: Disabling unused clocks Sep 10 00:50:41.859570 kernel: Freeing unused kernel image (initmem) memory: 47492K Sep 10 00:50:41.859580 kernel: Write protecting the kernel read-only data: 28672k Sep 10 00:50:41.859590 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Sep 10 00:50:41.859654 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Sep 10 00:50:41.859664 kernel: Run /init as init process Sep 10 00:50:41.859674 kernel: with arguments: Sep 10 00:50:41.859686 kernel: /init Sep 10 00:50:41.859696 kernel: with environment: Sep 10 00:50:41.859708 kernel: HOME=/ Sep 10 00:50:41.859719 kernel: TERM=linux Sep 10 00:50:41.859731 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Sep 10 00:50:41.859743 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 10 00:50:41.859756 systemd[1]: Detected virtualization kvm. Sep 10 00:50:41.859767 systemd[1]: Detected architecture x86-64. Sep 10 00:50:41.859780 systemd[1]: Running in initrd. Sep 10 00:50:41.859790 systemd[1]: No hostname configured, using default hostname. Sep 10 00:50:41.859800 systemd[1]: Hostname set to . Sep 10 00:50:41.859811 systemd[1]: Initializing machine ID from VM UUID. Sep 10 00:50:41.859822 systemd[1]: Queued start job for default target initrd.target. Sep 10 00:50:41.859832 systemd[1]: Started systemd-ask-password-console.path. Sep 10 00:50:41.859842 systemd[1]: Reached target cryptsetup.target. Sep 10 00:50:41.859853 systemd[1]: Reached target paths.target. Sep 10 00:50:41.859863 systemd[1]: Reached target slices.target. Sep 10 00:50:41.859874 systemd[1]: Reached target swap.target. Sep 10 00:50:41.859884 systemd[1]: Reached target timers.target. Sep 10 00:50:41.859896 systemd[1]: Listening on iscsid.socket. Sep 10 00:50:41.859906 systemd[1]: Listening on iscsiuio.socket. Sep 10 00:50:41.859917 systemd[1]: Listening on systemd-journald-audit.socket. Sep 10 00:50:41.859928 systemd[1]: Listening on systemd-journald-dev-log.socket. Sep 10 00:50:41.859938 systemd[1]: Listening on systemd-journald.socket. Sep 10 00:50:41.859950 systemd[1]: Listening on systemd-networkd.socket. Sep 10 00:50:41.859960 systemd[1]: Listening on systemd-udevd-control.socket. Sep 10 00:50:41.859971 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 10 00:50:41.859981 systemd[1]: Reached target sockets.target. Sep 10 00:50:41.859992 systemd[1]: Starting kmod-static-nodes.service... Sep 10 00:50:41.860003 systemd[1]: Finished network-cleanup.service. Sep 10 00:50:41.860013 systemd[1]: Starting systemd-fsck-usr.service... Sep 10 00:50:41.860024 systemd[1]: Starting systemd-journald.service... Sep 10 00:50:41.860034 systemd[1]: Starting systemd-modules-load.service... Sep 10 00:50:41.860046 systemd[1]: Starting systemd-resolved.service... Sep 10 00:50:41.860057 systemd[1]: Starting systemd-vconsole-setup.service... Sep 10 00:50:41.860068 systemd[1]: Finished kmod-static-nodes.service. Sep 10 00:50:41.860078 systemd[1]: Finished systemd-fsck-usr.service. Sep 10 00:50:41.860089 kernel: audit: type=1130 audit(1757465441.849:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:41.860099 systemd[1]: Finished systemd-vconsole-setup.service. Sep 10 00:50:41.860110 kernel: audit: type=1130 audit(1757465441.854:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:41.860121 systemd[1]: Starting dracut-cmdline-ask.service... Sep 10 00:50:41.860133 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 10 00:50:41.860147 systemd-journald[196]: Journal started Sep 10 00:50:41.860195 systemd-journald[196]: Runtime Journal (/run/log/journal/132443f459e64c61941815f9de505e3f) is 6.0M, max 48.4M, 42.4M free. Sep 10 00:50:41.849000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:41.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:41.849722 systemd-modules-load[197]: Inserted module 'overlay' Sep 10 00:50:41.866753 systemd[1]: Started systemd-journald.service. Sep 10 00:50:41.866774 kernel: audit: type=1130 audit(1757465441.863:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:41.863000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:41.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:41.874326 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 10 00:50:41.880357 kernel: audit: type=1130 audit(1757465441.874:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:41.880544 systemd[1]: Finished dracut-cmdline-ask.service. Sep 10 00:50:41.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:41.882970 systemd[1]: Starting dracut-cmdline.service... Sep 10 00:50:41.887366 kernel: audit: type=1130 audit(1757465441.881:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:41.883947 systemd-resolved[198]: Positive Trust Anchors: Sep 10 00:50:41.883955 systemd-resolved[198]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 10 00:50:41.883992 systemd-resolved[198]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 10 00:50:41.887000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:41.886866 systemd-resolved[198]: Defaulting to hostname 'linux'. Sep 10 00:50:41.901059 kernel: audit: type=1130 audit(1757465441.887:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:41.901090 dracut-cmdline[215]: dracut-dracut-053 Sep 10 00:50:41.887783 systemd[1]: Started systemd-resolved.service. Sep 10 00:50:41.888304 systemd[1]: Reached target nss-lookup.target. Sep 10 00:50:41.905640 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Sep 10 00:50:41.906783 dracut-cmdline[215]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=ebdf135b7dd8c9596dea7f2ca48bf31be0143f7cba32a9cc0282a66ca6db3272 Sep 10 00:50:41.914178 systemd-modules-load[197]: Inserted module 'br_netfilter' Sep 10 00:50:41.915384 kernel: Bridge firewalling registered Sep 10 00:50:41.931628 kernel: SCSI subsystem initialized Sep 10 00:50:41.942774 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Sep 10 00:50:41.942798 kernel: device-mapper: uevent: version 1.0.3 Sep 10 00:50:41.943988 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Sep 10 00:50:41.946684 systemd-modules-load[197]: Inserted module 'dm_multipath' Sep 10 00:50:41.947393 systemd[1]: Finished systemd-modules-load.service. Sep 10 00:50:41.953983 kernel: audit: type=1130 audit(1757465441.947:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:41.947000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:41.949375 systemd[1]: Starting systemd-sysctl.service... Sep 10 00:50:41.959000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:41.959345 systemd[1]: Finished systemd-sysctl.service. Sep 10 00:50:41.964154 kernel: audit: type=1130 audit(1757465441.959:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:41.974614 kernel: Loading iSCSI transport class v2.0-870. Sep 10 00:50:41.994632 kernel: iscsi: registered transport (tcp) Sep 10 00:50:42.016631 kernel: iscsi: registered transport (qla4xxx) Sep 10 00:50:42.016692 kernel: QLogic iSCSI HBA Driver Sep 10 00:50:42.051092 systemd[1]: Finished dracut-cmdline.service. Sep 10 00:50:42.052000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:42.053632 systemd[1]: Starting dracut-pre-udev.service... Sep 10 00:50:42.057374 kernel: audit: type=1130 audit(1757465442.052:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:42.102642 kernel: raid6: avx2x4 gen() 28419 MB/s Sep 10 00:50:42.119627 kernel: raid6: avx2x4 xor() 7369 MB/s Sep 10 00:50:42.136632 kernel: raid6: avx2x2 gen() 31671 MB/s Sep 10 00:50:42.153641 kernel: raid6: avx2x2 xor() 17350 MB/s Sep 10 00:50:42.170634 kernel: raid6: avx2x1 gen() 22608 MB/s Sep 10 00:50:42.187634 kernel: raid6: avx2x1 xor() 13738 MB/s Sep 10 00:50:42.204633 kernel: raid6: sse2x4 gen() 13274 MB/s Sep 10 00:50:42.221644 kernel: raid6: sse2x4 xor() 6359 MB/s Sep 10 00:50:42.238635 kernel: raid6: sse2x2 gen() 15700 MB/s Sep 10 00:50:42.255617 kernel: raid6: sse2x2 xor() 9369 MB/s Sep 10 00:50:42.272657 kernel: raid6: sse2x1 gen() 10592 MB/s Sep 10 00:50:42.290248 kernel: raid6: sse2x1 xor() 5807 MB/s Sep 10 00:50:42.290314 kernel: raid6: using algorithm avx2x2 gen() 31671 MB/s Sep 10 00:50:42.290345 kernel: raid6: .... xor() 17350 MB/s, rmw enabled Sep 10 00:50:42.291111 kernel: raid6: using avx2x2 recovery algorithm Sep 10 00:50:42.306625 kernel: xor: automatically using best checksumming function avx Sep 10 00:50:42.402630 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Sep 10 00:50:42.410710 systemd[1]: Finished dracut-pre-udev.service. Sep 10 00:50:42.411000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:42.412000 audit: BPF prog-id=7 op=LOAD Sep 10 00:50:42.412000 audit: BPF prog-id=8 op=LOAD Sep 10 00:50:42.413133 systemd[1]: Starting systemd-udevd.service... Sep 10 00:50:42.425325 systemd-udevd[401]: Using default interface naming scheme 'v252'. Sep 10 00:50:42.429102 systemd[1]: Started systemd-udevd.service. Sep 10 00:50:42.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:42.432407 systemd[1]: Starting dracut-pre-trigger.service... Sep 10 00:50:42.441715 dracut-pre-trigger[409]: rd.md=0: removing MD RAID activation Sep 10 00:50:42.465014 systemd[1]: Finished dracut-pre-trigger.service. Sep 10 00:50:42.465000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:42.466737 systemd[1]: Starting systemd-udev-trigger.service... Sep 10 00:50:42.497990 systemd[1]: Finished systemd-udev-trigger.service. Sep 10 00:50:42.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:42.556945 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Sep 10 00:50:42.561733 kernel: cryptd: max_cpu_qlen set to 1000 Sep 10 00:50:42.561750 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Sep 10 00:50:42.561759 kernel: GPT:9289727 != 19775487 Sep 10 00:50:42.561767 kernel: GPT:Alternate GPT header not at the end of the disk. Sep 10 00:50:42.561776 kernel: GPT:9289727 != 19775487 Sep 10 00:50:42.561789 kernel: GPT: Use GNU Parted to correct GPT errors. Sep 10 00:50:42.561798 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Sep 10 00:50:42.567623 kernel: libata version 3.00 loaded. Sep 10 00:50:42.577505 kernel: AVX2 version of gcm_enc/dec engaged. Sep 10 00:50:42.577566 kernel: AES CTR mode by8 optimization enabled Sep 10 00:50:42.579066 kernel: ahci 0000:00:1f.2: version 3.0 Sep 10 00:50:42.603981 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Sep 10 00:50:42.603998 kernel: ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode Sep 10 00:50:42.604094 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Sep 10 00:50:42.604175 kernel: scsi host0: ahci Sep 10 00:50:42.604281 kernel: scsi host1: ahci Sep 10 00:50:42.604365 kernel: scsi host2: ahci Sep 10 00:50:42.604463 kernel: scsi host3: ahci Sep 10 00:50:42.604557 kernel: scsi host4: ahci Sep 10 00:50:42.604681 kernel: scsi host5: ahci Sep 10 00:50:42.604766 kernel: ata1: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040100 irq 34 Sep 10 00:50:42.604776 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (455) Sep 10 00:50:42.604785 kernel: ata2: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040180 irq 34 Sep 10 00:50:42.604794 kernel: ata3: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040200 irq 34 Sep 10 00:50:42.604803 kernel: ata4: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040280 irq 34 Sep 10 00:50:42.604811 kernel: ata5: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040300 irq 34 Sep 10 00:50:42.604820 kernel: ata6: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040380 irq 34 Sep 10 00:50:42.590341 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Sep 10 00:50:42.593690 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Sep 10 00:50:42.605827 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Sep 10 00:50:42.618851 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Sep 10 00:50:42.622830 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 10 00:50:42.624380 systemd[1]: Starting disk-uuid.service... Sep 10 00:50:42.675315 disk-uuid[527]: Primary Header is updated. Sep 10 00:50:42.675315 disk-uuid[527]: Secondary Entries is updated. Sep 10 00:50:42.675315 disk-uuid[527]: Secondary Header is updated. Sep 10 00:50:42.679384 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Sep 10 00:50:42.681645 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Sep 10 00:50:42.685630 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Sep 10 00:50:42.911644 kernel: ata2: SATA link down (SStatus 0 SControl 300) Sep 10 00:50:42.911722 kernel: ata5: SATA link down (SStatus 0 SControl 300) Sep 10 00:50:42.913632 kernel: ata4: SATA link down (SStatus 0 SControl 300) Sep 10 00:50:42.914634 kernel: ata1: SATA link down (SStatus 0 SControl 300) Sep 10 00:50:42.915646 kernel: ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Sep 10 00:50:42.917093 kernel: ata3.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Sep 10 00:50:42.917114 kernel: ata3.00: applying bridge limits Sep 10 00:50:42.918621 kernel: ata3.00: configured for UDMA/100 Sep 10 00:50:42.920636 kernel: scsi 2:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Sep 10 00:50:42.922642 kernel: ata6: SATA link down (SStatus 0 SControl 300) Sep 10 00:50:42.957126 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Sep 10 00:50:42.974658 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Sep 10 00:50:42.974681 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Sep 10 00:50:43.685214 disk-uuid[528]: The operation has completed successfully. Sep 10 00:50:43.687170 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Sep 10 00:50:43.712558 systemd[1]: disk-uuid.service: Deactivated successfully. Sep 10 00:50:43.712698 systemd[1]: Finished disk-uuid.service. Sep 10 00:50:43.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:43.714000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:43.723368 systemd[1]: Starting verity-setup.service... Sep 10 00:50:43.738631 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Sep 10 00:50:43.755251 systemd[1]: Found device dev-mapper-usr.device. Sep 10 00:50:43.757815 systemd[1]: Mounting sysusr-usr.mount... Sep 10 00:50:43.760132 systemd[1]: Finished verity-setup.service. Sep 10 00:50:43.759000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:43.815630 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Sep 10 00:50:43.816110 systemd[1]: Mounted sysusr-usr.mount. Sep 10 00:50:43.816472 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Sep 10 00:50:43.817478 systemd[1]: Starting ignition-setup.service... Sep 10 00:50:43.819843 systemd[1]: Starting parse-ip-for-networkd.service... Sep 10 00:50:43.829127 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Sep 10 00:50:43.829172 kernel: BTRFS info (device vda6): using free space tree Sep 10 00:50:43.829185 kernel: BTRFS info (device vda6): has skinny extents Sep 10 00:50:43.836485 systemd[1]: mnt-oem.mount: Deactivated successfully. Sep 10 00:50:43.843831 systemd[1]: Finished ignition-setup.service. Sep 10 00:50:43.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:43.846421 systemd[1]: Starting ignition-fetch-offline.service... Sep 10 00:50:43.880137 systemd[1]: Finished parse-ip-for-networkd.service. Sep 10 00:50:43.881584 ignition[656]: Ignition 2.14.0 Sep 10 00:50:43.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:43.881611 ignition[656]: Stage: fetch-offline Sep 10 00:50:43.881654 ignition[656]: no configs at "/usr/lib/ignition/base.d" Sep 10 00:50:43.881662 ignition[656]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 10 00:50:43.881758 ignition[656]: parsed url from cmdline: "" Sep 10 00:50:43.881762 ignition[656]: no config URL provided Sep 10 00:50:43.881767 ignition[656]: reading system config file "/usr/lib/ignition/user.ign" Sep 10 00:50:43.881774 ignition[656]: no config at "/usr/lib/ignition/user.ign" Sep 10 00:50:43.881793 ignition[656]: op(1): [started] loading QEMU firmware config module Sep 10 00:50:43.881799 ignition[656]: op(1): executing: "modprobe" "qemu_fw_cfg" Sep 10 00:50:43.885617 ignition[656]: op(1): [finished] loading QEMU firmware config module Sep 10 00:50:43.885637 ignition[656]: QEMU firmware config was not found. Ignoring... Sep 10 00:50:43.891949 systemd[1]: Starting systemd-networkd.service... Sep 10 00:50:43.890000 audit: BPF prog-id=9 op=LOAD Sep 10 00:50:43.934036 ignition[656]: parsing config with SHA512: 901460864f2896ab1c98c21bee67215563d52584bd4202bc5cc72abf7f65664d0e1ca11477465b94ba5f1e3a4b9b91a9464bfa43ed2f4140df5dbb9e01f3af58 Sep 10 00:50:43.941926 unknown[656]: fetched base config from "system" Sep 10 00:50:43.941956 unknown[656]: fetched user config from "qemu" Sep 10 00:50:43.942660 ignition[656]: fetch-offline: fetch-offline passed Sep 10 00:50:43.942740 ignition[656]: Ignition finished successfully Sep 10 00:50:43.946427 systemd[1]: Finished ignition-fetch-offline.service. Sep 10 00:50:43.946000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:43.955917 systemd-networkd[721]: lo: Link UP Sep 10 00:50:43.955925 systemd-networkd[721]: lo: Gained carrier Sep 10 00:50:43.957000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:43.956289 systemd-networkd[721]: Enumeration completed Sep 10 00:50:43.956373 systemd[1]: Started systemd-networkd.service. Sep 10 00:50:43.956545 systemd-networkd[721]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 10 00:50:43.957874 systemd-networkd[721]: eth0: Link UP Sep 10 00:50:43.957878 systemd-networkd[721]: eth0: Gained carrier Sep 10 00:50:43.958067 systemd[1]: Reached target network.target. Sep 10 00:50:43.966000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:43.959611 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Sep 10 00:50:43.960331 systemd[1]: Starting ignition-kargs.service... Sep 10 00:50:43.970971 ignition[723]: Ignition 2.14.0 Sep 10 00:50:43.961999 systemd[1]: Starting iscsiuio.service... Sep 10 00:50:43.973110 iscsid[733]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Sep 10 00:50:43.973110 iscsid[733]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Sep 10 00:50:43.973110 iscsid[733]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Sep 10 00:50:43.973110 iscsid[733]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Sep 10 00:50:43.973110 iscsid[733]: If using hardware iscsi like qla4xxx this message can be ignored. Sep 10 00:50:43.973110 iscsid[733]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Sep 10 00:50:43.973110 iscsid[733]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Sep 10 00:50:43.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:43.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:43.970978 ignition[723]: Stage: kargs Sep 10 00:50:43.965893 systemd[1]: Started iscsiuio.service. Sep 10 00:50:43.971076 ignition[723]: no configs at "/usr/lib/ignition/base.d" Sep 10 00:50:43.968104 systemd[1]: Starting iscsid.service... Sep 10 00:50:43.971086 ignition[723]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 10 00:50:43.973315 systemd[1]: Started iscsid.service. Sep 10 00:50:43.973543 ignition[723]: kargs: kargs passed Sep 10 00:50:43.975682 systemd[1]: Finished ignition-kargs.service. Sep 10 00:50:43.973677 ignition[723]: Ignition finished successfully Sep 10 00:50:43.978767 systemd-networkd[721]: eth0: DHCPv4 address 10.0.0.141/16, gateway 10.0.0.1 acquired from 10.0.0.1 Sep 10 00:50:43.987716 systemd[1]: Starting dracut-initqueue.service... Sep 10 00:50:43.996665 systemd[1]: Starting ignition-disks.service... Sep 10 00:50:43.998274 systemd[1]: Finished dracut-initqueue.service. Sep 10 00:50:43.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:44.000093 systemd[1]: Reached target remote-fs-pre.target. Sep 10 00:50:44.001945 systemd[1]: Reached target remote-cryptsetup.target. Sep 10 00:50:44.003067 ignition[742]: Ignition 2.14.0 Sep 10 00:50:44.003074 ignition[742]: Stage: disks Sep 10 00:50:44.003819 systemd[1]: Reached target remote-fs.target. Sep 10 00:50:44.003172 ignition[742]: no configs at "/usr/lib/ignition/base.d" Sep 10 00:50:44.003181 ignition[742]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 10 00:50:44.004398 ignition[742]: disks: disks passed Sep 10 00:50:44.004434 ignition[742]: Ignition finished successfully Sep 10 00:50:44.009828 systemd[1]: Starting dracut-pre-mount.service... Sep 10 00:50:44.011355 systemd[1]: Finished ignition-disks.service. Sep 10 00:50:44.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:44.012939 systemd[1]: Reached target initrd-root-device.target. Sep 10 00:50:44.014569 systemd[1]: Reached target local-fs-pre.target. Sep 10 00:50:44.016074 systemd[1]: Reached target local-fs.target. Sep 10 00:50:44.017481 systemd[1]: Reached target sysinit.target. Sep 10 00:50:44.018836 systemd[1]: Reached target basic.target. Sep 10 00:50:44.020328 systemd[1]: Finished dracut-pre-mount.service. Sep 10 00:50:44.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:44.022331 systemd[1]: Starting systemd-fsck-root.service... Sep 10 00:50:44.032832 systemd-resolved[198]: Detected conflict on linux IN A 10.0.0.141 Sep 10 00:50:44.032841 systemd-resolved[198]: Hostname conflict, changing published hostname from 'linux' to 'linux11'. Sep 10 00:50:44.036017 systemd-fsck[755]: ROOT: clean, 629/553520 files, 56028/553472 blocks Sep 10 00:50:44.040896 systemd[1]: Finished systemd-fsck-root.service. Sep 10 00:50:44.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:44.043684 systemd[1]: Mounting sysroot.mount... Sep 10 00:50:44.050614 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Sep 10 00:50:44.050772 systemd[1]: Mounted sysroot.mount. Sep 10 00:50:44.052136 systemd[1]: Reached target initrd-root-fs.target. Sep 10 00:50:44.054444 systemd[1]: Mounting sysroot-usr.mount... Sep 10 00:50:44.055953 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Sep 10 00:50:44.055985 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Sep 10 00:50:44.057244 systemd[1]: Reached target ignition-diskful.target. Sep 10 00:50:44.061003 systemd[1]: Mounted sysroot-usr.mount. Sep 10 00:50:44.062905 systemd[1]: Starting initrd-setup-root.service... Sep 10 00:50:44.067119 initrd-setup-root[765]: cut: /sysroot/etc/passwd: No such file or directory Sep 10 00:50:44.102341 initrd-setup-root[773]: cut: /sysroot/etc/group: No such file or directory Sep 10 00:50:44.107167 initrd-setup-root[781]: cut: /sysroot/etc/shadow: No such file or directory Sep 10 00:50:44.109530 initrd-setup-root[789]: cut: /sysroot/etc/gshadow: No such file or directory Sep 10 00:50:44.136791 systemd[1]: Finished initrd-setup-root.service. Sep 10 00:50:44.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:44.139478 systemd[1]: Starting ignition-mount.service... Sep 10 00:50:44.141590 systemd[1]: Starting sysroot-boot.service... Sep 10 00:50:44.144376 bash[806]: umount: /sysroot/usr/share/oem: not mounted. Sep 10 00:50:44.153096 ignition[807]: INFO : Ignition 2.14.0 Sep 10 00:50:44.153096 ignition[807]: INFO : Stage: mount Sep 10 00:50:44.155196 ignition[807]: INFO : no configs at "/usr/lib/ignition/base.d" Sep 10 00:50:44.155196 ignition[807]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 10 00:50:44.155196 ignition[807]: INFO : mount: mount passed Sep 10 00:50:44.155196 ignition[807]: INFO : Ignition finished successfully Sep 10 00:50:44.155000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:44.154874 systemd[1]: Finished ignition-mount.service. Sep 10 00:50:44.163754 systemd[1]: Finished sysroot-boot.service. Sep 10 00:50:44.163000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:44.766478 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 10 00:50:44.773275 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (816) Sep 10 00:50:44.773302 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Sep 10 00:50:44.773312 kernel: BTRFS info (device vda6): using free space tree Sep 10 00:50:44.774174 kernel: BTRFS info (device vda6): has skinny extents Sep 10 00:50:44.779352 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 10 00:50:44.780508 systemd[1]: Starting ignition-files.service... Sep 10 00:50:44.794958 ignition[836]: INFO : Ignition 2.14.0 Sep 10 00:50:44.794958 ignition[836]: INFO : Stage: files Sep 10 00:50:44.797212 ignition[836]: INFO : no configs at "/usr/lib/ignition/base.d" Sep 10 00:50:44.797212 ignition[836]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 10 00:50:44.797212 ignition[836]: DEBUG : files: compiled without relabeling support, skipping Sep 10 00:50:44.801158 ignition[836]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Sep 10 00:50:44.801158 ignition[836]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Sep 10 00:50:44.801158 ignition[836]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Sep 10 00:50:44.801158 ignition[836]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Sep 10 00:50:44.801158 ignition[836]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Sep 10 00:50:44.801127 unknown[836]: wrote ssh authorized keys file for user: core Sep 10 00:50:44.809133 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Sep 10 00:50:44.809133 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Sep 10 00:50:44.848354 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Sep 10 00:50:45.045741 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Sep 10 00:50:45.045741 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Sep 10 00:50:45.049493 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Sep 10 00:50:45.049493 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Sep 10 00:50:45.049493 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Sep 10 00:50:45.049493 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 10 00:50:45.049493 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 10 00:50:45.049493 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 10 00:50:45.049493 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 10 00:50:45.049493 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Sep 10 00:50:45.049493 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Sep 10 00:50:45.049493 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Sep 10 00:50:45.049493 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Sep 10 00:50:45.049493 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Sep 10 00:50:45.049493 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.31.8-x86-64.raw: attempt #1 Sep 10 00:50:45.240811 systemd-networkd[721]: eth0: Gained IPv6LL Sep 10 00:50:45.351494 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Sep 10 00:50:45.759655 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Sep 10 00:50:45.759655 ignition[836]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Sep 10 00:50:45.763066 ignition[836]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 10 00:50:45.765028 ignition[836]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 10 00:50:45.765028 ignition[836]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Sep 10 00:50:45.765028 ignition[836]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Sep 10 00:50:45.769307 ignition[836]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Sep 10 00:50:45.769307 ignition[836]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Sep 10 00:50:45.769307 ignition[836]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Sep 10 00:50:45.769307 ignition[836]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Sep 10 00:50:45.776063 ignition[836]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Sep 10 00:50:45.776063 ignition[836]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Sep 10 00:50:45.776063 ignition[836]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Sep 10 00:50:45.796834 ignition[836]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Sep 10 00:50:45.798511 ignition[836]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Sep 10 00:50:45.799932 ignition[836]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Sep 10 00:50:45.801594 ignition[836]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Sep 10 00:50:45.801594 ignition[836]: INFO : files: files passed Sep 10 00:50:45.804031 ignition[836]: INFO : Ignition finished successfully Sep 10 00:50:45.805613 systemd[1]: Finished ignition-files.service. Sep 10 00:50:45.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.806905 systemd[1]: Starting initrd-setup-root-after-ignition.service... Sep 10 00:50:45.807963 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Sep 10 00:50:45.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.812000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.808532 systemd[1]: Starting ignition-quench.service... Sep 10 00:50:45.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.816572 initrd-setup-root-after-ignition[862]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Sep 10 00:50:45.810520 systemd[1]: ignition-quench.service: Deactivated successfully. Sep 10 00:50:45.819221 initrd-setup-root-after-ignition[864]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Sep 10 00:50:45.810620 systemd[1]: Finished ignition-quench.service. Sep 10 00:50:45.813235 systemd[1]: Finished initrd-setup-root-after-ignition.service. Sep 10 00:50:45.813965 systemd[1]: Reached target ignition-complete.target. Sep 10 00:50:45.814589 systemd[1]: Starting initrd-parse-etc.service... Sep 10 00:50:45.825669 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Sep 10 00:50:45.825775 systemd[1]: Finished initrd-parse-etc.service. Sep 10 00:50:45.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.826000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.827676 systemd[1]: Reached target initrd-fs.target. Sep 10 00:50:45.829173 systemd[1]: Reached target initrd.target. Sep 10 00:50:45.830017 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Sep 10 00:50:45.830719 systemd[1]: Starting dracut-pre-pivot.service... Sep 10 00:50:45.840234 systemd[1]: Finished dracut-pre-pivot.service. Sep 10 00:50:45.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.841767 systemd[1]: Starting initrd-cleanup.service... Sep 10 00:50:45.848675 systemd[1]: Stopped target nss-lookup.target. Sep 10 00:50:45.849760 systemd[1]: Stopped target remote-cryptsetup.target. Sep 10 00:50:45.851285 systemd[1]: Stopped target timers.target. Sep 10 00:50:45.852833 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Sep 10 00:50:45.853000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.852953 systemd[1]: Stopped dracut-pre-pivot.service. Sep 10 00:50:45.854339 systemd[1]: Stopped target initrd.target. Sep 10 00:50:45.855885 systemd[1]: Stopped target basic.target. Sep 10 00:50:45.857388 systemd[1]: Stopped target ignition-complete.target. Sep 10 00:50:45.858961 systemd[1]: Stopped target ignition-diskful.target. Sep 10 00:50:45.860522 systemd[1]: Stopped target initrd-root-device.target. Sep 10 00:50:45.862178 systemd[1]: Stopped target remote-fs.target. Sep 10 00:50:45.863797 systemd[1]: Stopped target remote-fs-pre.target. Sep 10 00:50:45.865498 systemd[1]: Stopped target sysinit.target. Sep 10 00:50:45.866993 systemd[1]: Stopped target local-fs.target. Sep 10 00:50:45.868562 systemd[1]: Stopped target local-fs-pre.target. Sep 10 00:50:45.870079 systemd[1]: Stopped target swap.target. Sep 10 00:50:45.872000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.871489 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Sep 10 00:50:45.871622 systemd[1]: Stopped dracut-pre-mount.service. Sep 10 00:50:45.875000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.873186 systemd[1]: Stopped target cryptsetup.target. Sep 10 00:50:45.877000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.874521 systemd[1]: dracut-initqueue.service: Deactivated successfully. Sep 10 00:50:45.874622 systemd[1]: Stopped dracut-initqueue.service. Sep 10 00:50:45.876297 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Sep 10 00:50:45.876391 systemd[1]: Stopped ignition-fetch-offline.service. Sep 10 00:50:45.877959 systemd[1]: Stopped target paths.target. Sep 10 00:50:45.879374 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Sep 10 00:50:45.882677 systemd[1]: Stopped systemd-ask-password-console.path. Sep 10 00:50:45.884119 systemd[1]: Stopped target slices.target. Sep 10 00:50:45.885622 systemd[1]: Stopped target sockets.target. Sep 10 00:50:45.887537 systemd[1]: iscsid.socket: Deactivated successfully. Sep 10 00:50:45.924000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.887649 systemd[1]: Closed iscsid.socket. Sep 10 00:50:45.925000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.889187 systemd[1]: iscsiuio.socket: Deactivated successfully. Sep 10 00:50:45.889274 systemd[1]: Closed iscsiuio.socket. Sep 10 00:50:45.923029 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Sep 10 00:50:45.923159 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Sep 10 00:50:45.932000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.924826 systemd[1]: ignition-files.service: Deactivated successfully. Sep 10 00:50:45.934000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.924940 systemd[1]: Stopped ignition-files.service. Sep 10 00:50:45.927437 systemd[1]: Stopping ignition-mount.service... Sep 10 00:50:45.929606 systemd[1]: Stopping sysroot-boot.service... Sep 10 00:50:45.939017 ignition[877]: INFO : Ignition 2.14.0 Sep 10 00:50:45.939017 ignition[877]: INFO : Stage: umount Sep 10 00:50:45.939017 ignition[877]: INFO : no configs at "/usr/lib/ignition/base.d" Sep 10 00:50:45.939017 ignition[877]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 10 00:50:45.939017 ignition[877]: INFO : umount: umount passed Sep 10 00:50:45.939017 ignition[877]: INFO : Ignition finished successfully Sep 10 00:50:45.939000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.939000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.940000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.944000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.945000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.948000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.930389 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Sep 10 00:50:45.930581 systemd[1]: Stopped systemd-udev-trigger.service. Sep 10 00:50:45.932705 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Sep 10 00:50:45.932856 systemd[1]: Stopped dracut-pre-trigger.service. Sep 10 00:50:45.937734 systemd[1]: initrd-cleanup.service: Deactivated successfully. Sep 10 00:50:45.954000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.937828 systemd[1]: Finished initrd-cleanup.service. Sep 10 00:50:45.939309 systemd[1]: ignition-mount.service: Deactivated successfully. Sep 10 00:50:45.939395 systemd[1]: Stopped ignition-mount.service. Sep 10 00:50:45.941389 systemd[1]: Stopped target network.target. Sep 10 00:50:45.960000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.961000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.943092 systemd[1]: ignition-disks.service: Deactivated successfully. Sep 10 00:50:45.962000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.943130 systemd[1]: Stopped ignition-disks.service. Sep 10 00:50:45.945045 systemd[1]: ignition-kargs.service: Deactivated successfully. Sep 10 00:50:45.945074 systemd[1]: Stopped ignition-kargs.service. Sep 10 00:50:45.946518 systemd[1]: ignition-setup.service: Deactivated successfully. Sep 10 00:50:45.966000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.946547 systemd[1]: Stopped ignition-setup.service. Sep 10 00:50:45.948383 systemd[1]: Stopping systemd-networkd.service... Sep 10 00:50:45.950277 systemd[1]: Stopping systemd-resolved.service... Sep 10 00:50:45.951640 systemd-networkd[721]: eth0: DHCPv6 lease lost Sep 10 00:50:45.970000 audit: BPF prog-id=9 op=UNLOAD Sep 10 00:50:45.952513 systemd[1]: sysroot-boot.mount: Deactivated successfully. Sep 10 00:50:45.971000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.972000 audit: BPF prog-id=6 op=UNLOAD Sep 10 00:50:45.952938 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 10 00:50:45.953009 systemd[1]: Stopped systemd-networkd.service. Sep 10 00:50:45.975000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.955816 systemd[1]: systemd-networkd.socket: Deactivated successfully. Sep 10 00:50:45.955841 systemd[1]: Closed systemd-networkd.socket. Sep 10 00:50:45.957873 systemd[1]: Stopping network-cleanup.service... Sep 10 00:50:45.958845 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Sep 10 00:50:45.999000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.958900 systemd[1]: Stopped parse-ip-for-networkd.service. Sep 10 00:50:46.000000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:46.003000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.960436 systemd[1]: systemd-sysctl.service: Deactivated successfully. Sep 10 00:50:45.960467 systemd[1]: Stopped systemd-sysctl.service. Sep 10 00:50:45.961890 systemd[1]: systemd-modules-load.service: Deactivated successfully. Sep 10 00:50:46.005000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:46.008000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.961919 systemd[1]: Stopped systemd-modules-load.service. Sep 10 00:50:46.009000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.962914 systemd[1]: Stopping systemd-udevd.service... Sep 10 00:50:45.966013 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Sep 10 00:50:45.966385 systemd[1]: systemd-resolved.service: Deactivated successfully. Sep 10 00:50:46.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:46.012000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:45.966465 systemd[1]: Stopped systemd-resolved.service. Sep 10 00:50:45.971143 systemd[1]: network-cleanup.service: Deactivated successfully. Sep 10 00:50:45.971228 systemd[1]: Stopped network-cleanup.service. Sep 10 00:50:45.973593 systemd[1]: systemd-udevd.service: Deactivated successfully. Sep 10 00:50:45.973719 systemd[1]: Stopped systemd-udevd.service. Sep 10 00:50:45.976224 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Sep 10 00:50:45.976256 systemd[1]: Closed systemd-udevd-control.socket. Sep 10 00:50:45.977858 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Sep 10 00:50:45.977883 systemd[1]: Closed systemd-udevd-kernel.socket. Sep 10 00:50:45.979375 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Sep 10 00:50:45.979408 systemd[1]: Stopped dracut-pre-udev.service. Sep 10 00:50:45.999901 systemd[1]: dracut-cmdline.service: Deactivated successfully. Sep 10 00:50:45.999934 systemd[1]: Stopped dracut-cmdline.service. Sep 10 00:50:46.001632 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Sep 10 00:50:46.001666 systemd[1]: Stopped dracut-cmdline-ask.service. Sep 10 00:50:46.003884 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Sep 10 00:50:46.004877 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Sep 10 00:50:46.004916 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Sep 10 00:50:46.007449 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Sep 10 00:50:46.007482 systemd[1]: Stopped kmod-static-nodes.service. Sep 10 00:50:46.008317 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Sep 10 00:50:46.008359 systemd[1]: Stopped systemd-vconsole-setup.service. Sep 10 00:50:46.010709 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Sep 10 00:50:46.011117 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Sep 10 00:50:46.011203 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Sep 10 00:50:46.184464 systemd[1]: sysroot-boot.service: Deactivated successfully. Sep 10 00:50:46.184577 systemd[1]: Stopped sysroot-boot.service. Sep 10 00:50:46.185000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:46.186299 systemd[1]: Reached target initrd-switch-root.target. Sep 10 00:50:46.187690 systemd[1]: initrd-setup-root.service: Deactivated successfully. Sep 10 00:50:46.194486 kernel: kauditd_printk_skb: 63 callbacks suppressed Sep 10 00:50:46.194505 kernel: audit: type=1131 audit(1757465446.188:74): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:46.188000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:46.187739 systemd[1]: Stopped initrd-setup-root.service. Sep 10 00:50:46.190171 systemd[1]: Starting initrd-switch-root.service... Sep 10 00:50:46.205143 systemd[1]: Switching root. Sep 10 00:50:46.226118 iscsid[733]: iscsid shutting down. Sep 10 00:50:46.226820 systemd-journald[196]: Received SIGTERM from PID 1 (systemd). Sep 10 00:50:46.226847 systemd-journald[196]: Journal stopped Sep 10 00:50:48.895666 kernel: SELinux: Class mctp_socket not defined in policy. Sep 10 00:50:48.895710 kernel: SELinux: Class anon_inode not defined in policy. Sep 10 00:50:48.895720 kernel: SELinux: the above unknown classes and permissions will be allowed Sep 10 00:50:48.895733 kernel: SELinux: policy capability network_peer_controls=1 Sep 10 00:50:48.895743 kernel: SELinux: policy capability open_perms=1 Sep 10 00:50:48.895753 kernel: SELinux: policy capability extended_socket_class=1 Sep 10 00:50:48.895763 kernel: SELinux: policy capability always_check_network=0 Sep 10 00:50:48.895772 kernel: SELinux: policy capability cgroup_seclabel=1 Sep 10 00:50:48.895783 kernel: SELinux: policy capability nnp_nosuid_transition=1 Sep 10 00:50:48.895792 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Sep 10 00:50:48.895801 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Sep 10 00:50:48.895810 kernel: audit: type=1403 audit(1757465446.288:75): auid=4294967295 ses=4294967295 lsm=selinux res=1 Sep 10 00:50:48.895824 systemd[1]: Successfully loaded SELinux policy in 37.523ms. Sep 10 00:50:48.895841 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.289ms. Sep 10 00:50:48.895852 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 10 00:50:48.895862 systemd[1]: Detected virtualization kvm. Sep 10 00:50:48.895873 systemd[1]: Detected architecture x86-64. Sep 10 00:50:48.895883 systemd[1]: Detected first boot. Sep 10 00:50:48.895893 systemd[1]: Initializing machine ID from VM UUID. Sep 10 00:50:48.895903 kernel: audit: type=1400 audit(1757465446.639:76): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 10 00:50:48.895918 kernel: audit: type=1400 audit(1757465446.639:77): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 10 00:50:48.895927 kernel: audit: type=1334 audit(1757465446.644:78): prog-id=10 op=LOAD Sep 10 00:50:48.895936 kernel: audit: type=1334 audit(1757465446.644:79): prog-id=10 op=UNLOAD Sep 10 00:50:48.895947 kernel: audit: type=1334 audit(1757465446.646:80): prog-id=11 op=LOAD Sep 10 00:50:48.895959 kernel: audit: type=1334 audit(1757465446.646:81): prog-id=11 op=UNLOAD Sep 10 00:50:48.895970 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Sep 10 00:50:48.895981 kernel: audit: type=1400 audit(1757465446.674:82): avc: denied { associate } for pid=910 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 10 00:50:48.895991 kernel: audit: type=1300 audit(1757465446.674:82): arch=c000003e syscall=188 success=yes exit=0 a0=c0001878d2 a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=893 pid=910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:48.896001 systemd[1]: Populated /etc with preset unit settings. Sep 10 00:50:48.896013 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 10 00:50:48.896024 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 10 00:50:48.896036 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 10 00:50:48.896046 systemd[1]: iscsiuio.service: Deactivated successfully. Sep 10 00:50:48.896057 systemd[1]: Stopped iscsiuio.service. Sep 10 00:50:48.896068 systemd[1]: iscsid.service: Deactivated successfully. Sep 10 00:50:48.896078 systemd[1]: Stopped iscsid.service. Sep 10 00:50:48.896088 systemd[1]: initrd-switch-root.service: Deactivated successfully. Sep 10 00:50:48.896098 systemd[1]: Stopped initrd-switch-root.service. Sep 10 00:50:48.896109 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Sep 10 00:50:48.896119 systemd[1]: Created slice system-addon\x2dconfig.slice. Sep 10 00:50:48.896129 systemd[1]: Created slice system-addon\x2drun.slice. Sep 10 00:50:48.896139 systemd[1]: Created slice system-getty.slice. Sep 10 00:50:48.896151 systemd[1]: Created slice system-modprobe.slice. Sep 10 00:50:48.896161 systemd[1]: Created slice system-serial\x2dgetty.slice. Sep 10 00:50:48.896174 systemd[1]: Created slice system-system\x2dcloudinit.slice. Sep 10 00:50:48.896183 systemd[1]: Created slice system-systemd\x2dfsck.slice. Sep 10 00:50:48.896193 systemd[1]: Created slice user.slice. Sep 10 00:50:48.896204 systemd[1]: Started systemd-ask-password-console.path. Sep 10 00:50:48.896213 systemd[1]: Started systemd-ask-password-wall.path. Sep 10 00:50:48.896223 systemd[1]: Set up automount boot.automount. Sep 10 00:50:48.896233 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Sep 10 00:50:48.896251 systemd[1]: Stopped target initrd-switch-root.target. Sep 10 00:50:48.896263 systemd[1]: Stopped target initrd-fs.target. Sep 10 00:50:48.896273 systemd[1]: Stopped target initrd-root-fs.target. Sep 10 00:50:48.896283 systemd[1]: Reached target integritysetup.target. Sep 10 00:50:48.896293 systemd[1]: Reached target remote-cryptsetup.target. Sep 10 00:50:48.896304 systemd[1]: Reached target remote-fs.target. Sep 10 00:50:48.896314 systemd[1]: Reached target slices.target. Sep 10 00:50:48.896324 systemd[1]: Reached target swap.target. Sep 10 00:50:48.896334 systemd[1]: Reached target torcx.target. Sep 10 00:50:48.896345 systemd[1]: Reached target veritysetup.target. Sep 10 00:50:48.896355 systemd[1]: Listening on systemd-coredump.socket. Sep 10 00:50:48.896365 systemd[1]: Listening on systemd-initctl.socket. Sep 10 00:50:48.896375 systemd[1]: Listening on systemd-networkd.socket. Sep 10 00:50:48.896384 systemd[1]: Listening on systemd-udevd-control.socket. Sep 10 00:50:48.896394 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 10 00:50:48.896404 systemd[1]: Listening on systemd-userdbd.socket. Sep 10 00:50:48.896413 systemd[1]: Mounting dev-hugepages.mount... Sep 10 00:50:48.896423 systemd[1]: Mounting dev-mqueue.mount... Sep 10 00:50:48.896433 systemd[1]: Mounting media.mount... Sep 10 00:50:48.896445 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 00:50:48.896454 systemd[1]: Mounting sys-kernel-debug.mount... Sep 10 00:50:48.896464 systemd[1]: Mounting sys-kernel-tracing.mount... Sep 10 00:50:48.896474 systemd[1]: Mounting tmp.mount... Sep 10 00:50:48.896484 systemd[1]: Starting flatcar-tmpfiles.service... Sep 10 00:50:48.896494 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 10 00:50:48.896504 systemd[1]: Starting kmod-static-nodes.service... Sep 10 00:50:48.896514 systemd[1]: Starting modprobe@configfs.service... Sep 10 00:50:48.896525 systemd[1]: Starting modprobe@dm_mod.service... Sep 10 00:50:48.896535 systemd[1]: Starting modprobe@drm.service... Sep 10 00:50:48.896545 systemd[1]: Starting modprobe@efi_pstore.service... Sep 10 00:50:48.896555 systemd[1]: Starting modprobe@fuse.service... Sep 10 00:50:48.896565 systemd[1]: Starting modprobe@loop.service... Sep 10 00:50:48.896575 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Sep 10 00:50:48.896585 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Sep 10 00:50:48.896606 systemd[1]: Stopped systemd-fsck-root.service. Sep 10 00:50:48.896616 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Sep 10 00:50:48.896628 systemd[1]: Stopped systemd-fsck-usr.service. Sep 10 00:50:48.896637 systemd[1]: Stopped systemd-journald.service. Sep 10 00:50:48.896647 kernel: fuse: init (API version 7.34) Sep 10 00:50:48.896656 kernel: loop: module loaded Sep 10 00:50:48.896666 systemd[1]: Starting systemd-journald.service... Sep 10 00:50:48.896675 systemd[1]: Starting systemd-modules-load.service... Sep 10 00:50:48.896685 systemd[1]: Starting systemd-network-generator.service... Sep 10 00:50:48.896696 systemd[1]: Starting systemd-remount-fs.service... Sep 10 00:50:48.896706 systemd[1]: Starting systemd-udev-trigger.service... Sep 10 00:50:48.896715 systemd[1]: verity-setup.service: Deactivated successfully. Sep 10 00:50:48.896727 systemd[1]: Stopped verity-setup.service. Sep 10 00:50:48.896738 systemd-journald[987]: Journal started Sep 10 00:50:48.896772 systemd-journald[987]: Runtime Journal (/run/log/journal/132443f459e64c61941815f9de505e3f) is 6.0M, max 48.4M, 42.4M free. Sep 10 00:50:46.288000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Sep 10 00:50:46.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 10 00:50:46.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 10 00:50:46.644000 audit: BPF prog-id=10 op=LOAD Sep 10 00:50:46.644000 audit: BPF prog-id=10 op=UNLOAD Sep 10 00:50:46.646000 audit: BPF prog-id=11 op=LOAD Sep 10 00:50:46.646000 audit: BPF prog-id=11 op=UNLOAD Sep 10 00:50:46.674000 audit[910]: AVC avc: denied { associate } for pid=910 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 10 00:50:46.674000 audit[910]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001878d2 a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=893 pid=910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:46.674000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 10 00:50:46.676000 audit[910]: AVC avc: denied { associate } for pid=910 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Sep 10 00:50:46.676000 audit[910]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001879a9 a2=1ed a3=0 items=2 ppid=893 pid=910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:46.676000 audit: CWD cwd="/" Sep 10 00:50:46.676000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:46.676000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:46.676000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 10 00:50:48.768000 audit: BPF prog-id=12 op=LOAD Sep 10 00:50:48.768000 audit: BPF prog-id=3 op=UNLOAD Sep 10 00:50:48.768000 audit: BPF prog-id=13 op=LOAD Sep 10 00:50:48.768000 audit: BPF prog-id=14 op=LOAD Sep 10 00:50:48.768000 audit: BPF prog-id=4 op=UNLOAD Sep 10 00:50:48.768000 audit: BPF prog-id=5 op=UNLOAD Sep 10 00:50:48.769000 audit: BPF prog-id=15 op=LOAD Sep 10 00:50:48.769000 audit: BPF prog-id=12 op=UNLOAD Sep 10 00:50:48.769000 audit: BPF prog-id=16 op=LOAD Sep 10 00:50:48.769000 audit: BPF prog-id=17 op=LOAD Sep 10 00:50:48.769000 audit: BPF prog-id=13 op=UNLOAD Sep 10 00:50:48.769000 audit: BPF prog-id=14 op=UNLOAD Sep 10 00:50:48.770000 audit: BPF prog-id=18 op=LOAD Sep 10 00:50:48.770000 audit: BPF prog-id=15 op=UNLOAD Sep 10 00:50:48.770000 audit: BPF prog-id=19 op=LOAD Sep 10 00:50:48.770000 audit: BPF prog-id=20 op=LOAD Sep 10 00:50:48.770000 audit: BPF prog-id=16 op=UNLOAD Sep 10 00:50:48.770000 audit: BPF prog-id=17 op=UNLOAD Sep 10 00:50:48.771000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.774000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.777000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.780000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.780000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.783000 audit: BPF prog-id=18 op=UNLOAD Sep 10 00:50:48.872000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.875000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.877000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.879000 audit: BPF prog-id=21 op=LOAD Sep 10 00:50:48.879000 audit: BPF prog-id=22 op=LOAD Sep 10 00:50:48.879000 audit: BPF prog-id=23 op=LOAD Sep 10 00:50:48.879000 audit: BPF prog-id=19 op=UNLOAD Sep 10 00:50:48.879000 audit: BPF prog-id=20 op=UNLOAD Sep 10 00:50:48.894000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Sep 10 00:50:48.894000 audit[987]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffc55278f50 a2=4000 a3=7ffc55278fec items=0 ppid=1 pid=987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:48.894000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Sep 10 00:50:48.896000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.766982 systemd[1]: Queued start job for default target multi-user.target. Sep 10 00:50:46.673458 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:46Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 10 00:50:48.766993 systemd[1]: Unnecessary job was removed for dev-vda6.device. Sep 10 00:50:46.673705 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:46Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 10 00:50:48.771489 systemd[1]: systemd-journald.service: Deactivated successfully. Sep 10 00:50:46.673722 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:46Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 10 00:50:46.673746 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:46Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Sep 10 00:50:46.673755 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:46Z" level=debug msg="skipped missing lower profile" missing profile=oem Sep 10 00:50:46.673779 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:46Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Sep 10 00:50:46.673790 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:46Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Sep 10 00:50:46.673961 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:46Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Sep 10 00:50:46.673990 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:46Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 10 00:50:46.674002 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:46Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 10 00:50:46.674381 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:46Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Sep 10 00:50:46.674430 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:46Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Sep 10 00:50:46.674486 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:46Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Sep 10 00:50:46.674502 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:46Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Sep 10 00:50:46.674520 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:46Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Sep 10 00:50:46.674533 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:46Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Sep 10 00:50:48.495137 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:48Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 10 00:50:48.899215 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 00:50:48.495384 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:48Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 10 00:50:48.495477 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:48Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 10 00:50:48.495643 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:48Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 10 00:50:48.495688 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:48Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Sep 10 00:50:48.495741 /usr/lib/systemd/system-generators/torcx-generator[910]: time="2025-09-10T00:50:48Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Sep 10 00:50:48.901697 systemd[1]: Started systemd-journald.service. Sep 10 00:50:48.901000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.902670 systemd[1]: Mounted dev-hugepages.mount. Sep 10 00:50:48.903475 systemd[1]: Mounted dev-mqueue.mount. Sep 10 00:50:48.904234 systemd[1]: Mounted media.mount. Sep 10 00:50:48.904944 systemd[1]: Mounted sys-kernel-debug.mount. Sep 10 00:50:48.905816 systemd[1]: Mounted sys-kernel-tracing.mount. Sep 10 00:50:48.906677 systemd[1]: Mounted tmp.mount. Sep 10 00:50:48.907635 systemd[1]: Finished flatcar-tmpfiles.service. Sep 10 00:50:48.907000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.908729 systemd[1]: Finished kmod-static-nodes.service. Sep 10 00:50:48.908000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.909734 systemd[1]: modprobe@configfs.service: Deactivated successfully. Sep 10 00:50:48.909889 systemd[1]: Finished modprobe@configfs.service. Sep 10 00:50:48.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.910000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.910885 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 10 00:50:48.911065 systemd[1]: Finished modprobe@dm_mod.service. Sep 10 00:50:48.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.911000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.912036 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 10 00:50:48.912195 systemd[1]: Finished modprobe@drm.service. Sep 10 00:50:48.912000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.912000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.913135 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 10 00:50:48.913290 systemd[1]: Finished modprobe@efi_pstore.service. Sep 10 00:50:48.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.913000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.914296 systemd[1]: modprobe@fuse.service: Deactivated successfully. Sep 10 00:50:48.914435 systemd[1]: Finished modprobe@fuse.service. Sep 10 00:50:48.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.914000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.915383 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 10 00:50:48.915525 systemd[1]: Finished modprobe@loop.service. Sep 10 00:50:48.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.915000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.916583 systemd[1]: Finished systemd-modules-load.service. Sep 10 00:50:48.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.917700 systemd[1]: Finished systemd-network-generator.service. Sep 10 00:50:48.917000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.918854 systemd[1]: Finished systemd-remount-fs.service. Sep 10 00:50:48.919000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.919998 systemd[1]: Reached target network-pre.target. Sep 10 00:50:48.921693 systemd[1]: Mounting sys-fs-fuse-connections.mount... Sep 10 00:50:48.923363 systemd[1]: Mounting sys-kernel-config.mount... Sep 10 00:50:48.924086 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Sep 10 00:50:48.925533 systemd[1]: Starting systemd-hwdb-update.service... Sep 10 00:50:48.927376 systemd[1]: Starting systemd-journal-flush.service... Sep 10 00:50:48.928276 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 10 00:50:48.929141 systemd[1]: Starting systemd-random-seed.service... Sep 10 00:50:48.929934 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 10 00:50:48.930815 systemd[1]: Starting systemd-sysctl.service... Sep 10 00:50:48.933094 systemd[1]: Starting systemd-sysusers.service... Sep 10 00:50:48.934610 systemd-journald[987]: Time spent on flushing to /var/log/journal/132443f459e64c61941815f9de505e3f is 14.112ms for 1174 entries. Sep 10 00:50:48.934610 systemd-journald[987]: System Journal (/var/log/journal/132443f459e64c61941815f9de505e3f) is 8.0M, max 195.6M, 187.6M free. Sep 10 00:50:49.430521 systemd-journald[987]: Received client request to flush runtime journal. Sep 10 00:50:48.946000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:49.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:49.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:49.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:49.387000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:48.935257 systemd[1]: Mounted sys-fs-fuse-connections.mount. Sep 10 00:50:49.431360 udevadm[1013]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Sep 10 00:50:48.937716 systemd[1]: Mounted sys-kernel-config.mount. Sep 10 00:50:48.946064 systemd[1]: Finished systemd-udev-trigger.service. Sep 10 00:50:48.947831 systemd[1]: Starting systemd-udev-settle.service... Sep 10 00:50:49.047514 systemd[1]: Finished systemd-sysctl.service. Sep 10 00:50:49.052961 systemd[1]: Finished systemd-sysusers.service. Sep 10 00:50:49.054739 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 10 00:50:49.069048 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 10 00:50:49.380406 systemd[1]: Finished systemd-random-seed.service. Sep 10 00:50:49.387404 systemd[1]: Reached target first-boot-complete.target. Sep 10 00:50:49.431655 systemd[1]: Finished systemd-journal-flush.service. Sep 10 00:50:49.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:49.567018 systemd[1]: Finished systemd-hwdb-update.service. Sep 10 00:50:49.568000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:49.568000 audit: BPF prog-id=24 op=LOAD Sep 10 00:50:49.568000 audit: BPF prog-id=25 op=LOAD Sep 10 00:50:49.568000 audit: BPF prog-id=7 op=UNLOAD Sep 10 00:50:49.568000 audit: BPF prog-id=8 op=UNLOAD Sep 10 00:50:49.569414 systemd[1]: Starting systemd-udevd.service... Sep 10 00:50:49.585125 systemd-udevd[1019]: Using default interface naming scheme 'v252'. Sep 10 00:50:49.597525 systemd[1]: Started systemd-udevd.service. Sep 10 00:50:49.597000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:49.599000 audit: BPF prog-id=26 op=LOAD Sep 10 00:50:49.601166 systemd[1]: Starting systemd-networkd.service... Sep 10 00:50:49.606000 audit: BPF prog-id=27 op=LOAD Sep 10 00:50:49.606000 audit: BPF prog-id=28 op=LOAD Sep 10 00:50:49.606000 audit: BPF prog-id=29 op=LOAD Sep 10 00:50:49.607649 systemd[1]: Starting systemd-userdbd.service... Sep 10 00:50:49.625174 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Sep 10 00:50:49.645889 systemd[1]: Started systemd-userdbd.service. Sep 10 00:50:49.646000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:49.652294 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 10 00:50:49.672622 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Sep 10 00:50:49.677620 kernel: ACPI: button: Power Button [PWRF] Sep 10 00:50:49.687364 systemd-networkd[1027]: lo: Link UP Sep 10 00:50:49.687372 systemd-networkd[1027]: lo: Gained carrier Sep 10 00:50:49.687780 systemd-networkd[1027]: Enumeration completed Sep 10 00:50:49.687922 systemd[1]: Started systemd-networkd.service. Sep 10 00:50:49.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:49.689084 systemd-networkd[1027]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 10 00:50:49.690042 systemd-networkd[1027]: eth0: Link UP Sep 10 00:50:49.690049 systemd-networkd[1027]: eth0: Gained carrier Sep 10 00:50:49.693000 audit[1038]: AVC avc: denied { confidentiality } for pid=1038 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Sep 10 00:50:49.693000 audit[1038]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=561e939f0a80 a1=338ec a2=7fefb0adebc5 a3=5 items=110 ppid=1019 pid=1038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:49.693000 audit: CWD cwd="/" Sep 10 00:50:49.693000 audit: PATH item=0 name=(null) inode=51 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=1 name=(null) inode=14702 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=2 name=(null) inode=14702 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=3 name=(null) inode=14703 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=4 name=(null) inode=14702 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=5 name=(null) inode=14704 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=6 name=(null) inode=14702 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=7 name=(null) inode=14705 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=8 name=(null) inode=14705 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=9 name=(null) inode=14706 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=10 name=(null) inode=14705 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=11 name=(null) inode=14707 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=12 name=(null) inode=14705 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=13 name=(null) inode=14708 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=14 name=(null) inode=14705 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=15 name=(null) inode=14709 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=16 name=(null) inode=14705 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=17 name=(null) inode=14710 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=18 name=(null) inode=14702 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=19 name=(null) inode=14711 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=20 name=(null) inode=14711 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=21 name=(null) inode=14712 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=22 name=(null) inode=14711 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=23 name=(null) inode=14713 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=24 name=(null) inode=14711 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=25 name=(null) inode=14714 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=26 name=(null) inode=14711 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=27 name=(null) inode=14715 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=28 name=(null) inode=14711 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=29 name=(null) inode=14716 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=30 name=(null) inode=14702 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=31 name=(null) inode=14717 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=32 name=(null) inode=14717 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=33 name=(null) inode=14718 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=34 name=(null) inode=14717 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=35 name=(null) inode=14719 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=36 name=(null) inode=14717 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=37 name=(null) inode=14720 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=38 name=(null) inode=14717 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=39 name=(null) inode=14721 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=40 name=(null) inode=14717 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=41 name=(null) inode=14722 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=42 name=(null) inode=14702 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=43 name=(null) inode=14723 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=44 name=(null) inode=14723 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=45 name=(null) inode=14724 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=46 name=(null) inode=14723 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=47 name=(null) inode=14725 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=48 name=(null) inode=14723 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=49 name=(null) inode=14726 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=50 name=(null) inode=14723 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=51 name=(null) inode=14727 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=52 name=(null) inode=14723 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=53 name=(null) inode=14728 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=54 name=(null) inode=51 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=55 name=(null) inode=14729 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=56 name=(null) inode=14729 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=57 name=(null) inode=14730 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=58 name=(null) inode=14729 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=59 name=(null) inode=14731 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=60 name=(null) inode=14729 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=61 name=(null) inode=14732 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=62 name=(null) inode=14732 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=63 name=(null) inode=14733 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=64 name=(null) inode=14732 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=65 name=(null) inode=14734 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=66 name=(null) inode=14732 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=67 name=(null) inode=14735 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=68 name=(null) inode=14732 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=69 name=(null) inode=14736 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=70 name=(null) inode=14732 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=71 name=(null) inode=14737 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=72 name=(null) inode=14729 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=73 name=(null) inode=14738 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=74 name=(null) inode=14738 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=75 name=(null) inode=14739 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=76 name=(null) inode=14738 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=77 name=(null) inode=14740 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=78 name=(null) inode=14738 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=79 name=(null) inode=14741 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=80 name=(null) inode=14738 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=81 name=(null) inode=14742 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=82 name=(null) inode=14738 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=83 name=(null) inode=14743 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=84 name=(null) inode=14729 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=85 name=(null) inode=14744 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=86 name=(null) inode=14744 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=87 name=(null) inode=14745 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=88 name=(null) inode=14744 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=89 name=(null) inode=14746 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=90 name=(null) inode=14744 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=91 name=(null) inode=14747 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=92 name=(null) inode=14744 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=93 name=(null) inode=14748 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=94 name=(null) inode=14744 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=95 name=(null) inode=14749 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=96 name=(null) inode=14729 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=97 name=(null) inode=14750 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=98 name=(null) inode=14750 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=99 name=(null) inode=14751 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=100 name=(null) inode=14750 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=101 name=(null) inode=14752 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=102 name=(null) inode=14750 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=103 name=(null) inode=14753 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=104 name=(null) inode=14750 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=105 name=(null) inode=14754 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=106 name=(null) inode=14750 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=107 name=(null) inode=14755 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PATH item=109 name=(null) inode=14756 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:50:49.693000 audit: PROCTITLE proctitle="(udev-worker)" Sep 10 00:50:49.702859 kernel: i801_smbus 0000:00:1f.3: Enabling SMBus device Sep 10 00:50:49.706289 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Sep 10 00:50:49.706530 kernel: i2c i2c-0: 1/1 memory slots populated (from DMI) Sep 10 00:50:49.706706 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Sep 10 00:50:49.706792 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Sep 10 00:50:49.708234 systemd-networkd[1027]: eth0: DHCPv4 address 10.0.0.141/16, gateway 10.0.0.1 acquired from 10.0.0.1 Sep 10 00:50:49.730624 kernel: mousedev: PS/2 mouse device common for all mice Sep 10 00:50:49.773322 kernel: kvm: Nested Virtualization enabled Sep 10 00:50:49.773421 kernel: SVM: kvm: Nested Paging enabled Sep 10 00:50:49.773443 kernel: SVM: Virtual VMLOAD VMSAVE supported Sep 10 00:50:49.773461 kernel: SVM: Virtual GIF supported Sep 10 00:50:49.787646 kernel: EDAC MC: Ver: 3.0.0 Sep 10 00:50:49.814910 systemd[1]: Finished systemd-udev-settle.service. Sep 10 00:50:49.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:49.869790 systemd[1]: Starting lvm2-activation-early.service... Sep 10 00:50:49.876679 lvm[1055]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 10 00:50:49.906731 systemd[1]: Finished lvm2-activation-early.service. Sep 10 00:50:49.907000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:49.907772 systemd[1]: Reached target cryptsetup.target. Sep 10 00:50:49.909532 systemd[1]: Starting lvm2-activation.service... Sep 10 00:50:49.912799 lvm[1056]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 10 00:50:49.940196 systemd[1]: Finished lvm2-activation.service. Sep 10 00:50:49.940000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:49.941179 systemd[1]: Reached target local-fs-pre.target. Sep 10 00:50:49.942074 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Sep 10 00:50:49.942091 systemd[1]: Reached target local-fs.target. Sep 10 00:50:49.942939 systemd[1]: Reached target machines.target. Sep 10 00:50:49.944647 systemd[1]: Starting ldconfig.service... Sep 10 00:50:49.945656 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 10 00:50:49.945695 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 10 00:50:49.946437 systemd[1]: Starting systemd-boot-update.service... Sep 10 00:50:49.948236 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Sep 10 00:50:49.950322 systemd[1]: Starting systemd-machine-id-commit.service... Sep 10 00:50:49.954724 systemd[1]: Starting systemd-sysext.service... Sep 10 00:50:49.955902 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1058 (bootctl) Sep 10 00:50:49.957061 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Sep 10 00:50:49.961893 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Sep 10 00:50:49.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:49.966461 systemd[1]: Unmounting usr-share-oem.mount... Sep 10 00:50:49.969928 systemd[1]: usr-share-oem.mount: Deactivated successfully. Sep 10 00:50:49.970109 systemd[1]: Unmounted usr-share-oem.mount. Sep 10 00:50:49.981620 kernel: loop0: detected capacity change from 0 to 221472 Sep 10 00:50:49.996347 systemd-fsck[1065]: fsck.fat 4.2 (2021-01-31) Sep 10 00:50:49.996347 systemd-fsck[1065]: /dev/vda1: 791 files, 120785/258078 clusters Sep 10 00:50:49.997788 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Sep 10 00:50:50.055000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:50.057243 systemd[1]: Mounting boot.mount... Sep 10 00:50:50.074914 systemd[1]: Mounted boot.mount. Sep 10 00:50:50.086401 systemd[1]: Finished systemd-boot-update.service. Sep 10 00:50:50.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:50.717940 ldconfig[1057]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Sep 10 00:50:50.719624 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Sep 10 00:50:50.724356 systemd[1]: Finished ldconfig.service. Sep 10 00:50:50.725000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:50.733629 kernel: loop1: detected capacity change from 0 to 221472 Sep 10 00:50:50.772887 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Sep 10 00:50:50.773545 systemd[1]: Finished systemd-machine-id-commit.service. Sep 10 00:50:50.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:50.774978 (sd-sysext)[1071]: Using extensions 'kubernetes'. Sep 10 00:50:50.775302 (sd-sysext)[1071]: Merged extensions into '/usr'. Sep 10 00:50:50.789465 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 00:50:50.790628 systemd[1]: Mounting usr-share-oem.mount... Sep 10 00:50:50.791717 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 10 00:50:50.792888 systemd[1]: Starting modprobe@dm_mod.service... Sep 10 00:50:50.794718 systemd[1]: Starting modprobe@efi_pstore.service... Sep 10 00:50:50.796299 systemd[1]: Starting modprobe@loop.service... Sep 10 00:50:50.797259 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 10 00:50:50.797366 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 10 00:50:50.797463 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 00:50:50.799739 systemd[1]: Mounted usr-share-oem.mount. Sep 10 00:50:50.800785 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 10 00:50:50.800883 systemd[1]: Finished modprobe@dm_mod.service. Sep 10 00:50:50.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:50.801000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:50.802003 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 10 00:50:50.802090 systemd[1]: Finished modprobe@efi_pstore.service. Sep 10 00:50:50.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:50.802000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:50.803245 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 10 00:50:50.803329 systemd[1]: Finished modprobe@loop.service. Sep 10 00:50:50.804000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:50.804000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:50.804438 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 10 00:50:50.804522 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 10 00:50:50.805293 systemd[1]: Finished systemd-sysext.service. Sep 10 00:50:50.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:50.807020 systemd[1]: Starting ensure-sysext.service... Sep 10 00:50:50.808860 systemd[1]: Starting systemd-tmpfiles-setup.service... Sep 10 00:50:50.812563 systemd[1]: Reloading. Sep 10 00:50:50.816731 systemd-tmpfiles[1078]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Sep 10 00:50:50.817594 systemd-tmpfiles[1078]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Sep 10 00:50:50.818903 systemd-tmpfiles[1078]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Sep 10 00:50:50.868914 /usr/lib/systemd/system-generators/torcx-generator[1097]: time="2025-09-10T00:50:50Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 10 00:50:50.868945 /usr/lib/systemd/system-generators/torcx-generator[1097]: time="2025-09-10T00:50:50Z" level=info msg="torcx already run" Sep 10 00:50:50.921349 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 10 00:50:50.921366 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 10 00:50:50.938102 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 10 00:50:50.987000 audit: BPF prog-id=30 op=LOAD Sep 10 00:50:50.987000 audit: BPF prog-id=21 op=UNLOAD Sep 10 00:50:50.987000 audit: BPF prog-id=31 op=LOAD Sep 10 00:50:50.987000 audit: BPF prog-id=32 op=LOAD Sep 10 00:50:50.987000 audit: BPF prog-id=22 op=UNLOAD Sep 10 00:50:50.987000 audit: BPF prog-id=23 op=UNLOAD Sep 10 00:50:50.988000 audit: BPF prog-id=33 op=LOAD Sep 10 00:50:50.988000 audit: BPF prog-id=26 op=UNLOAD Sep 10 00:50:50.988000 audit: BPF prog-id=34 op=LOAD Sep 10 00:50:50.988000 audit: BPF prog-id=35 op=LOAD Sep 10 00:50:50.988000 audit: BPF prog-id=24 op=UNLOAD Sep 10 00:50:50.988000 audit: BPF prog-id=25 op=UNLOAD Sep 10 00:50:50.989000 audit: BPF prog-id=36 op=LOAD Sep 10 00:50:50.989000 audit: BPF prog-id=27 op=UNLOAD Sep 10 00:50:50.989000 audit: BPF prog-id=37 op=LOAD Sep 10 00:50:50.990000 audit: BPF prog-id=38 op=LOAD Sep 10 00:50:50.990000 audit: BPF prog-id=28 op=UNLOAD Sep 10 00:50:50.990000 audit: BPF prog-id=29 op=UNLOAD Sep 10 00:50:50.994512 systemd[1]: Finished systemd-tmpfiles-setup.service. Sep 10 00:50:50.994000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:50.997744 systemd[1]: Starting audit-rules.service... Sep 10 00:50:50.999968 systemd[1]: Starting clean-ca-certificates.service... Sep 10 00:50:51.003000 audit: BPF prog-id=39 op=LOAD Sep 10 00:50:51.002010 systemd[1]: Starting systemd-journal-catalog-update.service... Sep 10 00:50:51.006000 audit: BPF prog-id=40 op=LOAD Sep 10 00:50:51.004942 systemd[1]: Starting systemd-resolved.service... Sep 10 00:50:51.007387 systemd[1]: Starting systemd-timesyncd.service... Sep 10 00:50:51.009537 systemd[1]: Starting systemd-update-utmp.service... Sep 10 00:50:51.011112 systemd[1]: Finished clean-ca-certificates.service. Sep 10 00:50:51.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:51.013000 audit[1151]: SYSTEM_BOOT pid=1151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Sep 10 00:50:51.020571 systemd[1]: Finished systemd-journal-catalog-update.service. Sep 10 00:50:51.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:51.022326 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 00:50:51.022683 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 10 00:50:51.024234 systemd[1]: Starting modprobe@dm_mod.service... Sep 10 00:50:51.023000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Sep 10 00:50:51.024717 augenrules[1160]: No rules Sep 10 00:50:51.023000 audit[1160]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc37cfc110 a2=420 a3=0 items=0 ppid=1140 pid=1160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:51.023000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Sep 10 00:50:51.026375 systemd[1]: Starting modprobe@efi_pstore.service... Sep 10 00:50:51.028345 systemd[1]: Starting modprobe@loop.service... Sep 10 00:50:51.029336 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 10 00:50:51.029503 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 10 00:50:51.030688 systemd[1]: Starting systemd-update-done.service... Sep 10 00:50:51.031754 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 10 00:50:51.031871 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 00:50:51.033309 systemd[1]: Finished audit-rules.service. Sep 10 00:50:51.034888 systemd[1]: Finished systemd-update-utmp.service. Sep 10 00:50:51.036435 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 10 00:50:51.036566 systemd[1]: Finished modprobe@dm_mod.service. Sep 10 00:50:51.037835 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 10 00:50:51.037965 systemd[1]: Finished modprobe@efi_pstore.service. Sep 10 00:50:51.039310 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 10 00:50:51.039448 systemd[1]: Finished modprobe@loop.service. Sep 10 00:50:51.040705 systemd[1]: Finished systemd-update-done.service. Sep 10 00:50:51.043944 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 00:50:51.044157 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 10 00:50:51.045330 systemd[1]: Starting modprobe@dm_mod.service... Sep 10 00:50:51.047327 systemd[1]: Starting modprobe@efi_pstore.service... Sep 10 00:50:51.049321 systemd[1]: Starting modprobe@loop.service... Sep 10 00:50:51.050336 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 10 00:50:51.050492 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 10 00:50:51.050703 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 10 00:50:51.050824 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 00:50:51.051881 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 10 00:50:51.052042 systemd[1]: Finished modprobe@dm_mod.service. Sep 10 00:50:51.053683 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 10 00:50:51.053862 systemd[1]: Finished modprobe@efi_pstore.service. Sep 10 00:50:51.055288 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 10 00:50:51.055452 systemd[1]: Finished modprobe@loop.service. Sep 10 00:50:51.059583 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 00:50:51.059942 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 10 00:50:51.061100 systemd[1]: Starting modprobe@dm_mod.service... Sep 10 00:50:51.063202 systemd[1]: Starting modprobe@drm.service... Sep 10 00:50:51.065334 systemd[1]: Starting modprobe@efi_pstore.service... Sep 10 00:50:51.065521 systemd-resolved[1146]: Positive Trust Anchors: Sep 10 00:50:51.065752 systemd-resolved[1146]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 10 00:50:51.065838 systemd-resolved[1146]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 10 00:50:51.067335 systemd[1]: Starting modprobe@loop.service... Sep 10 00:50:51.068465 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 10 00:50:51.068570 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 10 00:50:51.069325 systemd-timesyncd[1149]: Contacted time server 10.0.0.1:123 (10.0.0.1). Sep 10 00:50:51.069374 systemd-timesyncd[1149]: Initial clock synchronization to Wed 2025-09-10 00:50:51.362748 UTC. Sep 10 00:50:51.069747 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 10 00:50:51.071076 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 10 00:50:51.071238 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 00:50:51.072536 systemd[1]: Started systemd-timesyncd.service. Sep 10 00:50:51.073717 systemd-resolved[1146]: Defaulting to hostname 'linux'. Sep 10 00:50:51.074589 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 10 00:50:51.074761 systemd[1]: Finished modprobe@dm_mod.service. Sep 10 00:50:51.075895 systemd[1]: Started systemd-resolved.service. Sep 10 00:50:51.076997 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 10 00:50:51.077089 systemd[1]: Finished modprobe@drm.service. Sep 10 00:50:51.078161 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 10 00:50:51.078265 systemd[1]: Finished modprobe@efi_pstore.service. Sep 10 00:50:51.079423 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 10 00:50:51.079514 systemd[1]: Finished modprobe@loop.service. Sep 10 00:50:51.080770 systemd[1]: Reached target network.target. Sep 10 00:50:51.081581 systemd[1]: Reached target nss-lookup.target. Sep 10 00:50:51.082401 systemd[1]: Reached target time-set.target. Sep 10 00:50:51.083295 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 10 00:50:51.083317 systemd[1]: Reached target sysinit.target. Sep 10 00:50:51.084132 systemd[1]: Started motdgen.path. Sep 10 00:50:51.084947 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Sep 10 00:50:51.086381 systemd[1]: Started logrotate.timer. Sep 10 00:50:51.087303 systemd[1]: Started mdadm.timer. Sep 10 00:50:51.087999 systemd[1]: Started systemd-tmpfiles-clean.timer. Sep 10 00:50:51.088853 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Sep 10 00:50:51.088876 systemd[1]: Reached target paths.target. Sep 10 00:50:51.089631 systemd[1]: Reached target timers.target. Sep 10 00:50:51.090650 systemd[1]: Listening on dbus.socket. Sep 10 00:50:51.092175 systemd[1]: Starting docker.socket... Sep 10 00:50:51.095136 systemd[1]: Listening on sshd.socket. Sep 10 00:50:51.095973 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 10 00:50:51.096010 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 10 00:50:51.096493 systemd[1]: Finished ensure-sysext.service. Sep 10 00:50:51.097405 systemd[1]: Listening on docker.socket. Sep 10 00:50:51.098920 systemd[1]: Reached target sockets.target. Sep 10 00:50:51.099770 systemd[1]: Reached target basic.target. Sep 10 00:50:51.100672 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 10 00:50:51.100695 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 10 00:50:51.101465 systemd[1]: Starting containerd.service... Sep 10 00:50:51.102882 systemd[1]: Starting dbus.service... Sep 10 00:50:51.104793 systemd[1]: Starting enable-oem-cloudinit.service... Sep 10 00:50:51.106521 systemd[1]: Starting extend-filesystems.service... Sep 10 00:50:51.107557 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Sep 10 00:50:51.109577 jq[1182]: false Sep 10 00:50:51.108413 systemd[1]: Starting motdgen.service... Sep 10 00:50:51.110087 systemd[1]: Starting prepare-helm.service... Sep 10 00:50:51.111663 systemd[1]: Starting ssh-key-proc-cmdline.service... Sep 10 00:50:51.113609 systemd[1]: Starting sshd-keygen.service... Sep 10 00:50:51.116288 systemd[1]: Starting systemd-logind.service... Sep 10 00:50:51.117145 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 10 00:50:51.117205 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Sep 10 00:50:51.117516 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Sep 10 00:50:51.118040 systemd[1]: Starting update-engine.service... Sep 10 00:50:51.119921 systemd[1]: Starting update-ssh-keys-after-ignition.service... Sep 10 00:50:51.123048 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Sep 10 00:50:51.123222 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Sep 10 00:50:51.124078 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Sep 10 00:50:51.124242 systemd[1]: Finished ssh-key-proc-cmdline.service. Sep 10 00:50:51.127164 extend-filesystems[1183]: Found loop1 Sep 10 00:50:51.127164 extend-filesystems[1183]: Found sr0 Sep 10 00:50:51.127164 extend-filesystems[1183]: Found vda Sep 10 00:50:51.130501 extend-filesystems[1183]: Found vda1 Sep 10 00:50:51.130501 extend-filesystems[1183]: Found vda2 Sep 10 00:50:51.130501 extend-filesystems[1183]: Found vda3 Sep 10 00:50:51.130501 extend-filesystems[1183]: Found usr Sep 10 00:50:51.130501 extend-filesystems[1183]: Found vda4 Sep 10 00:50:51.130501 extend-filesystems[1183]: Found vda6 Sep 10 00:50:51.130501 extend-filesystems[1183]: Found vda7 Sep 10 00:50:51.130501 extend-filesystems[1183]: Found vda9 Sep 10 00:50:51.130501 extend-filesystems[1183]: Checking size of /dev/vda9 Sep 10 00:50:51.146904 jq[1199]: true Sep 10 00:50:51.140896 dbus-daemon[1181]: [system] SELinux support is enabled Sep 10 00:50:51.141455 systemd[1]: Started dbus.service. Sep 10 00:50:51.147274 tar[1201]: linux-amd64/helm Sep 10 00:50:51.147488 jq[1207]: true Sep 10 00:50:51.147701 systemd[1]: motdgen.service: Deactivated successfully. Sep 10 00:50:51.147834 systemd[1]: Finished motdgen.service. Sep 10 00:50:51.149949 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Sep 10 00:50:51.149975 systemd[1]: Reached target system-config.target. Sep 10 00:50:51.150907 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Sep 10 00:50:51.150920 systemd[1]: Reached target user-config.target. Sep 10 00:50:51.155654 extend-filesystems[1183]: Resized partition /dev/vda9 Sep 10 00:50:51.157728 extend-filesystems[1221]: resize2fs 1.46.5 (30-Dec-2021) Sep 10 00:50:51.173708 update_engine[1195]: I0910 00:50:51.173506 1195 main.cc:92] Flatcar Update Engine starting Sep 10 00:50:51.175459 update_engine[1195]: I0910 00:50:51.175436 1195 update_check_scheduler.cc:74] Next update check in 5m20s Sep 10 00:50:51.175676 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Sep 10 00:50:51.175716 systemd[1]: Started update-engine.service. Sep 10 00:50:51.178087 systemd[1]: Started locksmithd.service. Sep 10 00:50:51.179401 env[1206]: time="2025-09-10T00:50:51.179347001Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Sep 10 00:50:51.185197 systemd-logind[1191]: Watching system buttons on /dev/input/event1 (Power Button) Sep 10 00:50:51.185221 systemd-logind[1191]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Sep 10 00:50:51.185509 systemd-logind[1191]: New seat seat0. Sep 10 00:50:51.187089 systemd[1]: Started systemd-logind.service. Sep 10 00:50:51.202613 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Sep 10 00:50:51.204838 env[1206]: time="2025-09-10T00:50:51.204788893Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Sep 10 00:50:51.227576 extend-filesystems[1221]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Sep 10 00:50:51.227576 extend-filesystems[1221]: old_desc_blocks = 1, new_desc_blocks = 1 Sep 10 00:50:51.227576 extend-filesystems[1221]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Sep 10 00:50:51.239710 env[1206]: time="2025-09-10T00:50:51.228251664Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Sep 10 00:50:51.239710 env[1206]: time="2025-09-10T00:50:51.236321789Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.191-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Sep 10 00:50:51.239710 env[1206]: time="2025-09-10T00:50:51.236361143Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Sep 10 00:50:51.239710 env[1206]: time="2025-09-10T00:50:51.236624707Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 10 00:50:51.239710 env[1206]: time="2025-09-10T00:50:51.236639935Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Sep 10 00:50:51.239710 env[1206]: time="2025-09-10T00:50:51.236650826Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Sep 10 00:50:51.239710 env[1206]: time="2025-09-10T00:50:51.236659662Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Sep 10 00:50:51.239710 env[1206]: time="2025-09-10T00:50:51.237019627Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Sep 10 00:50:51.239710 env[1206]: time="2025-09-10T00:50:51.237234360Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Sep 10 00:50:51.239710 env[1206]: time="2025-09-10T00:50:51.237346691Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 10 00:50:51.239916 bash[1232]: Updated "/home/core/.ssh/authorized_keys" Sep 10 00:50:51.239987 extend-filesystems[1183]: Resized filesystem in /dev/vda9 Sep 10 00:50:51.228972 systemd[1]: extend-filesystems.service: Deactivated successfully. Sep 10 00:50:51.240519 env[1206]: time="2025-09-10T00:50:51.237359515Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Sep 10 00:50:51.240519 env[1206]: time="2025-09-10T00:50:51.237399470Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Sep 10 00:50:51.240519 env[1206]: time="2025-09-10T00:50:51.237409759Z" level=info msg="metadata content store policy set" policy=shared Sep 10 00:50:51.229114 systemd[1]: Finished extend-filesystems.service. Sep 10 00:50:51.240073 systemd[1]: Finished update-ssh-keys-after-ignition.service. Sep 10 00:50:51.245007 locksmithd[1233]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Sep 10 00:50:51.245312 env[1206]: time="2025-09-10T00:50:51.245269910Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Sep 10 00:50:51.245312 env[1206]: time="2025-09-10T00:50:51.245311888Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Sep 10 00:50:51.245388 env[1206]: time="2025-09-10T00:50:51.245326085Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Sep 10 00:50:51.245388 env[1206]: time="2025-09-10T00:50:51.245359888Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Sep 10 00:50:51.245388 env[1206]: time="2025-09-10T00:50:51.245376019Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Sep 10 00:50:51.245462 env[1206]: time="2025-09-10T00:50:51.245391608Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Sep 10 00:50:51.245462 env[1206]: time="2025-09-10T00:50:51.245406676Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Sep 10 00:50:51.245462 env[1206]: time="2025-09-10T00:50:51.245422376Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Sep 10 00:50:51.245462 env[1206]: time="2025-09-10T00:50:51.245436783Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Sep 10 00:50:51.245462 env[1206]: time="2025-09-10T00:50:51.245450969Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Sep 10 00:50:51.245563 env[1206]: time="2025-09-10T00:50:51.245465056Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Sep 10 00:50:51.245563 env[1206]: time="2025-09-10T00:50:51.245480424Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Sep 10 00:50:51.245614 env[1206]: time="2025-09-10T00:50:51.245578158Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Sep 10 00:50:51.245688 env[1206]: time="2025-09-10T00:50:51.245658558Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Sep 10 00:50:51.245879 env[1206]: time="2025-09-10T00:50:51.245865386Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Sep 10 00:50:51.245927 env[1206]: time="2025-09-10T00:50:51.245887468Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Sep 10 00:50:51.245927 env[1206]: time="2025-09-10T00:50:51.245901043Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Sep 10 00:50:51.245969 env[1206]: time="2025-09-10T00:50:51.245941699Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Sep 10 00:50:51.245969 env[1206]: time="2025-09-10T00:50:51.245953191Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Sep 10 00:50:51.245969 env[1206]: time="2025-09-10T00:50:51.245963871Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Sep 10 00:50:51.246024 env[1206]: time="2025-09-10T00:50:51.245973319Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Sep 10 00:50:51.246024 env[1206]: time="2025-09-10T00:50:51.245984059Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Sep 10 00:50:51.246024 env[1206]: time="2025-09-10T00:50:51.245995400Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Sep 10 00:50:51.246024 env[1206]: time="2025-09-10T00:50:51.246005319Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Sep 10 00:50:51.246024 env[1206]: time="2025-09-10T00:50:51.246014807Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Sep 10 00:50:51.246124 env[1206]: time="2025-09-10T00:50:51.246026068Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Sep 10 00:50:51.246147 env[1206]: time="2025-09-10T00:50:51.246123971Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Sep 10 00:50:51.246147 env[1206]: time="2025-09-10T00:50:51.246136865Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Sep 10 00:50:51.246203 env[1206]: time="2025-09-10T00:50:51.246149269Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Sep 10 00:50:51.246203 env[1206]: time="2025-09-10T00:50:51.246159678Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Sep 10 00:50:51.246203 env[1206]: time="2025-09-10T00:50:51.246185467Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Sep 10 00:50:51.246203 env[1206]: time="2025-09-10T00:50:51.246195666Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Sep 10 00:50:51.246296 env[1206]: time="2025-09-10T00:50:51.246213680Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Sep 10 00:50:51.246296 env[1206]: time="2025-09-10T00:50:51.246245068Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Sep 10 00:50:51.246463 env[1206]: time="2025-09-10T00:50:51.246410589Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Sep 10 00:50:51.247847 env[1206]: time="2025-09-10T00:50:51.246462937Z" level=info msg="Connect containerd service" Sep 10 00:50:51.247847 env[1206]: time="2025-09-10T00:50:51.246494546Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Sep 10 00:50:51.247847 env[1206]: time="2025-09-10T00:50:51.246958216Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 10 00:50:51.247847 env[1206]: time="2025-09-10T00:50:51.247204979Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Sep 10 00:50:51.247847 env[1206]: time="2025-09-10T00:50:51.247186143Z" level=info msg="Start subscribing containerd event" Sep 10 00:50:51.247847 env[1206]: time="2025-09-10T00:50:51.247235015Z" level=info msg=serving... address=/run/containerd/containerd.sock Sep 10 00:50:51.247847 env[1206]: time="2025-09-10T00:50:51.247242870Z" level=info msg="Start recovering state" Sep 10 00:50:51.247847 env[1206]: time="2025-09-10T00:50:51.247298484Z" level=info msg="Start event monitor" Sep 10 00:50:51.247847 env[1206]: time="2025-09-10T00:50:51.247309855Z" level=info msg="Start snapshots syncer" Sep 10 00:50:51.247847 env[1206]: time="2025-09-10T00:50:51.247319644Z" level=info msg="Start cni network conf syncer for default" Sep 10 00:50:51.247847 env[1206]: time="2025-09-10T00:50:51.247327659Z" level=info msg="Start streaming server" Sep 10 00:50:51.247847 env[1206]: time="2025-09-10T00:50:51.247573430Z" level=info msg="containerd successfully booted in 0.068818s" Sep 10 00:50:51.247314 systemd[1]: Started containerd.service. Sep 10 00:50:51.320803 systemd-networkd[1027]: eth0: Gained IPv6LL Sep 10 00:50:51.322660 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 10 00:50:51.324186 systemd[1]: Reached target network-online.target. Sep 10 00:50:51.326925 systemd[1]: Starting kubelet.service... Sep 10 00:50:51.563334 tar[1201]: linux-amd64/LICENSE Sep 10 00:50:51.563562 tar[1201]: linux-amd64/README.md Sep 10 00:50:51.568004 systemd[1]: Finished prepare-helm.service. Sep 10 00:50:51.978263 systemd[1]: Started kubelet.service. Sep 10 00:50:52.284300 sshd_keygen[1204]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Sep 10 00:50:52.303503 systemd[1]: Finished sshd-keygen.service. Sep 10 00:50:52.306302 systemd[1]: Starting issuegen.service... Sep 10 00:50:52.313022 systemd[1]: issuegen.service: Deactivated successfully. Sep 10 00:50:52.313200 systemd[1]: Finished issuegen.service. Sep 10 00:50:52.315472 systemd[1]: Starting systemd-user-sessions.service... Sep 10 00:50:52.322838 systemd[1]: Finished systemd-user-sessions.service. Sep 10 00:50:52.324930 systemd[1]: Started getty@tty1.service. Sep 10 00:50:52.326707 systemd[1]: Started serial-getty@ttyS0.service. Sep 10 00:50:52.327705 systemd[1]: Reached target getty.target. Sep 10 00:50:52.328542 systemd[1]: Reached target multi-user.target. Sep 10 00:50:52.330294 systemd[1]: Starting systemd-update-utmp-runlevel.service... Sep 10 00:50:52.336408 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Sep 10 00:50:52.336527 systemd[1]: Finished systemd-update-utmp-runlevel.service. Sep 10 00:50:52.337632 systemd[1]: Startup finished in 637ms (kernel) + 4.532s (initrd) + 6.088s (userspace) = 11.258s. Sep 10 00:50:52.417451 kubelet[1251]: E0910 00:50:52.417403 1251 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 10 00:50:52.419155 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 10 00:50:52.419276 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 10 00:50:54.516803 systemd[1]: Created slice system-sshd.slice. Sep 10 00:50:54.517762 systemd[1]: Started sshd@0-10.0.0.141:22-10.0.0.1:53752.service. Sep 10 00:50:54.552017 sshd[1273]: Accepted publickey for core from 10.0.0.1 port 53752 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:50:54.553350 sshd[1273]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:50:54.562058 systemd-logind[1191]: New session 1 of user core. Sep 10 00:50:54.563097 systemd[1]: Created slice user-500.slice. Sep 10 00:50:54.564124 systemd[1]: Starting user-runtime-dir@500.service... Sep 10 00:50:54.571518 systemd[1]: Finished user-runtime-dir@500.service. Sep 10 00:50:54.572878 systemd[1]: Starting user@500.service... Sep 10 00:50:54.575562 (systemd)[1276]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:50:54.642725 systemd[1276]: Queued start job for default target default.target. Sep 10 00:50:54.643148 systemd[1276]: Reached target paths.target. Sep 10 00:50:54.643185 systemd[1276]: Reached target sockets.target. Sep 10 00:50:54.643201 systemd[1276]: Reached target timers.target. Sep 10 00:50:54.643215 systemd[1276]: Reached target basic.target. Sep 10 00:50:54.643296 systemd[1276]: Reached target default.target. Sep 10 00:50:54.643327 systemd[1276]: Startup finished in 62ms. Sep 10 00:50:54.643397 systemd[1]: Started user@500.service. Sep 10 00:50:54.644381 systemd[1]: Started session-1.scope. Sep 10 00:50:54.696253 systemd[1]: Started sshd@1-10.0.0.141:22-10.0.0.1:53762.service. Sep 10 00:50:54.731229 sshd[1285]: Accepted publickey for core from 10.0.0.1 port 53762 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:50:54.732466 sshd[1285]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:50:54.736045 systemd-logind[1191]: New session 2 of user core. Sep 10 00:50:54.737206 systemd[1]: Started session-2.scope. Sep 10 00:50:54.792556 sshd[1285]: pam_unix(sshd:session): session closed for user core Sep 10 00:50:54.795530 systemd[1]: sshd@1-10.0.0.141:22-10.0.0.1:53762.service: Deactivated successfully. Sep 10 00:50:54.796040 systemd[1]: session-2.scope: Deactivated successfully. Sep 10 00:50:54.796501 systemd-logind[1191]: Session 2 logged out. Waiting for processes to exit. Sep 10 00:50:54.797492 systemd[1]: Started sshd@2-10.0.0.141:22-10.0.0.1:53768.service. Sep 10 00:50:54.798551 systemd-logind[1191]: Removed session 2. Sep 10 00:50:54.831413 sshd[1291]: Accepted publickey for core from 10.0.0.1 port 53768 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:50:54.832494 sshd[1291]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:50:54.836581 systemd-logind[1191]: New session 3 of user core. Sep 10 00:50:54.837583 systemd[1]: Started session-3.scope. Sep 10 00:50:54.888397 sshd[1291]: pam_unix(sshd:session): session closed for user core Sep 10 00:50:54.891237 systemd[1]: sshd@2-10.0.0.141:22-10.0.0.1:53768.service: Deactivated successfully. Sep 10 00:50:54.891791 systemd[1]: session-3.scope: Deactivated successfully. Sep 10 00:50:54.892338 systemd-logind[1191]: Session 3 logged out. Waiting for processes to exit. Sep 10 00:50:54.893347 systemd[1]: Started sshd@3-10.0.0.141:22-10.0.0.1:53780.service. Sep 10 00:50:54.893888 systemd-logind[1191]: Removed session 3. Sep 10 00:50:54.927701 sshd[1297]: Accepted publickey for core from 10.0.0.1 port 53780 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:50:54.929191 sshd[1297]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:50:54.933199 systemd-logind[1191]: New session 4 of user core. Sep 10 00:50:54.934304 systemd[1]: Started session-4.scope. Sep 10 00:50:54.989716 sshd[1297]: pam_unix(sshd:session): session closed for user core Sep 10 00:50:54.993300 systemd[1]: sshd@3-10.0.0.141:22-10.0.0.1:53780.service: Deactivated successfully. Sep 10 00:50:54.993849 systemd[1]: session-4.scope: Deactivated successfully. Sep 10 00:50:54.994403 systemd-logind[1191]: Session 4 logged out. Waiting for processes to exit. Sep 10 00:50:54.995353 systemd[1]: Started sshd@4-10.0.0.141:22-10.0.0.1:53782.service. Sep 10 00:50:54.996142 systemd-logind[1191]: Removed session 4. Sep 10 00:50:55.027958 sshd[1303]: Accepted publickey for core from 10.0.0.1 port 53782 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:50:55.029036 sshd[1303]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:50:55.032416 systemd-logind[1191]: New session 5 of user core. Sep 10 00:50:55.033265 systemd[1]: Started session-5.scope. Sep 10 00:50:55.090111 sudo[1306]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Sep 10 00:50:55.090292 sudo[1306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 10 00:50:55.097872 dbus-daemon[1181]: Ѝ4w\x90U: received setenforce notice (enforcing=-203764896) Sep 10 00:50:55.099807 sudo[1306]: pam_unix(sudo:session): session closed for user root Sep 10 00:50:55.101745 sshd[1303]: pam_unix(sshd:session): session closed for user core Sep 10 00:50:55.104599 systemd[1]: sshd@4-10.0.0.141:22-10.0.0.1:53782.service: Deactivated successfully. Sep 10 00:50:55.105102 systemd[1]: session-5.scope: Deactivated successfully. Sep 10 00:50:55.105591 systemd-logind[1191]: Session 5 logged out. Waiting for processes to exit. Sep 10 00:50:55.106612 systemd[1]: Started sshd@5-10.0.0.141:22-10.0.0.1:53792.service. Sep 10 00:50:55.107376 systemd-logind[1191]: Removed session 5. Sep 10 00:50:55.138699 sshd[1310]: Accepted publickey for core from 10.0.0.1 port 53792 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:50:55.139836 sshd[1310]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:50:55.143118 systemd-logind[1191]: New session 6 of user core. Sep 10 00:50:55.143844 systemd[1]: Started session-6.scope. Sep 10 00:50:55.197011 sudo[1315]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Sep 10 00:50:55.197206 sudo[1315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 10 00:50:55.200076 sudo[1315]: pam_unix(sudo:session): session closed for user root Sep 10 00:50:55.205202 sudo[1314]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Sep 10 00:50:55.205444 sudo[1314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 10 00:50:55.213481 systemd[1]: Stopping audit-rules.service... Sep 10 00:50:55.213000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 10 00:50:55.214979 auditctl[1318]: No rules Sep 10 00:50:55.215383 systemd[1]: audit-rules.service: Deactivated successfully. Sep 10 00:50:55.215553 systemd[1]: Stopped audit-rules.service. Sep 10 00:50:55.216969 systemd[1]: Starting audit-rules.service... Sep 10 00:50:55.217689 kernel: kauditd_printk_skb: 236 callbacks suppressed Sep 10 00:50:55.217739 kernel: audit: type=1305 audit(1757465455.213:196): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 10 00:50:55.217763 kernel: audit: type=1300 audit(1757465455.213:196): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffaf1fea20 a2=420 a3=0 items=0 ppid=1 pid=1318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:55.213000 audit[1318]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffaf1fea20 a2=420 a3=0 items=0 ppid=1 pid=1318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:55.213000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Sep 10 00:50:55.227635 kernel: audit: type=1327 audit(1757465455.213:196): proctitle=2F7362696E2F617564697463746C002D44 Sep 10 00:50:55.227691 kernel: audit: type=1131 audit(1757465455.213:197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:55.213000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:55.235734 augenrules[1335]: No rules Sep 10 00:50:55.236320 systemd[1]: Finished audit-rules.service. Sep 10 00:50:55.235000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:55.236000 audit[1314]: USER_END pid=1314 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:50:55.237179 sudo[1314]: pam_unix(sudo:session): session closed for user root Sep 10 00:50:55.241578 systemd[1]: Started sshd@6-10.0.0.141:22-10.0.0.1:53804.service. Sep 10 00:50:55.238824 sshd[1310]: pam_unix(sshd:session): session closed for user core Sep 10 00:50:55.241988 systemd[1]: sshd@5-10.0.0.141:22-10.0.0.1:53792.service: Deactivated successfully. Sep 10 00:50:55.242550 systemd[1]: session-6.scope: Deactivated successfully. Sep 10 00:50:55.243525 kernel: audit: type=1130 audit(1757465455.235:198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:55.243551 kernel: audit: type=1106 audit(1757465455.236:199): pid=1314 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:50:55.243566 kernel: audit: type=1104 audit(1757465455.236:200): pid=1314 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:50:55.236000 audit[1314]: CRED_DISP pid=1314 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:50:55.243174 systemd-logind[1191]: Session 6 logged out. Waiting for processes to exit. Sep 10 00:50:55.244183 systemd-logind[1191]: Removed session 6. Sep 10 00:50:55.246676 kernel: audit: type=1106 audit(1757465455.239:201): pid=1310 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:50:55.239000 audit[1310]: USER_END pid=1310 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:50:55.250773 kernel: audit: type=1104 audit(1757465455.239:202): pid=1310 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:50:55.239000 audit[1310]: CRED_DISP pid=1310 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:50:55.254173 kernel: audit: type=1130 audit(1757465455.240:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.141:22-10.0.0.1:53804 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:55.240000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.141:22-10.0.0.1:53804 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:55.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.141:22-10.0.0.1:53792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:55.281000 audit[1340]: USER_ACCT pid=1340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:50:55.281896 sshd[1340]: Accepted publickey for core from 10.0.0.1 port 53804 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:50:55.281000 audit[1340]: CRED_ACQ pid=1340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:50:55.282000 audit[1340]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff31227b30 a2=3 a3=0 items=0 ppid=1 pid=1340 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:55.282000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:50:55.282961 sshd[1340]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:50:55.286698 systemd-logind[1191]: New session 7 of user core. Sep 10 00:50:55.287385 systemd[1]: Started session-7.scope. Sep 10 00:50:55.290000 audit[1340]: USER_START pid=1340 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:50:55.292000 audit[1343]: CRED_ACQ pid=1343 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:50:55.341000 audit[1344]: USER_ACCT pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:50:55.342000 audit[1344]: CRED_REFR pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:50:55.342533 sudo[1344]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Sep 10 00:50:55.342800 sudo[1344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 10 00:50:55.344000 audit[1344]: USER_START pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:50:55.364381 systemd[1]: Starting docker.service... Sep 10 00:50:55.408645 env[1356]: time="2025-09-10T00:50:55.408580983Z" level=info msg="Starting up" Sep 10 00:50:55.409937 env[1356]: time="2025-09-10T00:50:55.409884228Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 10 00:50:55.409937 env[1356]: time="2025-09-10T00:50:55.409909018Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 10 00:50:55.409937 env[1356]: time="2025-09-10T00:50:55.409928727Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 10 00:50:55.409937 env[1356]: time="2025-09-10T00:50:55.409938253Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 10 00:50:55.411644 env[1356]: time="2025-09-10T00:50:55.411579999Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 10 00:50:55.411644 env[1356]: time="2025-09-10T00:50:55.411610116Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 10 00:50:55.411740 env[1356]: time="2025-09-10T00:50:55.411655817Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 10 00:50:55.411740 env[1356]: time="2025-09-10T00:50:55.411672065Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 10 00:50:57.242720 env[1356]: time="2025-09-10T00:50:57.242657745Z" level=info msg="Loading containers: start." Sep 10 00:50:57.294000 audit[1389]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1389 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.294000 audit[1389]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fff17d12d30 a2=0 a3=7fff17d12d1c items=0 ppid=1356 pid=1389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.294000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Sep 10 00:50:57.295000 audit[1391]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1391 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.295000 audit[1391]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffd6a916530 a2=0 a3=7ffd6a91651c items=0 ppid=1356 pid=1391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.295000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Sep 10 00:50:57.297000 audit[1393]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1393 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.297000 audit[1393]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc276a2aa0 a2=0 a3=7ffc276a2a8c items=0 ppid=1356 pid=1393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.297000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 10 00:50:57.299000 audit[1395]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1395 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.299000 audit[1395]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fffdab27b60 a2=0 a3=7fffdab27b4c items=0 ppid=1356 pid=1395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.299000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 10 00:50:57.301000 audit[1397]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1397 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.301000 audit[1397]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd984fe2e0 a2=0 a3=7ffd984fe2cc items=0 ppid=1356 pid=1397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.301000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Sep 10 00:50:57.316000 audit[1402]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1402 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.316000 audit[1402]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc12b5ff90 a2=0 a3=7ffc12b5ff7c items=0 ppid=1356 pid=1402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.316000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Sep 10 00:50:57.324000 audit[1404]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.324000 audit[1404]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffcd99c900 a2=0 a3=7fffcd99c8ec items=0 ppid=1356 pid=1404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.324000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Sep 10 00:50:57.326000 audit[1406]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.326000 audit[1406]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7fffbbe69440 a2=0 a3=7fffbbe6942c items=0 ppid=1356 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.326000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Sep 10 00:50:57.327000 audit[1408]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1408 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.327000 audit[1408]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffc2dab0140 a2=0 a3=7ffc2dab012c items=0 ppid=1356 pid=1408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.327000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 10 00:50:57.338000 audit[1412]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1412 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.338000 audit[1412]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fff1bf65f60 a2=0 a3=7fff1bf65f4c items=0 ppid=1356 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.338000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 10 00:50:57.347000 audit[1413]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1413 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.347000 audit[1413]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff27cc4050 a2=0 a3=7fff27cc403c items=0 ppid=1356 pid=1413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.347000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 10 00:50:57.357654 kernel: Initializing XFRM netlink socket Sep 10 00:50:57.387661 env[1356]: time="2025-09-10T00:50:57.387602556Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Sep 10 00:50:57.405000 audit[1421]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1421 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.405000 audit[1421]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffc9c4ed2e0 a2=0 a3=7ffc9c4ed2cc items=0 ppid=1356 pid=1421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.405000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Sep 10 00:50:57.417000 audit[1424]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1424 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.417000 audit[1424]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffe9e052140 a2=0 a3=7ffe9e05212c items=0 ppid=1356 pid=1424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.417000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Sep 10 00:50:57.418000 audit[1427]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.418000 audit[1427]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffcad6437c0 a2=0 a3=7ffcad6437ac items=0 ppid=1356 pid=1427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.418000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Sep 10 00:50:57.420000 audit[1429]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1429 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.420000 audit[1429]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffc12fb0360 a2=0 a3=7ffc12fb034c items=0 ppid=1356 pid=1429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.420000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Sep 10 00:50:57.422000 audit[1431]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1431 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.422000 audit[1431]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe3874c460 a2=0 a3=7ffe3874c44c items=0 ppid=1356 pid=1431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.422000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Sep 10 00:50:57.424000 audit[1433]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1433 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.424000 audit[1433]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7fff454906a0 a2=0 a3=7fff4549068c items=0 ppid=1356 pid=1433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.424000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Sep 10 00:50:57.425000 audit[1435]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.425000 audit[1435]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7fff6aa67540 a2=0 a3=7fff6aa6752c items=0 ppid=1356 pid=1435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.425000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Sep 10 00:50:57.432000 audit[1438]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.432000 audit[1438]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffeba6f7c20 a2=0 a3=7ffeba6f7c0c items=0 ppid=1356 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.432000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Sep 10 00:50:57.433000 audit[1440]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1440 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.433000 audit[1440]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fff987c1490 a2=0 a3=7fff987c147c items=0 ppid=1356 pid=1440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.433000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 10 00:50:57.435000 audit[1442]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.435000 audit[1442]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fff08ddabc0 a2=0 a3=7fff08ddabac items=0 ppid=1356 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.435000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 10 00:50:57.437000 audit[1444]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1444 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.437000 audit[1444]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd52a80080 a2=0 a3=7ffd52a8006c items=0 ppid=1356 pid=1444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.437000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Sep 10 00:50:57.439321 systemd-networkd[1027]: docker0: Link UP Sep 10 00:50:57.446000 audit[1448]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.446000 audit[1448]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffeb5ef3cf0 a2=0 a3=7ffeb5ef3cdc items=0 ppid=1356 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.446000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 10 00:50:57.453000 audit[1449]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1449 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:50:57.453000 audit[1449]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffc8dda3cd0 a2=0 a3=7ffc8dda3cbc items=0 ppid=1356 pid=1449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:50:57.453000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 10 00:50:57.454797 env[1356]: time="2025-09-10T00:50:57.454763897Z" level=info msg="Loading containers: done." Sep 10 00:50:57.467040 env[1356]: time="2025-09-10T00:50:57.466993678Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Sep 10 00:50:57.467195 env[1356]: time="2025-09-10T00:50:57.467128425Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Sep 10 00:50:57.467226 env[1356]: time="2025-09-10T00:50:57.467211645Z" level=info msg="Daemon has completed initialization" Sep 10 00:50:57.482940 systemd[1]: Started docker.service. Sep 10 00:50:57.481000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:50:57.489864 env[1356]: time="2025-09-10T00:50:57.489817021Z" level=info msg="API listen on /run/docker.sock" Sep 10 00:50:58.226848 env[1206]: time="2025-09-10T00:50:58.226797179Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.12\"" Sep 10 00:50:58.920901 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount896636796.mount: Deactivated successfully. Sep 10 00:51:02.633627 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Sep 10 00:51:02.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:02.633805 systemd[1]: Stopped kubelet.service. Sep 10 00:51:02.634753 kernel: kauditd_printk_skb: 84 callbacks suppressed Sep 10 00:51:02.634807 kernel: audit: type=1130 audit(1757465462.633:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:02.634996 systemd[1]: Starting kubelet.service... Sep 10 00:51:02.633000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:02.641193 kernel: audit: type=1131 audit(1757465462.633:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:02.721437 systemd[1]: Started kubelet.service. Sep 10 00:51:02.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:02.727628 kernel: audit: type=1130 audit(1757465462.721:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:03.009590 kubelet[1491]: E0910 00:51:03.009480 1491 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 10 00:51:03.012348 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 10 00:51:03.012459 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 10 00:51:03.011000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 10 00:51:03.016634 kernel: audit: type=1131 audit(1757465463.011:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 10 00:51:07.777456 env[1206]: time="2025-09-10T00:51:07.777392417Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:07.806710 env[1206]: time="2025-09-10T00:51:07.806651219Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b1963c5b49c1722b8f408deaf83aafca7f48f47fed0ed14e5c10e93cc55974a7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:07.810611 env[1206]: time="2025-09-10T00:51:07.810539186Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:07.835144 env[1206]: time="2025-09-10T00:51:07.835095379Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:e9011c3bee8c06ecabd7816e119dca4e448c92f7a78acd891de3d2db1dc6c234,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:07.835805 env[1206]: time="2025-09-10T00:51:07.835775799Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.12\" returns image reference \"sha256:b1963c5b49c1722b8f408deaf83aafca7f48f47fed0ed14e5c10e93cc55974a7\"" Sep 10 00:51:07.836315 env[1206]: time="2025-09-10T00:51:07.836293264Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.12\"" Sep 10 00:51:11.431615 env[1206]: time="2025-09-10T00:51:11.431530458Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:11.433425 env[1206]: time="2025-09-10T00:51:11.433389574Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:200c1a99a6f2b9d3b0a6e9b7362663513589341e0e58bc3b953a373efa735dfd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:11.435203 env[1206]: time="2025-09-10T00:51:11.435146222Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:11.436867 env[1206]: time="2025-09-10T00:51:11.436835016Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:d2862f94d87320267fddbd55db26556a267aa802e51d6b60f25786b4c428afc8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:11.437478 env[1206]: time="2025-09-10T00:51:11.437434973Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.12\" returns image reference \"sha256:200c1a99a6f2b9d3b0a6e9b7362663513589341e0e58bc3b953a373efa735dfd\"" Sep 10 00:51:11.437980 env[1206]: time="2025-09-10T00:51:11.437954216Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.12\"" Sep 10 00:51:13.133666 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Sep 10 00:51:13.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:13.133909 systemd[1]: Stopped kubelet.service. Sep 10 00:51:13.135229 systemd[1]: Starting kubelet.service... Sep 10 00:51:13.132000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:13.139943 kernel: audit: type=1130 audit(1757465473.132:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:13.140019 kernel: audit: type=1131 audit(1757465473.132:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:13.223383 systemd[1]: Started kubelet.service. Sep 10 00:51:13.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:13.227623 kernel: audit: type=1130 audit(1757465473.221:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:13.270905 kubelet[1502]: E0910 00:51:13.270839 1502 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 10 00:51:13.272835 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 10 00:51:13.272957 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 10 00:51:13.271000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 10 00:51:13.276618 kernel: audit: type=1131 audit(1757465473.271:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 10 00:51:14.511869 env[1206]: time="2025-09-10T00:51:14.511789622Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:14.514211 env[1206]: time="2025-09-10T00:51:14.514182473Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bcdd9599681a9460a5539177a986dbdaf880ac56eeb117ab94adb8f37889efba,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:14.516187 env[1206]: time="2025-09-10T00:51:14.516151690Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:14.517918 env[1206]: time="2025-09-10T00:51:14.517891371Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:152943b7e30244f4415fd0a5860a2dccd91660fe983d30a28a10edb0cc8f6756,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:14.518688 env[1206]: time="2025-09-10T00:51:14.518652031Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.12\" returns image reference \"sha256:bcdd9599681a9460a5539177a986dbdaf880ac56eeb117ab94adb8f37889efba\"" Sep 10 00:51:14.519229 env[1206]: time="2025-09-10T00:51:14.519206042Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.12\"" Sep 10 00:51:17.215036 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount556427874.mount: Deactivated successfully. Sep 10 00:51:18.801999 env[1206]: time="2025-09-10T00:51:18.801910581Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:18.804911 env[1206]: time="2025-09-10T00:51:18.804821516Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:507cc52f5f78c0cff25e904c76c18e6bfc90982e9cc2aa4dcb19033f21c3f679,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:18.806987 env[1206]: time="2025-09-10T00:51:18.806944961Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.12,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:18.810708 env[1206]: time="2025-09-10T00:51:18.810635636Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:90aa6b5f4065937521ff8438bc705317485d0be3f8b00a07145e697d92cc2cc6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:18.811223 env[1206]: time="2025-09-10T00:51:18.811181479Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.12\" returns image reference \"sha256:507cc52f5f78c0cff25e904c76c18e6bfc90982e9cc2aa4dcb19033f21c3f679\"" Sep 10 00:51:18.811900 env[1206]: time="2025-09-10T00:51:18.811862440Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Sep 10 00:51:19.409449 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3410790992.mount: Deactivated successfully. Sep 10 00:51:21.520948 env[1206]: time="2025-09-10T00:51:21.520879088Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:21.526280 env[1206]: time="2025-09-10T00:51:21.526237326Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:21.528988 env[1206]: time="2025-09-10T00:51:21.528928171Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:21.530835 env[1206]: time="2025-09-10T00:51:21.530804088Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:21.531700 env[1206]: time="2025-09-10T00:51:21.531659452Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Sep 10 00:51:21.532213 env[1206]: time="2025-09-10T00:51:21.532185851Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Sep 10 00:51:22.158037 env[1206]: time="2025-09-10T00:51:22.157940849Z" level=error msg="PullImage \"registry.k8s.io/pause:3.10\" failed" error="failed to pull and unpack image \"registry.k8s.io/pause:3.10\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://prod-registry-k8s-io-us-west-1.s3.dualstack.us-west-1.amazonaws.com/containers/images/sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\": dial tcp: lookup prod-registry-k8s-io-us-west-1.s3.dualstack.us-west-1.amazonaws.com: no such host" Sep 10 00:51:22.158437 env[1206]: time="2025-09-10T00:51:22.158420588Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Sep 10 00:51:22.492020 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount143474352.mount: Deactivated successfully. Sep 10 00:51:22.498044 env[1206]: time="2025-09-10T00:51:22.497999603Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:22.499920 env[1206]: time="2025-09-10T00:51:22.499897296Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:22.501417 env[1206]: time="2025-09-10T00:51:22.501394652Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:22.502725 env[1206]: time="2025-09-10T00:51:22.502703128Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:22.503213 env[1206]: time="2025-09-10T00:51:22.503178736Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Sep 10 00:51:22.503633 env[1206]: time="2025-09-10T00:51:22.503609250Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Sep 10 00:51:23.383572 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Sep 10 00:51:23.383763 systemd[1]: Stopped kubelet.service. Sep 10 00:51:23.382000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:23.385414 systemd[1]: Starting kubelet.service... Sep 10 00:51:23.382000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:23.390386 kernel: audit: type=1130 audit(1757465483.382:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:23.390441 kernel: audit: type=1131 audit(1757465483.382:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:23.475010 systemd[1]: Started kubelet.service. Sep 10 00:51:23.473000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:23.479668 kernel: audit: type=1130 audit(1757465483.473:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:23.589719 kubelet[1513]: E0910 00:51:23.589657 1513 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 10 00:51:23.591339 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 10 00:51:23.591464 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 10 00:51:23.590000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 10 00:51:23.608641 kernel: audit: type=1131 audit(1757465483.590:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 10 00:51:25.663875 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1839939009.mount: Deactivated successfully. Sep 10 00:51:29.782167 env[1206]: time="2025-09-10T00:51:29.782100295Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:29.783983 env[1206]: time="2025-09-10T00:51:29.783932945Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:29.787748 env[1206]: time="2025-09-10T00:51:29.787698521Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:29.789575 env[1206]: time="2025-09-10T00:51:29.789542207Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:29.790578 env[1206]: time="2025-09-10T00:51:29.790536534Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4\"" Sep 10 00:51:32.466859 systemd[1]: Stopped kubelet.service. Sep 10 00:51:32.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:32.469160 systemd[1]: Starting kubelet.service... Sep 10 00:51:32.466000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:32.475273 kernel: audit: type=1130 audit(1757465492.466:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:32.475330 kernel: audit: type=1131 audit(1757465492.466:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:32.489132 systemd[1]: Reloading. Sep 10 00:51:32.549479 /usr/lib/systemd/system-generators/torcx-generator[1567]: time="2025-09-10T00:51:32Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 10 00:51:32.549501 /usr/lib/systemd/system-generators/torcx-generator[1567]: time="2025-09-10T00:51:32Z" level=info msg="torcx already run" Sep 10 00:51:33.533993 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 10 00:51:33.534017 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 10 00:51:33.558452 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 10 00:51:33.633930 kernel: audit: type=1400 audit(1757465493.620:252): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.634105 kernel: audit: type=1400 audit(1757465493.620:253): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.634125 kernel: audit: type=1400 audit(1757465493.620:254): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.634144 kernel: audit: type=1400 audit(1757465493.620:255): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.637567 kernel: audit: type=1400 audit(1757465493.620:256): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.637635 kernel: audit: type=1400 audit(1757465493.620:257): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.640444 kernel: audit: type=1400 audit(1757465493.620:258): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.643261 kernel: audit: type=1400 audit(1757465493.620:259): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.626000 audit: BPF prog-id=46 op=LOAD Sep 10 00:51:33.626000 audit: BPF prog-id=41 op=UNLOAD Sep 10 00:51:33.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.632000 audit: BPF prog-id=47 op=LOAD Sep 10 00:51:33.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.632000 audit: BPF prog-id=48 op=LOAD Sep 10 00:51:33.632000 audit: BPF prog-id=42 op=UNLOAD Sep 10 00:51:33.632000 audit: BPF prog-id=43 op=UNLOAD Sep 10 00:51:33.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.635000 audit: BPF prog-id=49 op=LOAD Sep 10 00:51:33.636000 audit: BPF prog-id=30 op=UNLOAD Sep 10 00:51:33.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.641000 audit: BPF prog-id=50 op=LOAD Sep 10 00:51:33.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.644000 audit: BPF prog-id=51 op=LOAD Sep 10 00:51:33.644000 audit: BPF prog-id=31 op=UNLOAD Sep 10 00:51:33.644000 audit: BPF prog-id=32 op=UNLOAD Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit: BPF prog-id=52 op=LOAD Sep 10 00:51:33.645000 audit: BPF prog-id=33 op=UNLOAD Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit: BPF prog-id=53 op=LOAD Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.646000 audit: BPF prog-id=54 op=LOAD Sep 10 00:51:33.646000 audit: BPF prog-id=34 op=UNLOAD Sep 10 00:51:33.646000 audit: BPF prog-id=35 op=UNLOAD Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit: BPF prog-id=55 op=LOAD Sep 10 00:51:33.647000 audit: BPF prog-id=36 op=UNLOAD Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit: BPF prog-id=56 op=LOAD Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.647000 audit: BPF prog-id=57 op=LOAD Sep 10 00:51:33.647000 audit: BPF prog-id=37 op=UNLOAD Sep 10 00:51:33.647000 audit: BPF prog-id=38 op=UNLOAD Sep 10 00:51:33.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.649000 audit: BPF prog-id=58 op=LOAD Sep 10 00:51:33.649000 audit: BPF prog-id=44 op=UNLOAD Sep 10 00:51:33.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.650000 audit: BPF prog-id=59 op=LOAD Sep 10 00:51:33.650000 audit: BPF prog-id=40 op=UNLOAD Sep 10 00:51:33.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:33.651000 audit: BPF prog-id=60 op=LOAD Sep 10 00:51:33.651000 audit: BPF prog-id=39 op=UNLOAD Sep 10 00:51:33.662378 systemd[1]: Started kubelet.service. Sep 10 00:51:33.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:33.665206 systemd[1]: Stopping kubelet.service... Sep 10 00:51:33.665780 systemd[1]: kubelet.service: Deactivated successfully. Sep 10 00:51:33.665940 systemd[1]: Stopped kubelet.service. Sep 10 00:51:33.664000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:33.667146 systemd[1]: Starting kubelet.service... Sep 10 00:51:33.769828 systemd[1]: Started kubelet.service. Sep 10 00:51:33.768000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:33.805262 kubelet[1619]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 10 00:51:33.805262 kubelet[1619]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Sep 10 00:51:33.805262 kubelet[1619]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 10 00:51:33.805262 kubelet[1619]: I0910 00:51:33.805221 1619 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 10 00:51:34.252999 kubelet[1619]: I0910 00:51:34.252944 1619 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Sep 10 00:51:34.252999 kubelet[1619]: I0910 00:51:34.252975 1619 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 10 00:51:34.253283 kubelet[1619]: I0910 00:51:34.253253 1619 server.go:934] "Client rotation is on, will bootstrap in background" Sep 10 00:51:34.271055 kubelet[1619]: I0910 00:51:34.271019 1619 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 10 00:51:34.271454 kubelet[1619]: E0910 00:51:34.271399 1619 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.141:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.141:6443: connect: connection refused" logger="UnhandledError" Sep 10 00:51:34.279395 kubelet[1619]: E0910 00:51:34.279352 1619 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 10 00:51:34.279395 kubelet[1619]: I0910 00:51:34.279388 1619 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 10 00:51:34.284314 kubelet[1619]: I0910 00:51:34.284265 1619 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 10 00:51:34.284824 kubelet[1619]: I0910 00:51:34.284799 1619 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Sep 10 00:51:34.284942 kubelet[1619]: I0910 00:51:34.284912 1619 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 10 00:51:34.285109 kubelet[1619]: I0910 00:51:34.284940 1619 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 10 00:51:34.285250 kubelet[1619]: I0910 00:51:34.285116 1619 topology_manager.go:138] "Creating topology manager with none policy" Sep 10 00:51:34.285250 kubelet[1619]: I0910 00:51:34.285123 1619 container_manager_linux.go:300] "Creating device plugin manager" Sep 10 00:51:34.285250 kubelet[1619]: I0910 00:51:34.285229 1619 state_mem.go:36] "Initialized new in-memory state store" Sep 10 00:51:34.294590 kubelet[1619]: I0910 00:51:34.294560 1619 kubelet.go:408] "Attempting to sync node with API server" Sep 10 00:51:34.294590 kubelet[1619]: I0910 00:51:34.294608 1619 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 10 00:51:34.294770 kubelet[1619]: I0910 00:51:34.294650 1619 kubelet.go:314] "Adding apiserver pod source" Sep 10 00:51:34.294770 kubelet[1619]: I0910 00:51:34.294678 1619 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 10 00:51:34.296302 kubelet[1619]: W0910 00:51:34.296231 1619 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.141:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.141:6443: connect: connection refused Sep 10 00:51:34.296302 kubelet[1619]: E0910 00:51:34.296295 1619 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.141:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.141:6443: connect: connection refused" logger="UnhandledError" Sep 10 00:51:34.304918 kubelet[1619]: I0910 00:51:34.304895 1619 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 10 00:51:34.305331 kubelet[1619]: I0910 00:51:34.305309 1619 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 10 00:51:34.305449 kubelet[1619]: W0910 00:51:34.305394 1619 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.141:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.141:6443: connect: connection refused Sep 10 00:51:34.305493 kubelet[1619]: E0910 00:51:34.305457 1619 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.141:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.141:6443: connect: connection refused" logger="UnhandledError" Sep 10 00:51:34.305780 kubelet[1619]: W0910 00:51:34.305750 1619 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Sep 10 00:51:34.310482 kubelet[1619]: I0910 00:51:34.310449 1619 server.go:1274] "Started kubelet" Sep 10 00:51:34.310554 kubelet[1619]: I0910 00:51:34.310506 1619 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Sep 10 00:51:34.311316 kubelet[1619]: I0910 00:51:34.311298 1619 server.go:449] "Adding debug handlers to kubelet server" Sep 10 00:51:34.311000 audit[1619]: AVC avc: denied { mac_admin } for pid=1619 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:34.311000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 10 00:51:34.311000 audit[1619]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a86e40 a1=c000895020 a2=c000a86e10 a3=25 items=0 ppid=1 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:34.311000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 10 00:51:34.311000 audit[1619]: AVC avc: denied { mac_admin } for pid=1619 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:34.311000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 10 00:51:34.311000 audit[1619]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b90180 a1=c000895038 a2=c000a86ed0 a3=25 items=0 ppid=1 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:34.311000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 10 00:51:34.312230 kubelet[1619]: I0910 00:51:34.311764 1619 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Sep 10 00:51:34.312230 kubelet[1619]: I0910 00:51:34.311808 1619 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Sep 10 00:51:34.312230 kubelet[1619]: I0910 00:51:34.311866 1619 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 10 00:51:34.312230 kubelet[1619]: I0910 00:51:34.312208 1619 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 10 00:51:34.315000 audit[1632]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:34.315000 audit[1632]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff908c1da0 a2=0 a3=7fff908c1d8c items=0 ppid=1619 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:34.315000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 10 00:51:34.316000 audit[1633]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1633 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:34.316000 audit[1633]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeaeb1f2d0 a2=0 a3=7ffeaeb1f2bc items=0 ppid=1619 pid=1633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:34.316000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 10 00:51:34.318190 kubelet[1619]: I0910 00:51:34.318154 1619 volume_manager.go:289] "Starting Kubelet Volume Manager" Sep 10 00:51:34.318362 kubelet[1619]: E0910 00:51:34.318340 1619 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:51:34.318000 audit[1635]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1635 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:34.318000 audit[1635]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe8f27e840 a2=0 a3=7ffe8f27e82c items=0 ppid=1619 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:34.318000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 10 00:51:34.320008 kubelet[1619]: I0910 00:51:34.319978 1619 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 10 00:51:34.320167 kubelet[1619]: I0910 00:51:34.320141 1619 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 10 00:51:34.320513 kubelet[1619]: E0910 00:51:34.320289 1619 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.141:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.141:6443: connect: connection refused" interval="200ms" Sep 10 00:51:34.320513 kubelet[1619]: I0910 00:51:34.320513 1619 factory.go:221] Registration of the systemd container factory successfully Sep 10 00:51:34.320635 kubelet[1619]: I0910 00:51:34.320572 1619 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 10 00:51:34.320989 kubelet[1619]: I0910 00:51:34.320850 1619 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Sep 10 00:51:34.320989 kubelet[1619]: I0910 00:51:34.320908 1619 reconciler.go:26] "Reconciler: start to sync state" Sep 10 00:51:34.321409 kubelet[1619]: W0910 00:51:34.321360 1619 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.141:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.141:6443: connect: connection refused Sep 10 00:51:34.321409 kubelet[1619]: E0910 00:51:34.321403 1619 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.141:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.141:6443: connect: connection refused" logger="UnhandledError" Sep 10 00:51:34.321528 kubelet[1619]: I0910 00:51:34.321512 1619 factory.go:221] Registration of the containerd container factory successfully Sep 10 00:51:34.322000 audit[1637]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1637 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:34.322000 audit[1637]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffc5aa9d60 a2=0 a3=7fffc5aa9d4c items=0 ppid=1619 pid=1637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:34.322000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 10 00:51:34.326672 kubelet[1619]: E0910 00:51:34.325767 1619 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.141:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.141:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1863c58e3d611111 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-09-10 00:51:34.310424849 +0000 UTC m=+0.537333141,LastTimestamp:2025-09-10 00:51:34.310424849 +0000 UTC m=+0.537333141,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Sep 10 00:51:34.327669 kubelet[1619]: E0910 00:51:34.327643 1619 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 10 00:51:34.328000 audit[1642]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1642 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:34.328000 audit[1642]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffea29f2970 a2=0 a3=7ffea29f295c items=0 ppid=1619 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:34.328000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Sep 10 00:51:34.329629 kubelet[1619]: I0910 00:51:34.329577 1619 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 10 00:51:34.329000 audit[1644]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1644 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:34.329000 audit[1644]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe63ba4d70 a2=0 a3=7ffe63ba4d5c items=0 ppid=1619 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:34.329000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 10 00:51:34.331106 kubelet[1619]: I0910 00:51:34.331088 1619 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 10 00:51:34.331204 kubelet[1619]: I0910 00:51:34.331188 1619 status_manager.go:217] "Starting to sync pod status with apiserver" Sep 10 00:51:34.331308 kubelet[1619]: I0910 00:51:34.331292 1619 kubelet.go:2321] "Starting kubelet main sync loop" Sep 10 00:51:34.330000 audit[1645]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1645 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:34.330000 audit[1645]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe71bf8890 a2=0 a3=7ffe71bf887c items=0 ppid=1619 pid=1645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:34.330000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 10 00:51:34.331691 kubelet[1619]: E0910 00:51:34.331666 1619 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 10 00:51:34.332000 audit[1648]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1648 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:34.332000 audit[1648]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdf751f120 a2=0 a3=7ffdf751f10c items=0 ppid=1619 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:34.332000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 10 00:51:34.333000 audit[1649]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=1649 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:34.333000 audit[1649]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffd01e50170 a2=0 a3=7ffd01e5015c items=0 ppid=1619 pid=1649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:34.333000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 10 00:51:34.334266 kubelet[1619]: W0910 00:51:34.334221 1619 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.141:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.141:6443: connect: connection refused Sep 10 00:51:34.334321 kubelet[1619]: E0910 00:51:34.334277 1619 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.141:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.141:6443: connect: connection refused" logger="UnhandledError" Sep 10 00:51:34.334000 audit[1650]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1650 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:34.334000 audit[1650]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff749988a0 a2=0 a3=7fff7499888c items=0 ppid=1619 pid=1650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:34.334000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 10 00:51:34.335000 audit[1651]: NETFILTER_CFG table=filter:36 family=10 entries=2 op=nft_register_chain pid=1651 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:34.335000 audit[1651]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffeccd4ebd0 a2=0 a3=7ffeccd4ebbc items=0 ppid=1619 pid=1651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:34.335000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 10 00:51:34.336040 kubelet[1619]: I0910 00:51:34.335973 1619 cpu_manager.go:214] "Starting CPU manager" policy="none" Sep 10 00:51:34.336040 kubelet[1619]: I0910 00:51:34.335989 1619 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Sep 10 00:51:34.336040 kubelet[1619]: I0910 00:51:34.336002 1619 state_mem.go:36] "Initialized new in-memory state store" Sep 10 00:51:34.336000 audit[1652]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=1652 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:34.336000 audit[1652]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd890e3aa0 a2=0 a3=7ffd890e3a8c items=0 ppid=1619 pid=1652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:34.336000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 10 00:51:34.419491 kubelet[1619]: E0910 00:51:34.419419 1619 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:51:34.432855 kubelet[1619]: E0910 00:51:34.432802 1619 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Sep 10 00:51:34.498708 kubelet[1619]: E0910 00:51:34.498567 1619 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.141:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.141:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1863c58e3d611111 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-09-10 00:51:34.310424849 +0000 UTC m=+0.537333141,LastTimestamp:2025-09-10 00:51:34.310424849 +0000 UTC m=+0.537333141,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Sep 10 00:51:34.519681 kubelet[1619]: E0910 00:51:34.519580 1619 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:51:34.521119 kubelet[1619]: E0910 00:51:34.521071 1619 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.141:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.141:6443: connect: connection refused" interval="400ms" Sep 10 00:51:34.620399 kubelet[1619]: E0910 00:51:34.620350 1619 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:51:34.633834 kubelet[1619]: E0910 00:51:34.633792 1619 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Sep 10 00:51:34.721170 kubelet[1619]: E0910 00:51:34.721122 1619 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:51:34.821959 kubelet[1619]: E0910 00:51:34.821831 1619 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:51:34.921838 kubelet[1619]: E0910 00:51:34.921782 1619 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.141:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.141:6443: connect: connection refused" interval="800ms" Sep 10 00:51:34.922865 kubelet[1619]: E0910 00:51:34.922833 1619 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:51:35.023536 kubelet[1619]: E0910 00:51:35.023457 1619 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:51:35.034911 kubelet[1619]: E0910 00:51:35.034866 1619 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Sep 10 00:51:35.124398 kubelet[1619]: E0910 00:51:35.124274 1619 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:51:35.224905 kubelet[1619]: E0910 00:51:35.224862 1619 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:51:35.300035 kubelet[1619]: W0910 00:51:35.299963 1619 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.141:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.141:6443: connect: connection refused Sep 10 00:51:35.300100 kubelet[1619]: E0910 00:51:35.300039 1619 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.141:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.141:6443: connect: connection refused" logger="UnhandledError" Sep 10 00:51:35.325104 kubelet[1619]: E0910 00:51:35.325064 1619 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:51:35.425682 kubelet[1619]: E0910 00:51:35.425636 1619 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:51:35.526270 kubelet[1619]: E0910 00:51:35.526236 1619 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:51:35.587972 kubelet[1619]: I0910 00:51:35.587920 1619 policy_none.go:49] "None policy: Start" Sep 10 00:51:35.588558 kubelet[1619]: I0910 00:51:35.588541 1619 memory_manager.go:170] "Starting memorymanager" policy="None" Sep 10 00:51:35.588627 kubelet[1619]: I0910 00:51:35.588564 1619 state_mem.go:35] "Initializing new in-memory state store" Sep 10 00:51:35.596519 systemd[1]: Created slice kubepods.slice. Sep 10 00:51:35.600085 systemd[1]: Created slice kubepods-burstable.slice. Sep 10 00:51:35.602366 systemd[1]: Created slice kubepods-besteffort.slice. Sep 10 00:51:35.607191 kubelet[1619]: I0910 00:51:35.607131 1619 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 10 00:51:35.605000 audit[1619]: AVC avc: denied { mac_admin } for pid=1619 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:35.605000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 10 00:51:35.605000 audit[1619]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0002d7e90 a1=c000f53c50 a2=c0002d7d40 a3=25 items=0 ppid=1 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:35.605000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 10 00:51:35.607449 kubelet[1619]: I0910 00:51:35.607193 1619 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Sep 10 00:51:35.607449 kubelet[1619]: I0910 00:51:35.607299 1619 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 10 00:51:35.607449 kubelet[1619]: I0910 00:51:35.607310 1619 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 10 00:51:35.607829 kubelet[1619]: I0910 00:51:35.607632 1619 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 10 00:51:35.609065 kubelet[1619]: E0910 00:51:35.608722 1619 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Sep 10 00:51:35.703283 kubelet[1619]: W0910 00:51:35.703128 1619 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.141:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.141:6443: connect: connection refused Sep 10 00:51:35.703283 kubelet[1619]: E0910 00:51:35.703214 1619 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.141:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.141:6443: connect: connection refused" logger="UnhandledError" Sep 10 00:51:35.708319 kubelet[1619]: I0910 00:51:35.708288 1619 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Sep 10 00:51:35.708562 kubelet[1619]: E0910 00:51:35.708529 1619 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.141:6443/api/v1/nodes\": dial tcp 10.0.0.141:6443: connect: connection refused" node="localhost" Sep 10 00:51:35.723007 kubelet[1619]: E0910 00:51:35.722962 1619 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.141:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.141:6443: connect: connection refused" interval="1.6s" Sep 10 00:51:35.773780 kubelet[1619]: W0910 00:51:35.773747 1619 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.141:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.141:6443: connect: connection refused Sep 10 00:51:35.773843 kubelet[1619]: E0910 00:51:35.773777 1619 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.141:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.141:6443: connect: connection refused" logger="UnhandledError" Sep 10 00:51:35.805466 kubelet[1619]: W0910 00:51:35.805425 1619 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.141:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.141:6443: connect: connection refused Sep 10 00:51:35.805512 kubelet[1619]: E0910 00:51:35.805468 1619 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.141:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.141:6443: connect: connection refused" logger="UnhandledError" Sep 10 00:51:35.841016 systemd[1]: Created slice kubepods-burstable-pod5dc878868de11c6196259ae42039f4ff.slice. Sep 10 00:51:35.848304 systemd[1]: Created slice kubepods-burstable-pod38e1d04d18527f8e0aef3bed809497b6.slice. Sep 10 00:51:35.859472 systemd[1]: Created slice kubepods-burstable-podfec3f691a145cb26ff55e4af388500b7.slice. Sep 10 00:51:35.909672 kubelet[1619]: I0910 00:51:35.909642 1619 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Sep 10 00:51:35.910020 kubelet[1619]: E0910 00:51:35.909968 1619 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.141:6443/api/v1/nodes\": dial tcp 10.0.0.141:6443: connect: connection refused" node="localhost" Sep 10 00:51:35.930406 kubelet[1619]: I0910 00:51:35.930374 1619 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/5dc878868de11c6196259ae42039f4ff-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"5dc878868de11c6196259ae42039f4ff\") " pod="kube-system/kube-scheduler-localhost" Sep 10 00:51:35.930479 kubelet[1619]: I0910 00:51:35.930404 1619 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/38e1d04d18527f8e0aef3bed809497b6-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"38e1d04d18527f8e0aef3bed809497b6\") " pod="kube-system/kube-apiserver-localhost" Sep 10 00:51:35.930479 kubelet[1619]: I0910 00:51:35.930434 1619 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/fec3f691a145cb26ff55e4af388500b7-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"fec3f691a145cb26ff55e4af388500b7\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 00:51:35.930479 kubelet[1619]: I0910 00:51:35.930454 1619 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/fec3f691a145cb26ff55e4af388500b7-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"fec3f691a145cb26ff55e4af388500b7\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 00:51:35.930479 kubelet[1619]: I0910 00:51:35.930470 1619 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/38e1d04d18527f8e0aef3bed809497b6-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"38e1d04d18527f8e0aef3bed809497b6\") " pod="kube-system/kube-apiserver-localhost" Sep 10 00:51:35.930642 kubelet[1619]: I0910 00:51:35.930489 1619 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/38e1d04d18527f8e0aef3bed809497b6-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"38e1d04d18527f8e0aef3bed809497b6\") " pod="kube-system/kube-apiserver-localhost" Sep 10 00:51:35.930642 kubelet[1619]: I0910 00:51:35.930524 1619 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/fec3f691a145cb26ff55e4af388500b7-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"fec3f691a145cb26ff55e4af388500b7\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 00:51:35.930642 kubelet[1619]: I0910 00:51:35.930568 1619 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fec3f691a145cb26ff55e4af388500b7-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"fec3f691a145cb26ff55e4af388500b7\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 00:51:35.930642 kubelet[1619]: I0910 00:51:35.930608 1619 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/fec3f691a145cb26ff55e4af388500b7-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"fec3f691a145cb26ff55e4af388500b7\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 00:51:36.080446 update_engine[1195]: I0910 00:51:36.080322 1195 update_attempter.cc:509] Updating boot flags... Sep 10 00:51:36.147318 kubelet[1619]: E0910 00:51:36.146734 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:36.147448 env[1206]: time="2025-09-10T00:51:36.147315721Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:5dc878868de11c6196259ae42039f4ff,Namespace:kube-system,Attempt:0,}" Sep 10 00:51:36.157719 kubelet[1619]: E0910 00:51:36.157697 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:36.157961 env[1206]: time="2025-09-10T00:51:36.157937733Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:38e1d04d18527f8e0aef3bed809497b6,Namespace:kube-system,Attempt:0,}" Sep 10 00:51:36.161164 kubelet[1619]: E0910 00:51:36.161129 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:36.161372 env[1206]: time="2025-09-10T00:51:36.161338509Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:fec3f691a145cb26ff55e4af388500b7,Namespace:kube-system,Attempt:0,}" Sep 10 00:51:36.311234 kubelet[1619]: I0910 00:51:36.311199 1619 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Sep 10 00:51:36.311446 kubelet[1619]: E0910 00:51:36.311419 1619 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.141:6443/api/v1/nodes\": dial tcp 10.0.0.141:6443: connect: connection refused" node="localhost" Sep 10 00:51:36.317067 kubelet[1619]: E0910 00:51:36.317041 1619 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.141:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.141:6443: connect: connection refused" logger="UnhandledError" Sep 10 00:51:36.744232 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2879192937.mount: Deactivated successfully. Sep 10 00:51:36.750182 env[1206]: time="2025-09-10T00:51:36.750138232Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:36.753558 env[1206]: time="2025-09-10T00:51:36.753495639Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:36.754876 env[1206]: time="2025-09-10T00:51:36.754851440Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:36.755849 env[1206]: time="2025-09-10T00:51:36.755802731Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:36.756768 env[1206]: time="2025-09-10T00:51:36.756717269Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:36.758029 env[1206]: time="2025-09-10T00:51:36.757962177Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:36.759219 env[1206]: time="2025-09-10T00:51:36.759192132Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:36.760636 env[1206]: time="2025-09-10T00:51:36.760611255Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:36.761815 env[1206]: time="2025-09-10T00:51:36.761789171Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:36.763080 env[1206]: time="2025-09-10T00:51:36.763054416Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:36.764837 env[1206]: time="2025-09-10T00:51:36.764798038Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:36.766458 env[1206]: time="2025-09-10T00:51:36.766428783Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:36.777793 env[1206]: time="2025-09-10T00:51:36.777739800Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:51:36.777937 env[1206]: time="2025-09-10T00:51:36.777795868Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:51:36.777937 env[1206]: time="2025-09-10T00:51:36.777815762Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:51:36.778018 env[1206]: time="2025-09-10T00:51:36.777920460Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/41f06ab0bd96cd51ca29aa2ea4636535ef88d84a5e71f3613243e7ee1ba88faa pid=1675 runtime=io.containerd.runc.v2 Sep 10 00:51:36.790556 systemd[1]: Started cri-containerd-41f06ab0bd96cd51ca29aa2ea4636535ef88d84a5e71f3613243e7ee1ba88faa.scope. Sep 10 00:51:36.799751 env[1206]: time="2025-09-10T00:51:36.799681870Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:51:36.799751 env[1206]: time="2025-09-10T00:51:36.799725229Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:51:36.800002 env[1206]: time="2025-09-10T00:51:36.799955221Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:51:36.800228 env[1206]: time="2025-09-10T00:51:36.800189112Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d44aa3a83e83533c422a3e1b829e253d1e9ba4f5348fad7b080ff04e41727c09 pid=1703 runtime=io.containerd.runc.v2 Sep 10 00:51:36.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.801000 audit: BPF prog-id=61 op=LOAD Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { bpf } for pid=1686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1675 pid=1686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.802000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431663036616230626439366364353163613239616132656134363336 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { perfmon } for pid=1686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1675 pid=1686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.802000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431663036616230626439366364353163613239616132656134363336 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { bpf } for pid=1686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { bpf } for pid=1686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { bpf } for pid=1686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { perfmon } for pid=1686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { perfmon } for pid=1686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { perfmon } for pid=1686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { perfmon } for pid=1686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { perfmon } for pid=1686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { bpf } for pid=1686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { bpf } for pid=1686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit: BPF prog-id=62 op=LOAD Sep 10 00:51:36.802000 audit[1686]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000221f10 items=0 ppid=1675 pid=1686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.802000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431663036616230626439366364353163613239616132656134363336 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { bpf } for pid=1686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { bpf } for pid=1686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { perfmon } for pid=1686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { perfmon } for pid=1686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { perfmon } for pid=1686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { perfmon } for pid=1686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { perfmon } for pid=1686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { bpf } for pid=1686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { bpf } for pid=1686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit: BPF prog-id=63 op=LOAD Sep 10 00:51:36.802000 audit[1686]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000221f58 items=0 ppid=1675 pid=1686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.802000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431663036616230626439366364353163613239616132656134363336 Sep 10 00:51:36.802000 audit: BPF prog-id=63 op=UNLOAD Sep 10 00:51:36.802000 audit: BPF prog-id=62 op=UNLOAD Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { bpf } for pid=1686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { bpf } for pid=1686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { bpf } for pid=1686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { perfmon } for pid=1686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { perfmon } for pid=1686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { perfmon } for pid=1686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { perfmon } for pid=1686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { perfmon } for pid=1686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { bpf } for pid=1686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit[1686]: AVC avc: denied { bpf } for pid=1686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.802000 audit: BPF prog-id=64 op=LOAD Sep 10 00:51:36.802000 audit[1686]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00040e368 items=0 ppid=1675 pid=1686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.802000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431663036616230626439366364353163613239616132656134363336 Sep 10 00:51:36.807147 env[1206]: time="2025-09-10T00:51:36.807055081Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:51:36.807339 env[1206]: time="2025-09-10T00:51:36.807312566Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:51:36.807462 env[1206]: time="2025-09-10T00:51:36.807434965Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:51:36.807827 env[1206]: time="2025-09-10T00:51:36.807791374Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c0eca5b95963d15d81cfed82be9ad818dcff694c368c6f47e70f114a344e9967 pid=1733 runtime=io.containerd.runc.v2 Sep 10 00:51:36.811431 systemd[1]: Started cri-containerd-d44aa3a83e83533c422a3e1b829e253d1e9ba4f5348fad7b080ff04e41727c09.scope. Sep 10 00:51:36.822368 systemd[1]: Started cri-containerd-c0eca5b95963d15d81cfed82be9ad818dcff694c368c6f47e70f114a344e9967.scope. Sep 10 00:51:36.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.826000 audit: BPF prog-id=65 op=LOAD Sep 10 00:51:36.826000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.826000 audit[1722]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=1703 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.826000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434346161336138336538333533336334323261336531623832396532 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=1703 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434346161336138336538333533336334323261336531623832396532 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit: BPF prog-id=66 op=LOAD Sep 10 00:51:36.827000 audit[1722]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000025070 items=0 ppid=1703 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434346161336138336538333533336334323261336531623832396532 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit: BPF prog-id=67 op=LOAD Sep 10 00:51:36.827000 audit[1722]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0000250b8 items=0 ppid=1703 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434346161336138336538333533336334323261336531623832396532 Sep 10 00:51:36.827000 audit: BPF prog-id=67 op=UNLOAD Sep 10 00:51:36.827000 audit: BPF prog-id=66 op=UNLOAD Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.827000 audit: BPF prog-id=68 op=LOAD Sep 10 00:51:36.827000 audit[1722]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0000254c8 items=0 ppid=1703 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434346161336138336538333533336334323261336531623832396532 Sep 10 00:51:36.836914 env[1206]: time="2025-09-10T00:51:36.836866721Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:38e1d04d18527f8e0aef3bed809497b6,Namespace:kube-system,Attempt:0,} returns sandbox id \"41f06ab0bd96cd51ca29aa2ea4636535ef88d84a5e71f3613243e7ee1ba88faa\"" Sep 10 00:51:36.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit: BPF prog-id=69 op=LOAD Sep 10 00:51:36.837000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1745]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1733 pid=1745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330656361356239353936336431356438316366656438326265396164 Sep 10 00:51:36.837000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1745]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=1733 pid=1745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330656361356239353936336431356438316366656438326265396164 Sep 10 00:51:36.837000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit: BPF prog-id=70 op=LOAD Sep 10 00:51:36.837000 audit[1745]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003de1e0 items=0 ppid=1733 pid=1745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330656361356239353936336431356438316366656438326265396164 Sep 10 00:51:36.837000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.837000 audit: BPF prog-id=71 op=LOAD Sep 10 00:51:36.837000 audit[1745]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003de228 items=0 ppid=1733 pid=1745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330656361356239353936336431356438316366656438326265396164 Sep 10 00:51:36.837000 audit: BPF prog-id=71 op=UNLOAD Sep 10 00:51:36.838000 audit: BPF prog-id=70 op=UNLOAD Sep 10 00:51:36.838000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.838000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.838000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.838000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.838000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.838000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.838000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.838000 audit[1745]: AVC avc: denied { perfmon } for pid=1745 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.838000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.838000 audit[1745]: AVC avc: denied { bpf } for pid=1745 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.838000 audit: BPF prog-id=72 op=LOAD Sep 10 00:51:36.838000 audit[1745]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003de638 items=0 ppid=1733 pid=1745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.838000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330656361356239353936336431356438316366656438326265396164 Sep 10 00:51:36.840001 kubelet[1619]: E0910 00:51:36.838510 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:36.840457 env[1206]: time="2025-09-10T00:51:36.840415492Z" level=info msg="CreateContainer within sandbox \"41f06ab0bd96cd51ca29aa2ea4636535ef88d84a5e71f3613243e7ee1ba88faa\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Sep 10 00:51:36.854080 env[1206]: time="2025-09-10T00:51:36.854030555Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:fec3f691a145cb26ff55e4af388500b7,Namespace:kube-system,Attempt:0,} returns sandbox id \"d44aa3a83e83533c422a3e1b829e253d1e9ba4f5348fad7b080ff04e41727c09\"" Sep 10 00:51:36.854616 kubelet[1619]: E0910 00:51:36.854570 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:36.855917 env[1206]: time="2025-09-10T00:51:36.855878864Z" level=info msg="CreateContainer within sandbox \"d44aa3a83e83533c422a3e1b829e253d1e9ba4f5348fad7b080ff04e41727c09\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Sep 10 00:51:36.864269 env[1206]: time="2025-09-10T00:51:36.864213680Z" level=info msg="CreateContainer within sandbox \"41f06ab0bd96cd51ca29aa2ea4636535ef88d84a5e71f3613243e7ee1ba88faa\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"4feb50788a825611e68764771f1b63bb67dd0e98eb7748272e25e6a71cf44753\"" Sep 10 00:51:36.865015 env[1206]: time="2025-09-10T00:51:36.864986756Z" level=info msg="StartContainer for \"4feb50788a825611e68764771f1b63bb67dd0e98eb7748272e25e6a71cf44753\"" Sep 10 00:51:36.868154 env[1206]: time="2025-09-10T00:51:36.868102835Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:5dc878868de11c6196259ae42039f4ff,Namespace:kube-system,Attempt:0,} returns sandbox id \"c0eca5b95963d15d81cfed82be9ad818dcff694c368c6f47e70f114a344e9967\"" Sep 10 00:51:36.868859 kubelet[1619]: E0910 00:51:36.868833 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:36.870291 env[1206]: time="2025-09-10T00:51:36.870267092Z" level=info msg="CreateContainer within sandbox \"c0eca5b95963d15d81cfed82be9ad818dcff694c368c6f47e70f114a344e9967\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Sep 10 00:51:36.880202 systemd[1]: Started cri-containerd-4feb50788a825611e68764771f1b63bb67dd0e98eb7748272e25e6a71cf44753.scope. Sep 10 00:51:36.880542 env[1206]: time="2025-09-10T00:51:36.880510946Z" level=info msg="CreateContainer within sandbox \"d44aa3a83e83533c422a3e1b829e253d1e9ba4f5348fad7b080ff04e41727c09\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"32af2e2168502f4b9bfca6fa7603da4c6d8e25f2307a0d03e03e3730d967130d\"" Sep 10 00:51:36.881903 env[1206]: time="2025-09-10T00:51:36.881879665Z" level=info msg="StartContainer for \"32af2e2168502f4b9bfca6fa7603da4c6d8e25f2307a0d03e03e3730d967130d\"" Sep 10 00:51:36.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit: BPF prog-id=73 op=LOAD Sep 10 00:51:36.895000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1675 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.895000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466656235303738386138323536313165363837363437373166316236 Sep 10 00:51:36.895000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1675 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.895000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466656235303738386138323536313165363837363437373166316236 Sep 10 00:51:36.895000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.895000 audit: BPF prog-id=74 op=LOAD Sep 10 00:51:36.895000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000225670 items=0 ppid=1675 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.895000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466656235303738386138323536313165363837363437373166316236 Sep 10 00:51:36.896000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.896000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.896000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.896000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.896000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.896000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.896000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.896000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.896000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.896000 audit: BPF prog-id=75 op=LOAD Sep 10 00:51:36.896000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002256b8 items=0 ppid=1675 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.896000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466656235303738386138323536313165363837363437373166316236 Sep 10 00:51:36.896000 audit: BPF prog-id=75 op=UNLOAD Sep 10 00:51:36.896000 audit: BPF prog-id=74 op=UNLOAD Sep 10 00:51:36.896000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.896000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.896000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.896000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.896000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.896000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.896000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.896000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.896000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.896000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.896000 audit: BPF prog-id=76 op=LOAD Sep 10 00:51:36.896000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000225ac8 items=0 ppid=1675 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.896000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466656235303738386138323536313165363837363437373166316236 Sep 10 00:51:36.897954 env[1206]: time="2025-09-10T00:51:36.897821483Z" level=info msg="CreateContainer within sandbox \"c0eca5b95963d15d81cfed82be9ad818dcff694c368c6f47e70f114a344e9967\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"24bea6074115c2dce4b5016bc776e25fff3c290055b6699837973b59386e5a1f\"" Sep 10 00:51:36.898755 env[1206]: time="2025-09-10T00:51:36.898567067Z" level=info msg="StartContainer for \"24bea6074115c2dce4b5016bc776e25fff3c290055b6699837973b59386e5a1f\"" Sep 10 00:51:36.905559 systemd[1]: Started cri-containerd-32af2e2168502f4b9bfca6fa7603da4c6d8e25f2307a0d03e03e3730d967130d.scope. Sep 10 00:51:36.916742 systemd[1]: Started cri-containerd-24bea6074115c2dce4b5016bc776e25fff3c290055b6699837973b59386e5a1f.scope. Sep 10 00:51:36.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit: BPF prog-id=77 op=LOAD Sep 10 00:51:36.919000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1827]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1703 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332616632653231363835303266346239626663613666613736303364 Sep 10 00:51:36.919000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1827]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1703 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332616632653231363835303266346239626663613666613736303364 Sep 10 00:51:36.919000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit: BPF prog-id=78 op=LOAD Sep 10 00:51:36.919000 audit[1827]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00028bd20 items=0 ppid=1703 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332616632653231363835303266346239626663613666613736303364 Sep 10 00:51:36.919000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.919000 audit: BPF prog-id=79 op=LOAD Sep 10 00:51:36.919000 audit[1827]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00028bd68 items=0 ppid=1703 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332616632653231363835303266346239626663613666613736303364 Sep 10 00:51:36.920000 audit: BPF prog-id=79 op=UNLOAD Sep 10 00:51:36.920000 audit: BPF prog-id=78 op=UNLOAD Sep 10 00:51:36.920000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.920000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.920000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.920000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.920000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.920000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.920000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.920000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.920000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.920000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.920000 audit: BPF prog-id=80 op=LOAD Sep 10 00:51:36.920000 audit[1827]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000390178 items=0 ppid=1703 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332616632653231363835303266346239626663613666613736303364 Sep 10 00:51:36.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit: BPF prog-id=81 op=LOAD Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1733 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234626561363037343131356332646365346235303136626337373665 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=1733 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234626561363037343131356332646365346235303136626337373665 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit: BPF prog-id=82 op=LOAD Sep 10 00:51:36.930000 audit[1847]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0002f4050 items=0 ppid=1733 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234626561363037343131356332646365346235303136626337373665 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit: BPF prog-id=83 op=LOAD Sep 10 00:51:36.930000 audit[1847]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0002f4098 items=0 ppid=1733 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234626561363037343131356332646365346235303136626337373665 Sep 10 00:51:36.930000 audit: BPF prog-id=83 op=UNLOAD Sep 10 00:51:36.930000 audit: BPF prog-id=82 op=UNLOAD Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { perfmon } for pid=1847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit[1847]: AVC avc: denied { bpf } for pid=1847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:36.930000 audit: BPF prog-id=84 op=LOAD Sep 10 00:51:36.930000 audit[1847]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0002f44a8 items=0 ppid=1733 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:36.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234626561363037343131356332646365346235303136626337373665 Sep 10 00:51:36.936089 env[1206]: time="2025-09-10T00:51:36.936047309Z" level=info msg="StartContainer for \"4feb50788a825611e68764771f1b63bb67dd0e98eb7748272e25e6a71cf44753\" returns successfully" Sep 10 00:51:36.954563 env[1206]: time="2025-09-10T00:51:36.954514323Z" level=info msg="StartContainer for \"32af2e2168502f4b9bfca6fa7603da4c6d8e25f2307a0d03e03e3730d967130d\" returns successfully" Sep 10 00:51:36.968559 env[1206]: time="2025-09-10T00:51:36.968504497Z" level=info msg="StartContainer for \"24bea6074115c2dce4b5016bc776e25fff3c290055b6699837973b59386e5a1f\" returns successfully" Sep 10 00:51:37.113727 kubelet[1619]: I0910 00:51:37.113621 1619 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Sep 10 00:51:37.340632 kubelet[1619]: E0910 00:51:37.340552 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:37.341891 kubelet[1619]: E0910 00:51:37.341844 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:37.343758 kubelet[1619]: E0910 00:51:37.343723 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:38.000000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:51:38.003171 kernel: kauditd_printk_skb: 557 callbacks suppressed Sep 10 00:51:38.003216 kernel: audit: type=1400 audit(1757465498.000:550): avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:51:38.000000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000afc4e0 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:51:38.011232 kernel: audit: type=1300 audit(1757465498.000:550): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000afc4e0 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:51:38.011264 kernel: audit: type=1327 audit(1757465498.000:550): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:51:38.000000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:51:38.015024 kernel: audit: type=1400 audit(1757465498.000:551): avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:51:38.000000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:51:38.018385 kernel: audit: type=1300 audit(1757465498.000:551): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0003ff7c0 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:51:38.000000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0003ff7c0 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:51:38.023023 kernel: audit: type=1327 audit(1757465498.000:551): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:51:38.000000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:51:38.109000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:51:38.118775 kernel: audit: type=1400 audit(1757465498.109:552): avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:51:38.118900 kernel: audit: type=1300 audit(1757465498.109:552): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0038454c0 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 key=(null) Sep 10 00:51:38.109000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0038454c0 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 key=(null) Sep 10 00:51:38.123181 kernel: audit: type=1327 audit(1757465498.109:552): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 10 00:51:38.109000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 10 00:51:38.128530 kernel: audit: type=1400 audit(1757465498.109:553): avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:51:38.109000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:51:38.109000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00756f4a0 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 key=(null) Sep 10 00:51:38.109000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 10 00:51:38.109000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7306 scontext=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:51:38.109000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00756f500 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 key=(null) Sep 10 00:51:38.109000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 10 00:51:38.109000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:51:38.109000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c00756f530 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 key=(null) Sep 10 00:51:38.109000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 10 00:51:38.109000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:51:38.109000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4a a1=c002d9a420 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 key=(null) Sep 10 00:51:38.109000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 10 00:51:38.109000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:51:38.109000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c00756f740 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 key=(null) Sep 10 00:51:38.109000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 10 00:51:38.138511 kubelet[1619]: E0910 00:51:38.138474 1619 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Sep 10 00:51:38.298043 kubelet[1619]: I0910 00:51:38.297923 1619 apiserver.go:52] "Watching apiserver" Sep 10 00:51:38.321936 kubelet[1619]: I0910 00:51:38.321902 1619 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Sep 10 00:51:38.345830 kubelet[1619]: E0910 00:51:38.345798 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:38.387063 kubelet[1619]: I0910 00:51:38.387021 1619 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Sep 10 00:51:38.387275 kubelet[1619]: E0910 00:51:38.387257 1619 kubelet_node_status.go:535] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Sep 10 00:51:40.235058 systemd[1]: Reloading. Sep 10 00:51:40.298508 /usr/lib/systemd/system-generators/torcx-generator[1935]: time="2025-09-10T00:51:40Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 10 00:51:40.298534 /usr/lib/systemd/system-generators/torcx-generator[1935]: time="2025-09-10T00:51:40Z" level=info msg="torcx already run" Sep 10 00:51:40.458213 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 10 00:51:40.458234 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 10 00:51:40.480038 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 10 00:51:40.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.563000 audit: BPF prog-id=85 op=LOAD Sep 10 00:51:40.563000 audit: BPF prog-id=69 op=UNLOAD Sep 10 00:51:40.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.563000 audit: BPF prog-id=86 op=LOAD Sep 10 00:51:40.563000 audit: BPF prog-id=61 op=UNLOAD Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit: BPF prog-id=87 op=LOAD Sep 10 00:51:40.565000 audit: BPF prog-id=46 op=UNLOAD Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit: BPF prog-id=88 op=LOAD Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.565000 audit: BPF prog-id=89 op=LOAD Sep 10 00:51:40.565000 audit: BPF prog-id=47 op=UNLOAD Sep 10 00:51:40.565000 audit: BPF prog-id=48 op=UNLOAD Sep 10 00:51:40.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.566000 audit: BPF prog-id=90 op=LOAD Sep 10 00:51:40.566000 audit: BPF prog-id=77 op=UNLOAD Sep 10 00:51:40.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.567000 audit: BPF prog-id=91 op=LOAD Sep 10 00:51:40.567000 audit: BPF prog-id=81 op=UNLOAD Sep 10 00:51:40.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.568000 audit: BPF prog-id=92 op=LOAD Sep 10 00:51:40.568000 audit: BPF prog-id=49 op=UNLOAD Sep 10 00:51:40.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.568000 audit: BPF prog-id=93 op=LOAD Sep 10 00:51:40.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.568000 audit: BPF prog-id=94 op=LOAD Sep 10 00:51:40.568000 audit: BPF prog-id=50 op=UNLOAD Sep 10 00:51:40.568000 audit: BPF prog-id=51 op=UNLOAD Sep 10 00:51:40.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.569000 audit: BPF prog-id=95 op=LOAD Sep 10 00:51:40.569000 audit: BPF prog-id=52 op=UNLOAD Sep 10 00:51:40.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.570000 audit: BPF prog-id=96 op=LOAD Sep 10 00:51:40.570000 audit: BPF prog-id=73 op=UNLOAD Sep 10 00:51:40.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.570000 audit: BPF prog-id=97 op=LOAD Sep 10 00:51:40.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.570000 audit: BPF prog-id=98 op=LOAD Sep 10 00:51:40.570000 audit: BPF prog-id=53 op=UNLOAD Sep 10 00:51:40.570000 audit: BPF prog-id=54 op=UNLOAD Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit: BPF prog-id=99 op=LOAD Sep 10 00:51:40.571000 audit: BPF prog-id=55 op=UNLOAD Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit: BPF prog-id=100 op=LOAD Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.571000 audit: BPF prog-id=101 op=LOAD Sep 10 00:51:40.572000 audit: BPF prog-id=56 op=UNLOAD Sep 10 00:51:40.572000 audit: BPF prog-id=57 op=UNLOAD Sep 10 00:51:40.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.573000 audit: BPF prog-id=102 op=LOAD Sep 10 00:51:40.573000 audit: BPF prog-id=58 op=UNLOAD Sep 10 00:51:40.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.574000 audit: BPF prog-id=103 op=LOAD Sep 10 00:51:40.574000 audit: BPF prog-id=65 op=UNLOAD Sep 10 00:51:40.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.575000 audit: BPF prog-id=104 op=LOAD Sep 10 00:51:40.575000 audit: BPF prog-id=59 op=UNLOAD Sep 10 00:51:40.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.575000 audit: BPF prog-id=105 op=LOAD Sep 10 00:51:40.575000 audit: BPF prog-id=60 op=UNLOAD Sep 10 00:51:40.586212 systemd[1]: Stopping kubelet.service... Sep 10 00:51:40.612874 systemd[1]: kubelet.service: Deactivated successfully. Sep 10 00:51:40.613039 systemd[1]: Stopped kubelet.service. Sep 10 00:51:40.611000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:40.614558 systemd[1]: Starting kubelet.service... Sep 10 00:51:40.704855 systemd[1]: Started kubelet.service. Sep 10 00:51:40.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:40.744377 kubelet[1980]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 10 00:51:40.744377 kubelet[1980]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Sep 10 00:51:40.744377 kubelet[1980]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 10 00:51:40.744763 kubelet[1980]: I0910 00:51:40.744453 1980 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 10 00:51:40.751520 kubelet[1980]: I0910 00:51:40.751488 1980 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Sep 10 00:51:40.751687 kubelet[1980]: I0910 00:51:40.751673 1980 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 10 00:51:40.751989 kubelet[1980]: I0910 00:51:40.751973 1980 server.go:934] "Client rotation is on, will bootstrap in background" Sep 10 00:51:40.753346 kubelet[1980]: I0910 00:51:40.753330 1980 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Sep 10 00:51:40.755117 kubelet[1980]: I0910 00:51:40.755092 1980 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 10 00:51:40.757901 kubelet[1980]: E0910 00:51:40.757861 1980 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 10 00:51:40.757901 kubelet[1980]: I0910 00:51:40.757894 1980 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 10 00:51:40.761740 kubelet[1980]: I0910 00:51:40.761719 1980 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 10 00:51:40.761834 kubelet[1980]: I0910 00:51:40.761814 1980 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Sep 10 00:51:40.761977 kubelet[1980]: I0910 00:51:40.761950 1980 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 10 00:51:40.762317 kubelet[1980]: I0910 00:51:40.761974 1980 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 10 00:51:40.762317 kubelet[1980]: I0910 00:51:40.762312 1980 topology_manager.go:138] "Creating topology manager with none policy" Sep 10 00:51:40.762530 kubelet[1980]: I0910 00:51:40.762320 1980 container_manager_linux.go:300] "Creating device plugin manager" Sep 10 00:51:40.762530 kubelet[1980]: I0910 00:51:40.762343 1980 state_mem.go:36] "Initialized new in-memory state store" Sep 10 00:51:40.762530 kubelet[1980]: I0910 00:51:40.762433 1980 kubelet.go:408] "Attempting to sync node with API server" Sep 10 00:51:40.762530 kubelet[1980]: I0910 00:51:40.762445 1980 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 10 00:51:40.762530 kubelet[1980]: I0910 00:51:40.762467 1980 kubelet.go:314] "Adding apiserver pod source" Sep 10 00:51:40.763654 kubelet[1980]: I0910 00:51:40.763613 1980 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 10 00:51:40.764226 kubelet[1980]: I0910 00:51:40.764195 1980 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 10 00:51:40.765024 kubelet[1980]: I0910 00:51:40.764994 1980 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 10 00:51:40.765538 kubelet[1980]: I0910 00:51:40.765517 1980 server.go:1274] "Started kubelet" Sep 10 00:51:40.766000 audit[1980]: AVC avc: denied { mac_admin } for pid=1980 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.766000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 10 00:51:40.766000 audit[1980]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000aa16b0 a1=c000dba1b0 a2=c000aa1680 a3=25 items=0 ppid=1 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:40.766000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 10 00:51:40.766000 audit[1980]: AVC avc: denied { mac_admin } for pid=1980 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.766000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 10 00:51:40.766000 audit[1980]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000aa2840 a1=c000dba1c8 a2=c000aa1740 a3=25 items=0 ppid=1 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:40.766000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 10 00:51:40.768319 kubelet[1980]: I0910 00:51:40.768012 1980 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Sep 10 00:51:40.768319 kubelet[1980]: I0910 00:51:40.768047 1980 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Sep 10 00:51:40.768319 kubelet[1980]: I0910 00:51:40.768074 1980 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 10 00:51:40.768709 kubelet[1980]: I0910 00:51:40.768679 1980 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Sep 10 00:51:40.769169 kubelet[1980]: I0910 00:51:40.768933 1980 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 10 00:51:40.769169 kubelet[1980]: I0910 00:51:40.769168 1980 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 10 00:51:40.769367 kubelet[1980]: I0910 00:51:40.769342 1980 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 10 00:51:40.770231 kubelet[1980]: I0910 00:51:40.770218 1980 server.go:449] "Adding debug handlers to kubelet server" Sep 10 00:51:40.771358 kubelet[1980]: I0910 00:51:40.771334 1980 volume_manager.go:289] "Starting Kubelet Volume Manager" Sep 10 00:51:40.771574 kubelet[1980]: E0910 00:51:40.771549 1980 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:51:40.775773 kubelet[1980]: I0910 00:51:40.775737 1980 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Sep 10 00:51:40.775938 kubelet[1980]: I0910 00:51:40.775873 1980 reconciler.go:26] "Reconciler: start to sync state" Sep 10 00:51:40.777500 kubelet[1980]: E0910 00:51:40.777473 1980 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 10 00:51:40.777585 kubelet[1980]: I0910 00:51:40.777565 1980 factory.go:221] Registration of the containerd container factory successfully Sep 10 00:51:40.777684 kubelet[1980]: I0910 00:51:40.777670 1980 factory.go:221] Registration of the systemd container factory successfully Sep 10 00:51:40.777818 kubelet[1980]: I0910 00:51:40.777801 1980 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 10 00:51:40.784586 kubelet[1980]: I0910 00:51:40.784551 1980 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 10 00:51:40.785720 kubelet[1980]: I0910 00:51:40.785703 1980 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 10 00:51:40.785720 kubelet[1980]: I0910 00:51:40.785721 1980 status_manager.go:217] "Starting to sync pod status with apiserver" Sep 10 00:51:40.785810 kubelet[1980]: I0910 00:51:40.785739 1980 kubelet.go:2321] "Starting kubelet main sync loop" Sep 10 00:51:40.785810 kubelet[1980]: E0910 00:51:40.785782 1980 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 10 00:51:40.806879 kubelet[1980]: I0910 00:51:40.806831 1980 cpu_manager.go:214] "Starting CPU manager" policy="none" Sep 10 00:51:40.806879 kubelet[1980]: I0910 00:51:40.806853 1980 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Sep 10 00:51:40.806879 kubelet[1980]: I0910 00:51:40.806879 1980 state_mem.go:36] "Initialized new in-memory state store" Sep 10 00:51:40.807092 kubelet[1980]: I0910 00:51:40.807000 1980 state_mem.go:88] "Updated default CPUSet" cpuSet="" Sep 10 00:51:40.807092 kubelet[1980]: I0910 00:51:40.807008 1980 state_mem.go:96] "Updated CPUSet assignments" assignments={} Sep 10 00:51:40.807092 kubelet[1980]: I0910 00:51:40.807026 1980 policy_none.go:49] "None policy: Start" Sep 10 00:51:40.807687 kubelet[1980]: I0910 00:51:40.807670 1980 memory_manager.go:170] "Starting memorymanager" policy="None" Sep 10 00:51:40.807687 kubelet[1980]: I0910 00:51:40.807688 1980 state_mem.go:35] "Initializing new in-memory state store" Sep 10 00:51:40.807836 kubelet[1980]: I0910 00:51:40.807821 1980 state_mem.go:75] "Updated machine memory state" Sep 10 00:51:40.811272 kubelet[1980]: I0910 00:51:40.811254 1980 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 10 00:51:40.809000 audit[1980]: AVC avc: denied { mac_admin } for pid=1980 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:40.809000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 10 00:51:40.809000 audit[1980]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b521b0 a1=c0008134a0 a2=c000b52180 a3=25 items=0 ppid=1 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:40.809000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 10 00:51:40.811697 kubelet[1980]: I0910 00:51:40.811678 1980 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Sep 10 00:51:40.811888 kubelet[1980]: I0910 00:51:40.811876 1980 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 10 00:51:40.811999 kubelet[1980]: I0910 00:51:40.811960 1980 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 10 00:51:40.812475 kubelet[1980]: I0910 00:51:40.812311 1980 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 10 00:51:40.916288 kubelet[1980]: I0910 00:51:40.916256 1980 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Sep 10 00:51:40.976415 kubelet[1980]: I0910 00:51:40.976366 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/38e1d04d18527f8e0aef3bed809497b6-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"38e1d04d18527f8e0aef3bed809497b6\") " pod="kube-system/kube-apiserver-localhost" Sep 10 00:51:40.976415 kubelet[1980]: I0910 00:51:40.976398 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/fec3f691a145cb26ff55e4af388500b7-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"fec3f691a145cb26ff55e4af388500b7\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 00:51:40.976415 kubelet[1980]: I0910 00:51:40.976415 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fec3f691a145cb26ff55e4af388500b7-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"fec3f691a145cb26ff55e4af388500b7\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 00:51:40.976750 kubelet[1980]: I0910 00:51:40.976430 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/fec3f691a145cb26ff55e4af388500b7-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"fec3f691a145cb26ff55e4af388500b7\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 00:51:40.976750 kubelet[1980]: I0910 00:51:40.976458 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/38e1d04d18527f8e0aef3bed809497b6-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"38e1d04d18527f8e0aef3bed809497b6\") " pod="kube-system/kube-apiserver-localhost" Sep 10 00:51:40.976750 kubelet[1980]: I0910 00:51:40.976480 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/fec3f691a145cb26ff55e4af388500b7-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"fec3f691a145cb26ff55e4af388500b7\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 00:51:40.976750 kubelet[1980]: I0910 00:51:40.976496 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/fec3f691a145cb26ff55e4af388500b7-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"fec3f691a145cb26ff55e4af388500b7\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 00:51:40.976750 kubelet[1980]: I0910 00:51:40.976572 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/5dc878868de11c6196259ae42039f4ff-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"5dc878868de11c6196259ae42039f4ff\") " pod="kube-system/kube-scheduler-localhost" Sep 10 00:51:40.976865 kubelet[1980]: I0910 00:51:40.976665 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/38e1d04d18527f8e0aef3bed809497b6-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"38e1d04d18527f8e0aef3bed809497b6\") " pod="kube-system/kube-apiserver-localhost" Sep 10 00:51:41.362450 kubelet[1980]: E0910 00:51:41.362325 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:41.362673 kubelet[1980]: E0910 00:51:41.362643 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:41.363355 kubelet[1980]: E0910 00:51:41.363331 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:41.364963 kubelet[1980]: I0910 00:51:41.364937 1980 kubelet_node_status.go:111] "Node was previously registered" node="localhost" Sep 10 00:51:41.365051 kubelet[1980]: I0910 00:51:41.365017 1980 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Sep 10 00:51:41.764665 kubelet[1980]: I0910 00:51:41.764626 1980 apiserver.go:52] "Watching apiserver" Sep 10 00:51:41.776174 kubelet[1980]: I0910 00:51:41.776150 1980 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Sep 10 00:51:41.797064 kubelet[1980]: E0910 00:51:41.795305 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:41.797064 kubelet[1980]: E0910 00:51:41.795372 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:41.803824 kubelet[1980]: E0910 00:51:41.803790 1980 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Sep 10 00:51:41.803980 kubelet[1980]: E0910 00:51:41.803959 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:41.820921 kubelet[1980]: I0910 00:51:41.820852 1980 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=0.820835255 podStartE2EDuration="820.835255ms" podCreationTimestamp="2025-09-10 00:51:41 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-10 00:51:41.814831792 +0000 UTC m=+1.105995054" watchObservedRunningTime="2025-09-10 00:51:41.820835255 +0000 UTC m=+1.111998507" Sep 10 00:51:41.821128 kubelet[1980]: I0910 00:51:41.820956 1980 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=0.82095228 podStartE2EDuration="820.95228ms" podCreationTimestamp="2025-09-10 00:51:41 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-10 00:51:41.820723861 +0000 UTC m=+1.111887113" watchObservedRunningTime="2025-09-10 00:51:41.82095228 +0000 UTC m=+1.112115542" Sep 10 00:51:41.834376 kubelet[1980]: I0910 00:51:41.834307 1980 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=0.834284493 podStartE2EDuration="834.284493ms" podCreationTimestamp="2025-09-10 00:51:41 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-10 00:51:41.827149316 +0000 UTC m=+1.118312578" watchObservedRunningTime="2025-09-10 00:51:41.834284493 +0000 UTC m=+1.125447755" Sep 10 00:51:42.797121 kubelet[1980]: E0910 00:51:42.797063 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:42.797121 kubelet[1980]: E0910 00:51:42.797115 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:43.818265 kernel: kauditd_printk_skb: 272 callbacks suppressed Sep 10 00:51:43.818398 kernel: audit: type=1400 audit(1757465503.816:807): avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:51:43.816000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:51:43.816000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0015050e0 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:51:43.825704 kernel: audit: type=1300 audit(1757465503.816:807): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0015050e0 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:51:43.825748 kernel: audit: type=1327 audit(1757465503.816:807): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:51:43.816000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:51:43.829490 kernel: audit: type=1400 audit(1757465503.816:808): avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:51:43.816000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:51:43.832848 kernel: audit: type=1300 audit(1757465503.816:808): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001505100 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:51:43.816000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001505100 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:51:43.837382 kernel: audit: type=1327 audit(1757465503.816:808): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:51:43.816000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:51:43.841220 kernel: audit: type=1400 audit(1757465503.817:809): avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:51:43.817000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:51:43.844591 kernel: audit: type=1300 audit(1757465503.817:809): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a53e00 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:51:43.817000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a53e00 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:51:43.849177 kernel: audit: type=1327 audit(1757465503.817:809): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:51:43.817000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:51:43.852961 kernel: audit: type=1400 audit(1757465503.817:810): avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:51:43.817000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:51:43.817000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0015ca6e0 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:51:43.817000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:51:45.587000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520971 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 10 00:51:45.587000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a853c0 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:51:45.587000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:51:46.063512 kubelet[1980]: I0910 00:51:46.063483 1980 kuberuntime_manager.go:1635] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Sep 10 00:51:46.063939 env[1206]: time="2025-09-10T00:51:46.063811513Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Sep 10 00:51:46.064196 kubelet[1980]: I0910 00:51:46.064036 1980 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Sep 10 00:51:46.534149 systemd[1]: Created slice kubepods-besteffort-pod992ef1d9_3f9a_4e9a_98d3_94ebc33d5f72.slice. Sep 10 00:51:46.619315 kubelet[1980]: I0910 00:51:46.619278 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/992ef1d9-3f9a-4e9a-98d3-94ebc33d5f72-lib-modules\") pod \"kube-proxy-vqhtb\" (UID: \"992ef1d9-3f9a-4e9a-98d3-94ebc33d5f72\") " pod="kube-system/kube-proxy-vqhtb" Sep 10 00:51:46.619315 kubelet[1980]: I0910 00:51:46.619316 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-krkvv\" (UniqueName: \"kubernetes.io/projected/992ef1d9-3f9a-4e9a-98d3-94ebc33d5f72-kube-api-access-krkvv\") pod \"kube-proxy-vqhtb\" (UID: \"992ef1d9-3f9a-4e9a-98d3-94ebc33d5f72\") " pod="kube-system/kube-proxy-vqhtb" Sep 10 00:51:46.619538 kubelet[1980]: I0910 00:51:46.619337 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/992ef1d9-3f9a-4e9a-98d3-94ebc33d5f72-kube-proxy\") pod \"kube-proxy-vqhtb\" (UID: \"992ef1d9-3f9a-4e9a-98d3-94ebc33d5f72\") " pod="kube-system/kube-proxy-vqhtb" Sep 10 00:51:46.619538 kubelet[1980]: I0910 00:51:46.619351 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/992ef1d9-3f9a-4e9a-98d3-94ebc33d5f72-xtables-lock\") pod \"kube-proxy-vqhtb\" (UID: \"992ef1d9-3f9a-4e9a-98d3-94ebc33d5f72\") " pod="kube-system/kube-proxy-vqhtb" Sep 10 00:51:46.725065 kubelet[1980]: I0910 00:51:46.725031 1980 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Sep 10 00:51:46.849586 kubelet[1980]: E0910 00:51:46.849489 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:46.850019 env[1206]: time="2025-09-10T00:51:46.849987108Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-vqhtb,Uid:992ef1d9-3f9a-4e9a-98d3-94ebc33d5f72,Namespace:kube-system,Attempt:0,}" Sep 10 00:51:47.028742 env[1206]: time="2025-09-10T00:51:47.027779148Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:51:47.028742 env[1206]: time="2025-09-10T00:51:47.027818771Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:51:47.028742 env[1206]: time="2025-09-10T00:51:47.027831308Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:51:47.028742 env[1206]: time="2025-09-10T00:51:47.027942944Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d40013034f4adcc9654fbce502221ccaeaf57b9424bc8220ba1dafced863e65b pid=2035 runtime=io.containerd.runc.v2 Sep 10 00:51:47.048612 systemd[1]: Started cri-containerd-d40013034f4adcc9654fbce502221ccaeaf57b9424bc8220ba1dafced863e65b.scope. Sep 10 00:51:47.053221 systemd[1]: Created slice kubepods-besteffort-pod9a5350d5_9dca_4314_b42a_9fc0f7a25ac5.slice. Sep 10 00:51:47.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit: BPF prog-id=106 op=LOAD Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2035 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434303031333033346634616463633936353466626365353032323231 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2035 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434303031333033346634616463633936353466626365353032323231 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit: BPF prog-id=107 op=LOAD Sep 10 00:51:47.091000 audit[2044]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000185470 items=0 ppid=2035 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434303031333033346634616463633936353466626365353032323231 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit: BPF prog-id=108 op=LOAD Sep 10 00:51:47.091000 audit[2044]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001854b8 items=0 ppid=2035 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434303031333033346634616463633936353466626365353032323231 Sep 10 00:51:47.091000 audit: BPF prog-id=108 op=UNLOAD Sep 10 00:51:47.091000 audit: BPF prog-id=107 op=UNLOAD Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { perfmon } for pid=2044 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit[2044]: AVC avc: denied { bpf } for pid=2044 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.091000 audit: BPF prog-id=109 op=LOAD Sep 10 00:51:47.091000 audit[2044]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001858c8 items=0 ppid=2035 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434303031333033346634616463633936353466626365353032323231 Sep 10 00:51:47.102466 env[1206]: time="2025-09-10T00:51:47.102356297Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-vqhtb,Uid:992ef1d9-3f9a-4e9a-98d3-94ebc33d5f72,Namespace:kube-system,Attempt:0,} returns sandbox id \"d40013034f4adcc9654fbce502221ccaeaf57b9424bc8220ba1dafced863e65b\"" Sep 10 00:51:47.103080 kubelet[1980]: E0910 00:51:47.103050 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:47.104885 env[1206]: time="2025-09-10T00:51:47.104862504Z" level=info msg="CreateContainer within sandbox \"d40013034f4adcc9654fbce502221ccaeaf57b9424bc8220ba1dafced863e65b\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Sep 10 00:51:47.122374 kubelet[1980]: I0910 00:51:47.122321 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/9a5350d5-9dca-4314-b42a-9fc0f7a25ac5-var-lib-calico\") pod \"tigera-operator-58fc44c59b-lzgdv\" (UID: \"9a5350d5-9dca-4314-b42a-9fc0f7a25ac5\") " pod="tigera-operator/tigera-operator-58fc44c59b-lzgdv" Sep 10 00:51:47.122374 kubelet[1980]: I0910 00:51:47.122358 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fwv2d\" (UniqueName: \"kubernetes.io/projected/9a5350d5-9dca-4314-b42a-9fc0f7a25ac5-kube-api-access-fwv2d\") pod \"tigera-operator-58fc44c59b-lzgdv\" (UID: \"9a5350d5-9dca-4314-b42a-9fc0f7a25ac5\") " pod="tigera-operator/tigera-operator-58fc44c59b-lzgdv" Sep 10 00:51:47.122986 env[1206]: time="2025-09-10T00:51:47.122943264Z" level=info msg="CreateContainer within sandbox \"d40013034f4adcc9654fbce502221ccaeaf57b9424bc8220ba1dafced863e65b\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"41f42adc8353c51fe65d317b79308f85b22762ffea7a093df6fb916ae90a7d4f\"" Sep 10 00:51:47.123512 env[1206]: time="2025-09-10T00:51:47.123484679Z" level=info msg="StartContainer for \"41f42adc8353c51fe65d317b79308f85b22762ffea7a093df6fb916ae90a7d4f\"" Sep 10 00:51:47.136659 systemd[1]: Started cri-containerd-41f42adc8353c51fe65d317b79308f85b22762ffea7a093df6fb916ae90a7d4f.scope. Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fdcfa243a88 items=0 ppid=2035 pid=2075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431663432616463383335336335316665363564333137623739333038 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit: BPF prog-id=110 op=LOAD Sep 10 00:51:47.148000 audit[2075]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00030ccc8 items=0 ppid=2035 pid=2075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431663432616463383335336335316665363564333137623739333038 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit: BPF prog-id=111 op=LOAD Sep 10 00:51:47.148000 audit[2075]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00030cd18 items=0 ppid=2035 pid=2075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431663432616463383335336335316665363564333137623739333038 Sep 10 00:51:47.148000 audit: BPF prog-id=111 op=UNLOAD Sep 10 00:51:47.148000 audit: BPF prog-id=110 op=UNLOAD Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { perfmon } for pid=2075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit[2075]: AVC avc: denied { bpf } for pid=2075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.148000 audit: BPF prog-id=112 op=LOAD Sep 10 00:51:47.148000 audit[2075]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00030cda8 items=0 ppid=2035 pid=2075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431663432616463383335336335316665363564333137623739333038 Sep 10 00:51:47.161441 env[1206]: time="2025-09-10T00:51:47.161391610Z" level=info msg="StartContainer for \"41f42adc8353c51fe65d317b79308f85b22762ffea7a093df6fb916ae90a7d4f\" returns successfully" Sep 10 00:51:47.255000 audit[2138]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2138 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.255000 audit[2138]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd736b0740 a2=0 a3=7ffd736b072c items=0 ppid=2086 pid=2138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.255000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 10 00:51:47.255000 audit[2139]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2139 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.255000 audit[2139]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffedd1da430 a2=0 a3=7ffedd1da41c items=0 ppid=2086 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.255000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 10 00:51:47.255000 audit[2141]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2141 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.255000 audit[2141]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffca8dad190 a2=0 a3=7ffca8dad17c items=0 ppid=2086 pid=2141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.255000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 10 00:51:47.257000 audit[2142]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=2142 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.257000 audit[2142]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffa1730ee0 a2=0 a3=7fffa1730ecc items=0 ppid=2086 pid=2142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.257000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 10 00:51:47.258000 audit[2143]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2143 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.258000 audit[2143]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd3ad4ca30 a2=0 a3=7ffd3ad4ca1c items=0 ppid=2086 pid=2143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.258000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 10 00:51:47.259000 audit[2144]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2144 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.259000 audit[2144]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd23a09750 a2=0 a3=7ffd23a0973c items=0 ppid=2086 pid=2144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.259000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 10 00:51:47.358000 audit[2145]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2145 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.358000 audit[2145]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd11768eb0 a2=0 a3=7ffd11768e9c items=0 ppid=2086 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.358000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 10 00:51:47.360879 env[1206]: time="2025-09-10T00:51:47.360820065Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-58fc44c59b-lzgdv,Uid:9a5350d5-9dca-4314-b42a-9fc0f7a25ac5,Namespace:tigera-operator,Attempt:0,}" Sep 10 00:51:47.360000 audit[2147]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2147 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.360000 audit[2147]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff336a6490 a2=0 a3=7fff336a647c items=0 ppid=2086 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.360000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Sep 10 00:51:47.364000 audit[2150]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2150 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.364000 audit[2150]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff8013bf70 a2=0 a3=7fff8013bf5c items=0 ppid=2086 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.364000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Sep 10 00:51:47.364000 audit[2151]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2151 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.364000 audit[2151]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdb15fa120 a2=0 a3=7ffdb15fa10c items=0 ppid=2086 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.364000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 10 00:51:47.366000 audit[2153]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2153 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.366000 audit[2153]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff0ac73820 a2=0 a3=7fff0ac7380c items=0 ppid=2086 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.366000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 10 00:51:47.367000 audit[2154]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.367000 audit[2154]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd2cea4cd0 a2=0 a3=7ffd2cea4cbc items=0 ppid=2086 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.367000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 10 00:51:47.369000 audit[2156]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2156 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.369000 audit[2156]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffeba9b0ec0 a2=0 a3=7ffeba9b0eac items=0 ppid=2086 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.369000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 10 00:51:47.372000 audit[2159]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.372000 audit[2159]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffcf0f7d400 a2=0 a3=7ffcf0f7d3ec items=0 ppid=2086 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.372000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Sep 10 00:51:47.373000 audit[2160]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2160 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.373000 audit[2160]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffec8c01840 a2=0 a3=7ffec8c0182c items=0 ppid=2086 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.373000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 10 00:51:47.374000 audit[2162]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2162 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.374000 audit[2162]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdb248a570 a2=0 a3=7ffdb248a55c items=0 ppid=2086 pid=2162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.374000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 10 00:51:47.375000 audit[2163]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2163 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.375000 audit[2163]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffccfd14540 a2=0 a3=7ffccfd1452c items=0 ppid=2086 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.375000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 10 00:51:47.377000 audit[2165]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2165 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.377000 audit[2165]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd7884af80 a2=0 a3=7ffd7884af6c items=0 ppid=2086 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.377000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 10 00:51:47.380000 audit[2168]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.380000 audit[2168]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdfb6a7280 a2=0 a3=7ffdfb6a726c items=0 ppid=2086 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.380000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 10 00:51:47.383000 audit[2171]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.383000 audit[2171]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffeae4989d0 a2=0 a3=7ffeae4989bc items=0 ppid=2086 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.383000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 10 00:51:47.384000 audit[2172]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2172 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.384000 audit[2172]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcfa176d70 a2=0 a3=7ffcfa176d5c items=0 ppid=2086 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.384000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 10 00:51:47.386000 audit[2174]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.386000 audit[2174]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffe00b154d0 a2=0 a3=7ffe00b154bc items=0 ppid=2086 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.386000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 10 00:51:47.388000 audit[2177]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2177 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.388000 audit[2177]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd29ab9e50 a2=0 a3=7ffd29ab9e3c items=0 ppid=2086 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.388000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 10 00:51:47.389000 audit[2178]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2178 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.389000 audit[2178]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeda0ac9e0 a2=0 a3=7ffeda0ac9cc items=0 ppid=2086 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.389000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 10 00:51:47.391000 audit[2180]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:51:47.391000 audit[2180]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffe75257160 a2=0 a3=7ffe7525714c items=0 ppid=2086 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.391000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 10 00:51:47.410000 audit[2186]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:51:47.410000 audit[2186]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe4c242cc0 a2=0 a3=7ffe4c242cac items=0 ppid=2086 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.410000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:51:47.419000 audit[2186]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:51:47.419000 audit[2186]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffe4c242cc0 a2=0 a3=7ffe4c242cac items=0 ppid=2086 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.419000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:51:47.420000 audit[2191]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2191 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.420000 audit[2191]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fff79ab8f80 a2=0 a3=7fff79ab8f6c items=0 ppid=2086 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.420000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 10 00:51:47.421000 audit[2193]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2193 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.421000 audit[2193]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd72685870 a2=0 a3=7ffd7268585c items=0 ppid=2086 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.421000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Sep 10 00:51:47.424000 audit[2196]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2196 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.424000 audit[2196]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc7b8b9430 a2=0 a3=7ffc7b8b941c items=0 ppid=2086 pid=2196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.424000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Sep 10 00:51:47.425000 audit[2197]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2197 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.425000 audit[2197]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff84684b10 a2=0 a3=7fff84684afc items=0 ppid=2086 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.425000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 10 00:51:47.427000 audit[2199]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2199 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.427000 audit[2199]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff5eaeff60 a2=0 a3=7fff5eaeff4c items=0 ppid=2086 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.427000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 10 00:51:47.428000 audit[2200]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2200 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.428000 audit[2200]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc30efc540 a2=0 a3=7ffc30efc52c items=0 ppid=2086 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.428000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 10 00:51:47.430000 audit[2202]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2202 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.430000 audit[2202]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff84401550 a2=0 a3=7fff8440153c items=0 ppid=2086 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.430000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Sep 10 00:51:47.432000 audit[2205]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2205 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.432000 audit[2205]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffef83ea3a0 a2=0 a3=7ffef83ea38c items=0 ppid=2086 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.432000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 10 00:51:47.433000 audit[2206]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2206 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.433000 audit[2206]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff22d18ce0 a2=0 a3=7fff22d18ccc items=0 ppid=2086 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.433000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 10 00:51:47.435000 audit[2208]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2208 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.435000 audit[2208]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcf42927c0 a2=0 a3=7ffcf42927ac items=0 ppid=2086 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.435000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 10 00:51:47.436000 audit[2209]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2209 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.436000 audit[2209]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff113ed760 a2=0 a3=7fff113ed74c items=0 ppid=2086 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.436000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 10 00:51:47.437000 audit[2211]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2211 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.437000 audit[2211]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff592c9c40 a2=0 a3=7fff592c9c2c items=0 ppid=2086 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.437000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 10 00:51:47.441000 audit[2214]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2214 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.441000 audit[2214]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffd970a9a0 a2=0 a3=7fffd970a98c items=0 ppid=2086 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.441000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 10 00:51:47.443000 audit[2217]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.443000 audit[2217]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff90ebfef0 a2=0 a3=7fff90ebfedc items=0 ppid=2086 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.443000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Sep 10 00:51:47.444000 audit[2218]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2218 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.444000 audit[2218]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd39bf27a0 a2=0 a3=7ffd39bf278c items=0 ppid=2086 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.444000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 10 00:51:47.446000 audit[2220]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2220 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.446000 audit[2220]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fff6f959450 a2=0 a3=7fff6f95943c items=0 ppid=2086 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.446000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 10 00:51:47.448000 audit[2223]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2223 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.448000 audit[2223]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffe55c228e0 a2=0 a3=7ffe55c228cc items=0 ppid=2086 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.448000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 10 00:51:47.449000 audit[2224]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.449000 audit[2224]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffecc61cf70 a2=0 a3=7ffecc61cf5c items=0 ppid=2086 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.449000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 10 00:51:47.451000 audit[2226]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.451000 audit[2226]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7fffd96d7c50 a2=0 a3=7fffd96d7c3c items=0 ppid=2086 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.451000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 10 00:51:47.452000 audit[2227]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.452000 audit[2227]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffefd551d0 a2=0 a3=7fffefd551bc items=0 ppid=2086 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.452000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 10 00:51:47.454000 audit[2229]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2229 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.454000 audit[2229]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffc3cdf890 a2=0 a3=7fffc3cdf87c items=0 ppid=2086 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.454000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 10 00:51:47.456000 audit[2232]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2232 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:51:47.456000 audit[2232]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff70963620 a2=0 a3=7fff7096360c items=0 ppid=2086 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.456000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 10 00:51:47.459000 audit[2234]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 10 00:51:47.459000 audit[2234]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffea774a640 a2=0 a3=7ffea774a62c items=0 ppid=2086 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.459000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:51:47.459000 audit[2234]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 10 00:51:47.459000 audit[2234]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffea774a640 a2=0 a3=7ffea774a62c items=0 ppid=2086 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.459000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:51:47.679416 kubelet[1980]: E0910 00:51:47.679385 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:47.804236 kubelet[1980]: E0910 00:51:47.804176 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:47.804361 kubelet[1980]: E0910 00:51:47.804259 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:47.884526 env[1206]: time="2025-09-10T00:51:47.884454888Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:51:47.884526 env[1206]: time="2025-09-10T00:51:47.884491294Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:51:47.884526 env[1206]: time="2025-09-10T00:51:47.884500905Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:51:47.884728 env[1206]: time="2025-09-10T00:51:47.884678871Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/896c055143b23e54b4196e79c321be8e5d3e03904449f8b5f4c3a3651cec51dd pid=2243 runtime=io.containerd.runc.v2 Sep 10 00:51:47.898705 systemd[1]: Started cri-containerd-896c055143b23e54b4196e79c321be8e5d3e03904449f8b5f4c3a3651cec51dd.scope. Sep 10 00:51:47.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit: BPF prog-id=113 op=LOAD Sep 10 00:51:47.908000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[2253]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2243 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839366330353531343362323365353462343139366537396333323162 Sep 10 00:51:47.908000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[2253]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2243 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839366330353531343362323365353462343139366537396333323162 Sep 10 00:51:47.908000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit: BPF prog-id=114 op=LOAD Sep 10 00:51:47.908000 audit[2253]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c000321a50 items=0 ppid=2243 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839366330353531343362323365353462343139366537396333323162 Sep 10 00:51:47.908000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.908000 audit: BPF prog-id=115 op=LOAD Sep 10 00:51:47.908000 audit[2253]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c000321a98 items=0 ppid=2243 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839366330353531343362323365353462343139366537396333323162 Sep 10 00:51:47.908000 audit: BPF prog-id=115 op=UNLOAD Sep 10 00:51:47.908000 audit: BPF prog-id=114 op=UNLOAD Sep 10 00:51:47.909000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.909000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.909000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.909000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.909000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.909000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.909000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.909000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.909000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.909000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:47.909000 audit: BPF prog-id=116 op=LOAD Sep 10 00:51:47.909000 audit[2253]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c000321ea8 items=0 ppid=2243 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:47.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839366330353531343362323365353462343139366537396333323162 Sep 10 00:51:47.932105 env[1206]: time="2025-09-10T00:51:47.931997994Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-58fc44c59b-lzgdv,Uid:9a5350d5-9dca-4314-b42a-9fc0f7a25ac5,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"896c055143b23e54b4196e79c321be8e5d3e03904449f8b5f4c3a3651cec51dd\"" Sep 10 00:51:47.934562 env[1206]: time="2025-09-10T00:51:47.934536298Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\"" Sep 10 00:51:48.067889 kubelet[1980]: I0910 00:51:48.067803 1980 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-vqhtb" podStartSLOduration=2.067782091 podStartE2EDuration="2.067782091s" podCreationTimestamp="2025-09-10 00:51:46 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-10 00:51:48.067707855 +0000 UTC m=+7.358871147" watchObservedRunningTime="2025-09-10 00:51:48.067782091 +0000 UTC m=+7.358945373" Sep 10 00:51:48.728702 systemd[1]: run-containerd-runc-k8s.io-896c055143b23e54b4196e79c321be8e5d3e03904449f8b5f4c3a3651cec51dd-runc.Gl3qNg.mount: Deactivated successfully. Sep 10 00:51:49.713524 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2941700546.mount: Deactivated successfully. Sep 10 00:51:50.452065 env[1206]: time="2025-09-10T00:51:50.452009888Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:50.453724 env[1206]: time="2025-09-10T00:51:50.453695004Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1911afdd8478c6ca3036ff85614050d5d19acc0f0c3f6a5a7b3e34b38dd309c9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:50.455278 env[1206]: time="2025-09-10T00:51:50.455235948Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:50.456551 env[1206]: time="2025-09-10T00:51:50.456515038Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:00a7a9b62f9b9a4e0856128b078539783b8352b07f707bff595cb604cc580f6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:51:50.457035 env[1206]: time="2025-09-10T00:51:50.457001002Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\" returns image reference \"sha256:1911afdd8478c6ca3036ff85614050d5d19acc0f0c3f6a5a7b3e34b38dd309c9\"" Sep 10 00:51:50.458857 env[1206]: time="2025-09-10T00:51:50.458813112Z" level=info msg="CreateContainer within sandbox \"896c055143b23e54b4196e79c321be8e5d3e03904449f8b5f4c3a3651cec51dd\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Sep 10 00:51:50.470676 env[1206]: time="2025-09-10T00:51:50.470625197Z" level=info msg="CreateContainer within sandbox \"896c055143b23e54b4196e79c321be8e5d3e03904449f8b5f4c3a3651cec51dd\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"876d63ea10c5a0505bc89f11528651482b053cd192ff6d9b04af08d9d5be0fa2\"" Sep 10 00:51:50.471082 env[1206]: time="2025-09-10T00:51:50.471057729Z" level=info msg="StartContainer for \"876d63ea10c5a0505bc89f11528651482b053cd192ff6d9b04af08d9d5be0fa2\"" Sep 10 00:51:50.486117 systemd[1]: run-containerd-runc-k8s.io-876d63ea10c5a0505bc89f11528651482b053cd192ff6d9b04af08d9d5be0fa2-runc.as93Fv.mount: Deactivated successfully. Sep 10 00:51:50.487387 systemd[1]: Started cri-containerd-876d63ea10c5a0505bc89f11528651482b053cd192ff6d9b04af08d9d5be0fa2.scope. Sep 10 00:51:50.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.497288 kernel: kauditd_printk_skb: 315 callbacks suppressed Sep 10 00:51:50.503656 kernel: audit: type=1400 audit(1757465510.495:905): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.503802 kernel: audit: type=1400 audit(1757465510.495:906): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.503852 kernel: audit: type=1400 audit(1757465510.495:907): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.509467 kernel: audit: type=1400 audit(1757465510.495:908): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.509513 kernel: audit: type=1400 audit(1757465510.495:909): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.512257 kernel: audit: type=1400 audit(1757465510.495:910): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.518087 kernel: audit: type=1400 audit(1757465510.495:911): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.518133 kernel: audit: type=1400 audit(1757465510.495:912): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.523655 kernel: audit: type=1400 audit(1757465510.495:913): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.523706 kernel: audit: type=1400 audit(1757465510.497:914): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.527043 kubelet[1980]: E0910 00:51:50.527006 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:50.497000 audit: BPF prog-id=117 op=LOAD Sep 10 00:51:50.497000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.497000 audit[2283]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=2243 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:50.497000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837366436336561313063356130353035626338396631313532383635 Sep 10 00:51:50.497000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.497000 audit[2283]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=8 items=0 ppid=2243 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:50.497000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837366436336561313063356130353035626338396631313532383635 Sep 10 00:51:50.497000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.497000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.497000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.497000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.497000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.497000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.497000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.497000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.497000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.497000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.497000 audit: BPF prog-id=118 op=LOAD Sep 10 00:51:50.497000 audit[2283]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c000402240 items=0 ppid=2243 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:50.497000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837366436336561313063356130353035626338396631313532383635 Sep 10 00:51:50.499000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.499000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.499000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.499000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.499000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.499000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.499000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.499000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.499000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.499000 audit: BPF prog-id=119 op=LOAD Sep 10 00:51:50.499000 audit[2283]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c000402288 items=0 ppid=2243 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:50.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837366436336561313063356130353035626338396631313532383635 Sep 10 00:51:50.506000 audit: BPF prog-id=119 op=UNLOAD Sep 10 00:51:50.506000 audit: BPF prog-id=118 op=UNLOAD Sep 10 00:51:50.506000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.506000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.506000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.506000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.506000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.506000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.506000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.506000 audit[2283]: AVC avc: denied { perfmon } for pid=2283 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.506000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.506000 audit[2283]: AVC avc: denied { bpf } for pid=2283 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:50.506000 audit: BPF prog-id=120 op=LOAD Sep 10 00:51:50.506000 audit[2283]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c000402698 items=0 ppid=2243 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:50.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837366436336561313063356130353035626338396631313532383635 Sep 10 00:51:50.546999 env[1206]: time="2025-09-10T00:51:50.546947333Z" level=info msg="StartContainer for \"876d63ea10c5a0505bc89f11528651482b053cd192ff6d9b04af08d9d5be0fa2\" returns successfully" Sep 10 00:51:50.810775 kubelet[1980]: E0910 00:51:50.810555 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:50.825818 kubelet[1980]: I0910 00:51:50.825766 1980 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-58fc44c59b-lzgdv" podStartSLOduration=1.301337018 podStartE2EDuration="3.825746029s" podCreationTimestamp="2025-09-10 00:51:47 +0000 UTC" firstStartedPulling="2025-09-10 00:51:47.933357196 +0000 UTC m=+7.224520448" lastFinishedPulling="2025-09-10 00:51:50.457766197 +0000 UTC m=+9.748929459" observedRunningTime="2025-09-10 00:51:50.825498313 +0000 UTC m=+10.116661575" watchObservedRunningTime="2025-09-10 00:51:50.825746029 +0000 UTC m=+10.116909291" Sep 10 00:51:52.174443 kubelet[1980]: E0910 00:51:52.174412 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:55.638540 sudo[1344]: pam_unix(sudo:session): session closed for user root Sep 10 00:51:55.638000 audit[1344]: USER_END pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:51:55.643128 kernel: kauditd_printk_skb: 47 callbacks suppressed Sep 10 00:51:55.643249 kernel: audit: type=1106 audit(1757465515.638:923): pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:51:55.643288 kernel: audit: type=1104 audit(1757465515.638:924): pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:51:55.638000 audit[1344]: CRED_DISP pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:51:55.640552 sshd[1340]: pam_unix(sshd:session): session closed for user core Sep 10 00:51:55.646000 audit[1340]: USER_END pid=1340 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:51:55.648622 systemd[1]: sshd@6-10.0.0.141:22-10.0.0.1:53804.service: Deactivated successfully. Sep 10 00:51:55.650683 systemd[1]: session-7.scope: Deactivated successfully. Sep 10 00:51:55.650857 systemd[1]: session-7.scope: Consumed 4.346s CPU time. Sep 10 00:51:55.651645 kernel: audit: type=1106 audit(1757465515.646:925): pid=1340 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:51:55.651832 systemd-logind[1191]: Session 7 logged out. Waiting for processes to exit. Sep 10 00:51:55.646000 audit[1340]: CRED_DISP pid=1340 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:51:55.652950 systemd-logind[1191]: Removed session 7. Sep 10 00:51:55.656636 kernel: audit: type=1104 audit(1757465515.646:926): pid=1340 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:51:55.648000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.141:22-10.0.0.1:53804 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:55.660630 kernel: audit: type=1131 audit(1757465515.648:927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.141:22-10.0.0.1:53804 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:51:55.985000 audit[2372]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2372 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:51:55.989640 kernel: audit: type=1325 audit(1757465515.985:928): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2372 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:51:55.985000 audit[2372]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fffb57e5ac0 a2=0 a3=7fffb57e5aac items=0 ppid=2086 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:55.996629 kernel: audit: type=1300 audit(1757465515.985:928): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fffb57e5ac0 a2=0 a3=7fffb57e5aac items=0 ppid=2086 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:55.985000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:51:55.999616 kernel: audit: type=1327 audit(1757465515.985:928): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:51:55.999000 audit[2372]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2372 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:51:56.002647 kernel: audit: type=1325 audit(1757465515.999:929): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2372 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:51:55.999000 audit[2372]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffb57e5ac0 a2=0 a3=0 items=0 ppid=2086 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:56.007644 kernel: audit: type=1300 audit(1757465515.999:929): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffb57e5ac0 a2=0 a3=0 items=0 ppid=2086 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:55.999000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:51:56.016000 audit[2374]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2374 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:51:56.016000 audit[2374]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffeed4dbbb0 a2=0 a3=7ffeed4dbb9c items=0 ppid=2086 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:56.016000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:51:56.021000 audit[2374]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2374 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:51:56.021000 audit[2374]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffeed4dbbb0 a2=0 a3=0 items=0 ppid=2086 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:56.021000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:51:57.772000 audit[2376]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2376 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:51:57.772000 audit[2376]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffe7b7804c0 a2=0 a3=7ffe7b7804ac items=0 ppid=2086 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:57.772000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:51:57.781000 audit[2376]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2376 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:51:57.781000 audit[2376]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe7b7804c0 a2=0 a3=0 items=0 ppid=2086 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:57.781000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:51:57.995775 systemd[1]: Created slice kubepods-besteffort-podc1bd278e_2317_40f3_b5b1_4df1ed637529.slice. Sep 10 00:51:58.008000 audit[2378]: NETFILTER_CFG table=filter:95 family=2 entries=20 op=nft_register_rule pid=2378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:51:58.008000 audit[2378]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fff885fdbd0 a2=0 a3=7fff885fdbbc items=0 ppid=2086 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:58.008000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:51:58.014000 audit[2378]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:51:58.014000 audit[2378]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff885fdbd0 a2=0 a3=0 items=0 ppid=2086 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:58.014000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:51:58.106485 kubelet[1980]: I0910 00:51:58.106368 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c1bd278e-2317-40f3-b5b1-4df1ed637529-tigera-ca-bundle\") pod \"calico-typha-86f7d9d87d-qhs44\" (UID: \"c1bd278e-2317-40f3-b5b1-4df1ed637529\") " pod="calico-system/calico-typha-86f7d9d87d-qhs44" Sep 10 00:51:58.106485 kubelet[1980]: I0910 00:51:58.106401 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6bhc2\" (UniqueName: \"kubernetes.io/projected/c1bd278e-2317-40f3-b5b1-4df1ed637529-kube-api-access-6bhc2\") pod \"calico-typha-86f7d9d87d-qhs44\" (UID: \"c1bd278e-2317-40f3-b5b1-4df1ed637529\") " pod="calico-system/calico-typha-86f7d9d87d-qhs44" Sep 10 00:51:58.106485 kubelet[1980]: I0910 00:51:58.106420 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/c1bd278e-2317-40f3-b5b1-4df1ed637529-typha-certs\") pod \"calico-typha-86f7d9d87d-qhs44\" (UID: \"c1bd278e-2317-40f3-b5b1-4df1ed637529\") " pod="calico-system/calico-typha-86f7d9d87d-qhs44" Sep 10 00:51:58.299981 kubelet[1980]: E0910 00:51:58.299934 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:58.300484 env[1206]: time="2025-09-10T00:51:58.300425730Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-86f7d9d87d-qhs44,Uid:c1bd278e-2317-40f3-b5b1-4df1ed637529,Namespace:calico-system,Attempt:0,}" Sep 10 00:51:58.950939 env[1206]: time="2025-09-10T00:51:58.950278270Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:51:58.950939 env[1206]: time="2025-09-10T00:51:58.950324756Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:51:58.950939 env[1206]: time="2025-09-10T00:51:58.950334415Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:51:58.950939 env[1206]: time="2025-09-10T00:51:58.950503369Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/71df375b00969814cbd0861beae014964fb166c947cbd1cd10fdc17176d63d0b pid=2389 runtime=io.containerd.runc.v2 Sep 10 00:51:58.972105 systemd[1]: Created slice kubepods-besteffort-podb02b3a35_e6a3_48ff_802c_476b5f97c4a5.slice. Sep 10 00:51:58.986023 systemd[1]: Started cri-containerd-71df375b00969814cbd0861beae014964fb166c947cbd1cd10fdc17176d63d0b.scope. Sep 10 00:51:58.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:58.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:58.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:58.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:58.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:58.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:58.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:58.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:58.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:58.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:58.998000 audit: BPF prog-id=121 op=LOAD Sep 10 00:51:59.000000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.000000 audit[2397]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2389 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:59.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731646633373562303039363938313463626430383631626561653031 Sep 10 00:51:59.000000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.000000 audit[2397]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2389 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:59.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731646633373562303039363938313463626430383631626561653031 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit: BPF prog-id=122 op=LOAD Sep 10 00:51:59.001000 audit[2397]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000024550 items=0 ppid=2389 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:59.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731646633373562303039363938313463626430383631626561653031 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit: BPF prog-id=123 op=LOAD Sep 10 00:51:59.001000 audit[2397]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000024598 items=0 ppid=2389 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:59.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731646633373562303039363938313463626430383631626561653031 Sep 10 00:51:59.001000 audit: BPF prog-id=123 op=UNLOAD Sep 10 00:51:59.001000 audit: BPF prog-id=122 op=UNLOAD Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.001000 audit: BPF prog-id=124 op=LOAD Sep 10 00:51:59.001000 audit[2397]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0000249a8 items=0 ppid=2389 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:59.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731646633373562303039363938313463626430383631626561653031 Sep 10 00:51:59.009909 kubelet[1980]: I0910 00:51:59.009885 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/b02b3a35-e6a3-48ff-802c-476b5f97c4a5-cni-bin-dir\") pod \"calico-node-sfsrv\" (UID: \"b02b3a35-e6a3-48ff-802c-476b5f97c4a5\") " pod="calico-system/calico-node-sfsrv" Sep 10 00:51:59.010100 kubelet[1980]: I0910 00:51:59.010086 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/b02b3a35-e6a3-48ff-802c-476b5f97c4a5-var-run-calico\") pod \"calico-node-sfsrv\" (UID: \"b02b3a35-e6a3-48ff-802c-476b5f97c4a5\") " pod="calico-system/calico-node-sfsrv" Sep 10 00:51:59.010318 kubelet[1980]: I0910 00:51:59.010304 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/b02b3a35-e6a3-48ff-802c-476b5f97c4a5-cni-net-dir\") pod \"calico-node-sfsrv\" (UID: \"b02b3a35-e6a3-48ff-802c-476b5f97c4a5\") " pod="calico-system/calico-node-sfsrv" Sep 10 00:51:59.010427 kubelet[1980]: I0910 00:51:59.010412 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b02b3a35-e6a3-48ff-802c-476b5f97c4a5-lib-modules\") pod \"calico-node-sfsrv\" (UID: \"b02b3a35-e6a3-48ff-802c-476b5f97c4a5\") " pod="calico-system/calico-node-sfsrv" Sep 10 00:51:59.010527 kubelet[1980]: I0910 00:51:59.010514 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b02b3a35-e6a3-48ff-802c-476b5f97c4a5-tigera-ca-bundle\") pod \"calico-node-sfsrv\" (UID: \"b02b3a35-e6a3-48ff-802c-476b5f97c4a5\") " pod="calico-system/calico-node-sfsrv" Sep 10 00:51:59.010655 kubelet[1980]: I0910 00:51:59.010641 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/b02b3a35-e6a3-48ff-802c-476b5f97c4a5-flexvol-driver-host\") pod \"calico-node-sfsrv\" (UID: \"b02b3a35-e6a3-48ff-802c-476b5f97c4a5\") " pod="calico-system/calico-node-sfsrv" Sep 10 00:51:59.010762 kubelet[1980]: I0910 00:51:59.010748 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/b02b3a35-e6a3-48ff-802c-476b5f97c4a5-policysync\") pod \"calico-node-sfsrv\" (UID: \"b02b3a35-e6a3-48ff-802c-476b5f97c4a5\") " pod="calico-system/calico-node-sfsrv" Sep 10 00:51:59.010865 kubelet[1980]: I0910 00:51:59.010851 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/b02b3a35-e6a3-48ff-802c-476b5f97c4a5-cni-log-dir\") pod \"calico-node-sfsrv\" (UID: \"b02b3a35-e6a3-48ff-802c-476b5f97c4a5\") " pod="calico-system/calico-node-sfsrv" Sep 10 00:51:59.010976 kubelet[1980]: I0910 00:51:59.010950 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/b02b3a35-e6a3-48ff-802c-476b5f97c4a5-var-lib-calico\") pod \"calico-node-sfsrv\" (UID: \"b02b3a35-e6a3-48ff-802c-476b5f97c4a5\") " pod="calico-system/calico-node-sfsrv" Sep 10 00:51:59.011092 kubelet[1980]: I0910 00:51:59.011078 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b02b3a35-e6a3-48ff-802c-476b5f97c4a5-xtables-lock\") pod \"calico-node-sfsrv\" (UID: \"b02b3a35-e6a3-48ff-802c-476b5f97c4a5\") " pod="calico-system/calico-node-sfsrv" Sep 10 00:51:59.011194 kubelet[1980]: I0910 00:51:59.011180 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-w52vx\" (UniqueName: \"kubernetes.io/projected/b02b3a35-e6a3-48ff-802c-476b5f97c4a5-kube-api-access-w52vx\") pod \"calico-node-sfsrv\" (UID: \"b02b3a35-e6a3-48ff-802c-476b5f97c4a5\") " pod="calico-system/calico-node-sfsrv" Sep 10 00:51:59.011303 kubelet[1980]: I0910 00:51:59.011290 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/b02b3a35-e6a3-48ff-802c-476b5f97c4a5-node-certs\") pod \"calico-node-sfsrv\" (UID: \"b02b3a35-e6a3-48ff-802c-476b5f97c4a5\") " pod="calico-system/calico-node-sfsrv" Sep 10 00:51:59.033792 env[1206]: time="2025-09-10T00:51:59.033750970Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-86f7d9d87d-qhs44,Uid:c1bd278e-2317-40f3-b5b1-4df1ed637529,Namespace:calico-system,Attempt:0,} returns sandbox id \"71df375b00969814cbd0861beae014964fb166c947cbd1cd10fdc17176d63d0b\"" Sep 10 00:51:59.034474 kubelet[1980]: E0910 00:51:59.034449 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:51:59.035459 env[1206]: time="2025-09-10T00:51:59.035434178Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\"" Sep 10 00:51:59.078263 kubelet[1980]: E0910 00:51:59.078202 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zh8cr" podUID="dd1fed80-f428-462e-a294-863944798dcc" Sep 10 00:51:59.112276 kubelet[1980]: I0910 00:51:59.111910 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/dd1fed80-f428-462e-a294-863944798dcc-registration-dir\") pod \"csi-node-driver-zh8cr\" (UID: \"dd1fed80-f428-462e-a294-863944798dcc\") " pod="calico-system/csi-node-driver-zh8cr" Sep 10 00:51:59.112276 kubelet[1980]: I0910 00:51:59.111962 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/dd1fed80-f428-462e-a294-863944798dcc-varrun\") pod \"csi-node-driver-zh8cr\" (UID: \"dd1fed80-f428-462e-a294-863944798dcc\") " pod="calico-system/csi-node-driver-zh8cr" Sep 10 00:51:59.112276 kubelet[1980]: I0910 00:51:59.112037 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/dd1fed80-f428-462e-a294-863944798dcc-kubelet-dir\") pod \"csi-node-driver-zh8cr\" (UID: \"dd1fed80-f428-462e-a294-863944798dcc\") " pod="calico-system/csi-node-driver-zh8cr" Sep 10 00:51:59.112276 kubelet[1980]: I0910 00:51:59.112100 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-28tzr\" (UniqueName: \"kubernetes.io/projected/dd1fed80-f428-462e-a294-863944798dcc-kube-api-access-28tzr\") pod \"csi-node-driver-zh8cr\" (UID: \"dd1fed80-f428-462e-a294-863944798dcc\") " pod="calico-system/csi-node-driver-zh8cr" Sep 10 00:51:59.112276 kubelet[1980]: I0910 00:51:59.112156 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/dd1fed80-f428-462e-a294-863944798dcc-socket-dir\") pod \"csi-node-driver-zh8cr\" (UID: \"dd1fed80-f428-462e-a294-863944798dcc\") " pod="calico-system/csi-node-driver-zh8cr" Sep 10 00:51:59.113352 kubelet[1980]: E0910 00:51:59.113206 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.113352 kubelet[1980]: W0910 00:51:59.113227 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.113352 kubelet[1980]: E0910 00:51:59.113250 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.113500 kubelet[1980]: E0910 00:51:59.113476 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.113500 kubelet[1980]: W0910 00:51:59.113497 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.113581 kubelet[1980]: E0910 00:51:59.113517 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.114925 kubelet[1980]: E0910 00:51:59.114901 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.114925 kubelet[1980]: W0910 00:51:59.114911 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.114925 kubelet[1980]: E0910 00:51:59.114920 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.119637 kubelet[1980]: E0910 00:51:59.119023 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.119637 kubelet[1980]: W0910 00:51:59.119039 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.119637 kubelet[1980]: E0910 00:51:59.119057 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.212727 kubelet[1980]: E0910 00:51:59.212638 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.212897 kubelet[1980]: W0910 00:51:59.212875 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.213009 kubelet[1980]: E0910 00:51:59.212979 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.213265 kubelet[1980]: E0910 00:51:59.213254 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.213335 kubelet[1980]: W0910 00:51:59.213319 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.213410 kubelet[1980]: E0910 00:51:59.213395 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.213653 kubelet[1980]: E0910 00:51:59.213643 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.213734 kubelet[1980]: W0910 00:51:59.213719 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.213829 kubelet[1980]: E0910 00:51:59.213810 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.215895 kubelet[1980]: E0910 00:51:59.215880 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.216004 kubelet[1980]: W0910 00:51:59.215975 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.216091 kubelet[1980]: E0910 00:51:59.216078 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.218673 kubelet[1980]: E0910 00:51:59.218658 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.218753 kubelet[1980]: W0910 00:51:59.218736 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.218849 kubelet[1980]: E0910 00:51:59.218829 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.221794 kubelet[1980]: E0910 00:51:59.221757 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.221794 kubelet[1980]: W0910 00:51:59.221788 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.221864 kubelet[1980]: E0910 00:51:59.221819 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.227673 kubelet[1980]: E0910 00:51:59.227645 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.227673 kubelet[1980]: W0910 00:51:59.227664 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.227770 kubelet[1980]: E0910 00:51:59.227739 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.227939 kubelet[1980]: E0910 00:51:59.227913 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.227939 kubelet[1980]: W0910 00:51:59.227930 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.228132 kubelet[1980]: E0910 00:51:59.228055 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.228306 kubelet[1980]: E0910 00:51:59.228284 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.228306 kubelet[1980]: W0910 00:51:59.228302 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.228388 kubelet[1980]: E0910 00:51:59.228333 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.228509 kubelet[1980]: E0910 00:51:59.228488 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.228509 kubelet[1980]: W0910 00:51:59.228501 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.228589 kubelet[1980]: E0910 00:51:59.228519 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.228690 kubelet[1980]: E0910 00:51:59.228675 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.228690 kubelet[1980]: W0910 00:51:59.228686 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.228760 kubelet[1980]: E0910 00:51:59.228747 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.228839 kubelet[1980]: E0910 00:51:59.228828 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.228839 kubelet[1980]: W0910 00:51:59.228837 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.228888 kubelet[1980]: E0910 00:51:59.228847 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.229060 kubelet[1980]: E0910 00:51:59.229044 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.229060 kubelet[1980]: W0910 00:51:59.229054 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.229134 kubelet[1980]: E0910 00:51:59.229064 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.229205 kubelet[1980]: E0910 00:51:59.229191 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.229205 kubelet[1980]: W0910 00:51:59.229201 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.229251 kubelet[1980]: E0910 00:51:59.229210 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.229341 kubelet[1980]: E0910 00:51:59.229329 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.229341 kubelet[1980]: W0910 00:51:59.229339 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.229391 kubelet[1980]: E0910 00:51:59.229346 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.229500 kubelet[1980]: E0910 00:51:59.229487 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.229500 kubelet[1980]: W0910 00:51:59.229497 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.229562 kubelet[1980]: E0910 00:51:59.229550 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.229664 kubelet[1980]: E0910 00:51:59.229649 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.229664 kubelet[1980]: W0910 00:51:59.229658 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.229753 kubelet[1980]: E0910 00:51:59.229707 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.229799 kubelet[1980]: E0910 00:51:59.229778 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.229799 kubelet[1980]: W0910 00:51:59.229791 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.229883 kubelet[1980]: E0910 00:51:59.229838 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.229929 kubelet[1980]: E0910 00:51:59.229909 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.229929 kubelet[1980]: W0910 00:51:59.229921 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.230023 kubelet[1980]: E0910 00:51:59.229967 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.230093 kubelet[1980]: E0910 00:51:59.230077 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.230093 kubelet[1980]: W0910 00:51:59.230087 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.230093 kubelet[1980]: E0910 00:51:59.230093 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.230258 kubelet[1980]: E0910 00:51:59.230240 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.230258 kubelet[1980]: W0910 00:51:59.230250 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.230258 kubelet[1980]: E0910 00:51:59.230258 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.230502 kubelet[1980]: E0910 00:51:59.230488 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.230502 kubelet[1980]: W0910 00:51:59.230498 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.230592 kubelet[1980]: E0910 00:51:59.230508 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.230664 kubelet[1980]: E0910 00:51:59.230648 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.230664 kubelet[1980]: W0910 00:51:59.230658 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.230664 kubelet[1980]: E0910 00:51:59.230667 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.231054 kubelet[1980]: E0910 00:51:59.231037 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.231127 kubelet[1980]: W0910 00:51:59.231110 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.231219 kubelet[1980]: E0910 00:51:59.231203 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.231463 kubelet[1980]: E0910 00:51:59.231441 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.231463 kubelet[1980]: W0910 00:51:59.231452 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.231463 kubelet[1980]: E0910 00:51:59.231461 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.238481 kubelet[1980]: E0910 00:51:59.238465 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:51:59.238481 kubelet[1980]: W0910 00:51:59.238478 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:51:59.238564 kubelet[1980]: E0910 00:51:59.238489 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:51:59.274619 env[1206]: time="2025-09-10T00:51:59.274559797Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-sfsrv,Uid:b02b3a35-e6a3-48ff-802c-476b5f97c4a5,Namespace:calico-system,Attempt:0,}" Sep 10 00:51:59.290199 env[1206]: time="2025-09-10T00:51:59.290139655Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:51:59.290199 env[1206]: time="2025-09-10T00:51:59.290176349Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:51:59.290199 env[1206]: time="2025-09-10T00:51:59.290187151Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:51:59.290352 env[1206]: time="2025-09-10T00:51:59.290312897Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/de42fbc5edaf08ca50483c93e8485e1f6a0d68d2a1c4feb3e7c4e6bbf4750b9f pid=2463 runtime=io.containerd.runc.v2 Sep 10 00:51:59.305212 systemd[1]: Started cri-containerd-de42fbc5edaf08ca50483c93e8485e1f6a0d68d2a1c4feb3e7c4e6bbf4750b9f.scope. Sep 10 00:51:59.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.314000 audit: BPF prog-id=125 op=LOAD Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2463 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:59.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465343266626335656461663038636135303438336339336538343835 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2463 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:59.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465343266626335656461663038636135303438336339336538343835 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit: BPF prog-id=126 op=LOAD Sep 10 00:51:59.315000 audit[2473]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003336d0 items=0 ppid=2463 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:59.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465343266626335656461663038636135303438336339336538343835 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit: BPF prog-id=127 op=LOAD Sep 10 00:51:59.315000 audit[2473]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000333718 items=0 ppid=2463 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:59.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465343266626335656461663038636135303438336339336538343835 Sep 10 00:51:59.315000 audit: BPF prog-id=127 op=UNLOAD Sep 10 00:51:59.315000 audit: BPF prog-id=126 op=UNLOAD Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:51:59.315000 audit: BPF prog-id=128 op=LOAD Sep 10 00:51:59.315000 audit[2473]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000333b28 items=0 ppid=2463 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:51:59.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465343266626335656461663038636135303438336339336538343835 Sep 10 00:51:59.326718 env[1206]: time="2025-09-10T00:51:59.326651419Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-sfsrv,Uid:b02b3a35-e6a3-48ff-802c-476b5f97c4a5,Namespace:calico-system,Attempt:0,} returns sandbox id \"de42fbc5edaf08ca50483c93e8485e1f6a0d68d2a1c4feb3e7c4e6bbf4750b9f\"" Sep 10 00:52:00.212428 systemd[1]: run-containerd-runc-k8s.io-de42fbc5edaf08ca50483c93e8485e1f6a0d68d2a1c4feb3e7c4e6bbf4750b9f-runc.QF7xIp.mount: Deactivated successfully. Sep 10 00:52:00.627682 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1411952617.mount: Deactivated successfully. Sep 10 00:52:00.786938 kubelet[1980]: E0910 00:52:00.786898 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zh8cr" podUID="dd1fed80-f428-462e-a294-863944798dcc" Sep 10 00:52:02.056761 env[1206]: time="2025-09-10T00:52:02.056714690Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:02.058646 env[1206]: time="2025-09-10T00:52:02.058591517Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1d7bb7b0cce2924d35c7c26f6b6600409ea7c9535074c3d2e517ffbb3a0e0b36,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:02.060544 env[1206]: time="2025-09-10T00:52:02.060512304Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:02.061811 env[1206]: time="2025-09-10T00:52:02.061777748Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:f4a3d61ffda9c98a53adeb412c5af404ca3727a3cc2d0b4ef28d197bdd47ecaa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:02.062247 env[1206]: time="2025-09-10T00:52:02.062225842Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\" returns image reference \"sha256:1d7bb7b0cce2924d35c7c26f6b6600409ea7c9535074c3d2e517ffbb3a0e0b36\"" Sep 10 00:52:02.065222 env[1206]: time="2025-09-10T00:52:02.065187299Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\"" Sep 10 00:52:02.078094 env[1206]: time="2025-09-10T00:52:02.078062956Z" level=info msg="CreateContainer within sandbox \"71df375b00969814cbd0861beae014964fb166c947cbd1cd10fdc17176d63d0b\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Sep 10 00:52:02.091486 env[1206]: time="2025-09-10T00:52:02.091426447Z" level=info msg="CreateContainer within sandbox \"71df375b00969814cbd0861beae014964fb166c947cbd1cd10fdc17176d63d0b\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"91a8198815618600f90df0af4af4caa0392303c734e617b7cb09689c4d6541bb\"" Sep 10 00:52:02.093511 env[1206]: time="2025-09-10T00:52:02.093470481Z" level=info msg="StartContainer for \"91a8198815618600f90df0af4af4caa0392303c734e617b7cb09689c4d6541bb\"" Sep 10 00:52:02.110430 systemd[1]: Started cri-containerd-91a8198815618600f90df0af4af4caa0392303c734e617b7cb09689c4d6541bb.scope. Sep 10 00:52:02.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.121823 kernel: kauditd_printk_skb: 133 callbacks suppressed Sep 10 00:52:02.121876 kernel: audit: type=1400 audit(1757465522.120:972): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.127388 kernel: audit: type=1400 audit(1757465522.120:973): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.127547 kernel: audit: type=1400 audit(1757465522.126:974): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.133470 kernel: audit: type=1400 audit(1757465522.126:975): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.133520 kernel: audit: type=1400 audit(1757465522.126:976): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.139652 kernel: audit: type=1400 audit(1757465522.126:977): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.139709 kernel: audit: type=1400 audit(1757465522.126:978): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.145754 kernel: audit: type=1400 audit(1757465522.126:979): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.145802 kernel: audit: type=1400 audit(1757465522.126:980): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.148619 kernel: audit: type=1400 audit(1757465522.126:981): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.126000 audit: BPF prog-id=129 op=LOAD Sep 10 00:52:02.127000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.127000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2389 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:02.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931613831393838313536313836303066393064663061663461663463 Sep 10 00:52:02.127000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.127000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2389 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:02.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931613831393838313536313836303066393064663061663461663463 Sep 10 00:52:02.127000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.127000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.127000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.127000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.127000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.127000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.127000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.127000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.127000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.127000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.127000 audit: BPF prog-id=130 op=LOAD Sep 10 00:52:02.127000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00037e910 items=0 ppid=2389 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:02.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931613831393838313536313836303066393064663061663461663463 Sep 10 00:52:02.132000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.132000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.132000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.132000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.132000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.132000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.132000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.132000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.132000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.132000 audit: BPF prog-id=131 op=LOAD Sep 10 00:52:02.132000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00037e958 items=0 ppid=2389 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:02.132000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931613831393838313536313836303066393064663061663461663463 Sep 10 00:52:02.135000 audit: BPF prog-id=131 op=UNLOAD Sep 10 00:52:02.135000 audit: BPF prog-id=130 op=UNLOAD Sep 10 00:52:02.136000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.136000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.136000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.136000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.136000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.136000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.136000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.136000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.136000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.136000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:02.136000 audit: BPF prog-id=132 op=LOAD Sep 10 00:52:02.136000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00037ed68 items=0 ppid=2389 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:02.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931613831393838313536313836303066393064663061663461663463 Sep 10 00:52:02.182221 env[1206]: time="2025-09-10T00:52:02.182169298Z" level=info msg="StartContainer for \"91a8198815618600f90df0af4af4caa0392303c734e617b7cb09689c4d6541bb\" returns successfully" Sep 10 00:52:02.787459 kubelet[1980]: E0910 00:52:02.787406 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zh8cr" podUID="dd1fed80-f428-462e-a294-863944798dcc" Sep 10 00:52:02.829311 kubelet[1980]: E0910 00:52:02.829280 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:52:02.840918 kubelet[1980]: I0910 00:52:02.840865 1980 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-86f7d9d87d-qhs44" podStartSLOduration=2.811000665 podStartE2EDuration="5.840846757s" podCreationTimestamp="2025-09-10 00:51:57 +0000 UTC" firstStartedPulling="2025-09-10 00:51:59.035152055 +0000 UTC m=+18.326315317" lastFinishedPulling="2025-09-10 00:52:02.064998137 +0000 UTC m=+21.356161409" observedRunningTime="2025-09-10 00:52:02.840281196 +0000 UTC m=+22.131444458" watchObservedRunningTime="2025-09-10 00:52:02.840846757 +0000 UTC m=+22.132010019" Sep 10 00:52:02.911899 kubelet[1980]: E0910 00:52:02.911852 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.911899 kubelet[1980]: W0910 00:52:02.911881 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.911899 kubelet[1980]: E0910 00:52:02.911903 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.912167 kubelet[1980]: E0910 00:52:02.912153 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.912167 kubelet[1980]: W0910 00:52:02.912162 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.912167 kubelet[1980]: E0910 00:52:02.912169 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.912325 kubelet[1980]: E0910 00:52:02.912301 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.912325 kubelet[1980]: W0910 00:52:02.912311 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.912325 kubelet[1980]: E0910 00:52:02.912318 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.912567 kubelet[1980]: E0910 00:52:02.912552 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.912610 kubelet[1980]: W0910 00:52:02.912574 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.912654 kubelet[1980]: E0910 00:52:02.912618 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.912818 kubelet[1980]: E0910 00:52:02.912802 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.912818 kubelet[1980]: W0910 00:52:02.912813 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.912889 kubelet[1980]: E0910 00:52:02.912822 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.912981 kubelet[1980]: E0910 00:52:02.912966 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.912981 kubelet[1980]: W0910 00:52:02.912976 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.912981 kubelet[1980]: E0910 00:52:02.912982 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.913127 kubelet[1980]: E0910 00:52:02.913114 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.913127 kubelet[1980]: W0910 00:52:02.913123 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.913178 kubelet[1980]: E0910 00:52:02.913130 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.913296 kubelet[1980]: E0910 00:52:02.913268 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.913296 kubelet[1980]: W0910 00:52:02.913280 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.913296 kubelet[1980]: E0910 00:52:02.913289 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.913496 kubelet[1980]: E0910 00:52:02.913475 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.913496 kubelet[1980]: W0910 00:52:02.913489 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.913496 kubelet[1980]: E0910 00:52:02.913498 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.913681 kubelet[1980]: E0910 00:52:02.913668 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.913681 kubelet[1980]: W0910 00:52:02.913677 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.913741 kubelet[1980]: E0910 00:52:02.913685 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.913829 kubelet[1980]: E0910 00:52:02.913814 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.913829 kubelet[1980]: W0910 00:52:02.913823 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.913829 kubelet[1980]: E0910 00:52:02.913829 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.913967 kubelet[1980]: E0910 00:52:02.913952 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.913967 kubelet[1980]: W0910 00:52:02.913961 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.913967 kubelet[1980]: E0910 00:52:02.913968 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.914110 kubelet[1980]: E0910 00:52:02.914097 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.914110 kubelet[1980]: W0910 00:52:02.914106 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.914162 kubelet[1980]: E0910 00:52:02.914115 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.914258 kubelet[1980]: E0910 00:52:02.914246 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.914258 kubelet[1980]: W0910 00:52:02.914255 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.914309 kubelet[1980]: E0910 00:52:02.914262 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.914408 kubelet[1980]: E0910 00:52:02.914395 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.914408 kubelet[1980]: W0910 00:52:02.914405 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.914470 kubelet[1980]: E0910 00:52:02.914413 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.952240 kubelet[1980]: E0910 00:52:02.952209 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.952240 kubelet[1980]: W0910 00:52:02.952230 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.952240 kubelet[1980]: E0910 00:52:02.952250 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.952496 kubelet[1980]: E0910 00:52:02.952419 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.952496 kubelet[1980]: W0910 00:52:02.952426 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.952496 kubelet[1980]: E0910 00:52:02.952459 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.952765 kubelet[1980]: E0910 00:52:02.952736 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.952765 kubelet[1980]: W0910 00:52:02.952758 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.952922 kubelet[1980]: E0910 00:52:02.952788 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.953021 kubelet[1980]: E0910 00:52:02.952987 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.953068 kubelet[1980]: W0910 00:52:02.953018 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.953068 kubelet[1980]: E0910 00:52:02.953048 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.953265 kubelet[1980]: E0910 00:52:02.953247 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.953265 kubelet[1980]: W0910 00:52:02.953259 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.953341 kubelet[1980]: E0910 00:52:02.953271 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.953513 kubelet[1980]: E0910 00:52:02.953493 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.953513 kubelet[1980]: W0910 00:52:02.953506 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.953610 kubelet[1980]: E0910 00:52:02.953522 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.953702 kubelet[1980]: E0910 00:52:02.953688 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.953702 kubelet[1980]: W0910 00:52:02.953698 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.953753 kubelet[1980]: E0910 00:52:02.953710 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.953972 kubelet[1980]: E0910 00:52:02.953949 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.953972 kubelet[1980]: W0910 00:52:02.953961 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.953972 kubelet[1980]: E0910 00:52:02.953972 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.954135 kubelet[1980]: E0910 00:52:02.954119 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.954135 kubelet[1980]: W0910 00:52:02.954130 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.954221 kubelet[1980]: E0910 00:52:02.954142 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.954292 kubelet[1980]: E0910 00:52:02.954276 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.954292 kubelet[1980]: W0910 00:52:02.954285 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.954372 kubelet[1980]: E0910 00:52:02.954309 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.954444 kubelet[1980]: E0910 00:52:02.954420 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.954444 kubelet[1980]: W0910 00:52:02.954430 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.954512 kubelet[1980]: E0910 00:52:02.954467 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.954651 kubelet[1980]: E0910 00:52:02.954638 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.954651 kubelet[1980]: W0910 00:52:02.954648 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.954710 kubelet[1980]: E0910 00:52:02.954660 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.954924 kubelet[1980]: E0910 00:52:02.954907 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.954924 kubelet[1980]: W0910 00:52:02.954917 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.954995 kubelet[1980]: E0910 00:52:02.954930 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.955181 kubelet[1980]: E0910 00:52:02.955164 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.955181 kubelet[1980]: W0910 00:52:02.955174 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.955247 kubelet[1980]: E0910 00:52:02.955189 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.955387 kubelet[1980]: E0910 00:52:02.955367 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.955387 kubelet[1980]: W0910 00:52:02.955384 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.955496 kubelet[1980]: E0910 00:52:02.955403 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.955688 kubelet[1980]: E0910 00:52:02.955671 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.955688 kubelet[1980]: W0910 00:52:02.955683 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.955762 kubelet[1980]: E0910 00:52:02.955697 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.955870 kubelet[1980]: E0910 00:52:02.955855 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.955870 kubelet[1980]: W0910 00:52:02.955867 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.955919 kubelet[1980]: E0910 00:52:02.955880 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:02.956036 kubelet[1980]: E0910 00:52:02.956023 1980 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:52:02.956036 kubelet[1980]: W0910 00:52:02.956033 1980 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:52:02.956085 kubelet[1980]: E0910 00:52:02.956041 1980 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:52:03.706568 env[1206]: time="2025-09-10T00:52:03.706505916Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:03.708469 env[1206]: time="2025-09-10T00:52:03.708409240Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4f2b088ed6fdfc6a97ac0650a4ba8171107d6656ce265c592e4c8423fd10e5c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:03.710018 env[1206]: time="2025-09-10T00:52:03.709977240Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:03.711630 env[1206]: time="2025-09-10T00:52:03.711586622Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:81bdfcd9dbd36624dc35354e8c181c75631ba40e6c7df5820f5f56cea36f0ef9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:03.711974 env[1206]: time="2025-09-10T00:52:03.711944313Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\" returns image reference \"sha256:4f2b088ed6fdfc6a97ac0650a4ba8171107d6656ce265c592e4c8423fd10e5c4\"" Sep 10 00:52:03.713950 env[1206]: time="2025-09-10T00:52:03.713904441Z" level=info msg="CreateContainer within sandbox \"de42fbc5edaf08ca50483c93e8485e1f6a0d68d2a1c4feb3e7c4e6bbf4750b9f\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Sep 10 00:52:03.727673 env[1206]: time="2025-09-10T00:52:03.727617848Z" level=info msg="CreateContainer within sandbox \"de42fbc5edaf08ca50483c93e8485e1f6a0d68d2a1c4feb3e7c4e6bbf4750b9f\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"633b772abbe57384c985da06e9c5173c614c01c7edf63944c191f93eb33081d3\"" Sep 10 00:52:03.728180 env[1206]: time="2025-09-10T00:52:03.728142806Z" level=info msg="StartContainer for \"633b772abbe57384c985da06e9c5173c614c01c7edf63944c191f93eb33081d3\"" Sep 10 00:52:03.747871 systemd[1]: Started cri-containerd-633b772abbe57384c985da06e9c5173c614c01c7edf63944c191f93eb33081d3.scope. Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f9d4d8b59b8 items=0 ppid=2463 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:03.759000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633336237373261626265353733383463393835646130366539633531 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit: BPF prog-id=133 op=LOAD Sep 10 00:52:03.759000 audit[2579]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0001b42c8 items=0 ppid=2463 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:03.759000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633336237373261626265353733383463393835646130366539633531 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit: BPF prog-id=134 op=LOAD Sep 10 00:52:03.759000 audit[2579]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0001b4318 items=0 ppid=2463 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:03.759000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633336237373261626265353733383463393835646130366539633531 Sep 10 00:52:03.759000 audit: BPF prog-id=134 op=UNLOAD Sep 10 00:52:03.759000 audit: BPF prog-id=133 op=UNLOAD Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:03.759000 audit: BPF prog-id=135 op=LOAD Sep 10 00:52:03.759000 audit[2579]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0001b43a8 items=0 ppid=2463 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:03.759000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633336237373261626265353733383463393835646130366539633531 Sep 10 00:52:03.775747 env[1206]: time="2025-09-10T00:52:03.775702500Z" level=info msg="StartContainer for \"633b772abbe57384c985da06e9c5173c614c01c7edf63944c191f93eb33081d3\" returns successfully" Sep 10 00:52:03.782387 systemd[1]: cri-containerd-633b772abbe57384c985da06e9c5173c614c01c7edf63944c191f93eb33081d3.scope: Deactivated successfully. Sep 10 00:52:03.786000 audit: BPF prog-id=135 op=UNLOAD Sep 10 00:52:03.833370 kubelet[1980]: I0910 00:52:03.832735 1980 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 10 00:52:03.833370 kubelet[1980]: E0910 00:52:03.833099 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:52:04.074096 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-633b772abbe57384c985da06e9c5173c614c01c7edf63944c191f93eb33081d3-rootfs.mount: Deactivated successfully. Sep 10 00:52:04.178656 env[1206]: time="2025-09-10T00:52:04.178607053Z" level=info msg="shim disconnected" id=633b772abbe57384c985da06e9c5173c614c01c7edf63944c191f93eb33081d3 Sep 10 00:52:04.178656 env[1206]: time="2025-09-10T00:52:04.178653316Z" level=warning msg="cleaning up after shim disconnected" id=633b772abbe57384c985da06e9c5173c614c01c7edf63944c191f93eb33081d3 namespace=k8s.io Sep 10 00:52:04.178656 env[1206]: time="2025-09-10T00:52:04.178664218Z" level=info msg="cleaning up dead shim" Sep 10 00:52:04.184471 env[1206]: time="2025-09-10T00:52:04.184435485Z" level=warning msg="cleanup warnings time=\"2025-09-10T00:52:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2624 runtime=io.containerd.runc.v2\n" Sep 10 00:52:04.786194 kubelet[1980]: E0910 00:52:04.786148 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zh8cr" podUID="dd1fed80-f428-462e-a294-863944798dcc" Sep 10 00:52:04.835775 env[1206]: time="2025-09-10T00:52:04.835706663Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\"" Sep 10 00:52:06.787374 kubelet[1980]: E0910 00:52:06.786897 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zh8cr" podUID="dd1fed80-f428-462e-a294-863944798dcc" Sep 10 00:52:08.264723 kubelet[1980]: I0910 00:52:08.264685 1980 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 10 00:52:08.265336 kubelet[1980]: E0910 00:52:08.265203 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:52:08.286000 audit[2637]: NETFILTER_CFG table=filter:97 family=2 entries=21 op=nft_register_rule pid=2637 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:08.288514 kernel: kauditd_printk_skb: 91 callbacks suppressed Sep 10 00:52:08.288619 kernel: audit: type=1325 audit(1757465528.286:997): table=filter:97 family=2 entries=21 op=nft_register_rule pid=2637 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:08.286000 audit[2637]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffcd19a52c0 a2=0 a3=7ffcd19a52ac items=0 ppid=2086 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:08.296291 kernel: audit: type=1300 audit(1757465528.286:997): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffcd19a52c0 a2=0 a3=7ffcd19a52ac items=0 ppid=2086 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:08.296402 kernel: audit: type=1327 audit(1757465528.286:997): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:08.286000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:08.300000 audit[2637]: NETFILTER_CFG table=nat:98 family=2 entries=19 op=nft_register_chain pid=2637 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:08.300000 audit[2637]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffcd19a52c0 a2=0 a3=7ffcd19a52ac items=0 ppid=2086 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:08.309137 kernel: audit: type=1325 audit(1757465528.300:998): table=nat:98 family=2 entries=19 op=nft_register_chain pid=2637 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:08.309269 kernel: audit: type=1300 audit(1757465528.300:998): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffcd19a52c0 a2=0 a3=7ffcd19a52ac items=0 ppid=2086 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:08.309291 kernel: audit: type=1327 audit(1757465528.300:998): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:08.300000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:08.787096 kubelet[1980]: E0910 00:52:08.787044 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zh8cr" podUID="dd1fed80-f428-462e-a294-863944798dcc" Sep 10 00:52:08.842007 kubelet[1980]: E0910 00:52:08.841982 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:52:08.969953 env[1206]: time="2025-09-10T00:52:08.969899929Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:08.971810 env[1206]: time="2025-09-10T00:52:08.971778455Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:034822460c2f667e1f4a7679c843cc35ce1bf2c25dec86f04e07fb403df7e458,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:08.973227 env[1206]: time="2025-09-10T00:52:08.973205158Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:08.974804 env[1206]: time="2025-09-10T00:52:08.974766069Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:73d1e391050490d54e5bee8ff2b1a50a8be1746c98dc530361b00e8c0ab63f87,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:08.975274 env[1206]: time="2025-09-10T00:52:08.975245277Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\" returns image reference \"sha256:034822460c2f667e1f4a7679c843cc35ce1bf2c25dec86f04e07fb403df7e458\"" Sep 10 00:52:08.977212 env[1206]: time="2025-09-10T00:52:08.977178463Z" level=info msg="CreateContainer within sandbox \"de42fbc5edaf08ca50483c93e8485e1f6a0d68d2a1c4feb3e7c4e6bbf4750b9f\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Sep 10 00:52:08.994338 env[1206]: time="2025-09-10T00:52:08.994263886Z" level=info msg="CreateContainer within sandbox \"de42fbc5edaf08ca50483c93e8485e1f6a0d68d2a1c4feb3e7c4e6bbf4750b9f\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"fb35df087e1c691e446aacc5c9380dba3fa3aa1fa8d3e398e50b80f293b23d9c\"" Sep 10 00:52:08.994852 env[1206]: time="2025-09-10T00:52:08.994813194Z" level=info msg="StartContainer for \"fb35df087e1c691e446aacc5c9380dba3fa3aa1fa8d3e398e50b80f293b23d9c\"" Sep 10 00:52:09.013983 systemd[1]: run-containerd-runc-k8s.io-fb35df087e1c691e446aacc5c9380dba3fa3aa1fa8d3e398e50b80f293b23d9c-runc.KvBVwO.mount: Deactivated successfully. Sep 10 00:52:09.016433 systemd[1]: Started cri-containerd-fb35df087e1c691e446aacc5c9380dba3fa3aa1fa8d3e398e50b80f293b23d9c.scope. Sep 10 00:52:09.029000 audit[2645]: AVC avc: denied { perfmon } for pid=2645 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.029000 audit[2645]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fb26c6e1718 items=0 ppid=2463 pid=2645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:09.037111 kernel: audit: type=1400 audit(1757465529.029:999): avc: denied { perfmon } for pid=2645 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.037191 kernel: audit: type=1300 audit(1757465529.029:999): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fb26c6e1718 items=0 ppid=2463 pid=2645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:09.037238 kernel: audit: type=1327 audit(1757465529.029:999): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662333564663038376531633639316534343661616363356339333830 Sep 10 00:52:09.029000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662333564663038376531633639316534343661616363356339333830 Sep 10 00:52:09.029000 audit[2645]: AVC avc: denied { bpf } for pid=2645 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.044310 kernel: audit: type=1400 audit(1757465529.029:1000): avc: denied { bpf } for pid=2645 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.029000 audit[2645]: AVC avc: denied { bpf } for pid=2645 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.029000 audit[2645]: AVC avc: denied { bpf } for pid=2645 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.029000 audit[2645]: AVC avc: denied { perfmon } for pid=2645 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.029000 audit[2645]: AVC avc: denied { perfmon } for pid=2645 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.029000 audit[2645]: AVC avc: denied { perfmon } for pid=2645 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.029000 audit[2645]: AVC avc: denied { perfmon } for pid=2645 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.029000 audit[2645]: AVC avc: denied { perfmon } for pid=2645 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.029000 audit[2645]: AVC avc: denied { bpf } for pid=2645 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.029000 audit[2645]: AVC avc: denied { bpf } for pid=2645 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.029000 audit: BPF prog-id=136 op=LOAD Sep 10 00:52:09.029000 audit[2645]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00028aa78 items=0 ppid=2463 pid=2645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:09.029000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662333564663038376531633639316534343661616363356339333830 Sep 10 00:52:09.036000 audit[2645]: AVC avc: denied { bpf } for pid=2645 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.036000 audit[2645]: AVC avc: denied { bpf } for pid=2645 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.036000 audit[2645]: AVC avc: denied { perfmon } for pid=2645 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.036000 audit[2645]: AVC avc: denied { perfmon } for pid=2645 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.036000 audit[2645]: AVC avc: denied { perfmon } for pid=2645 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.036000 audit[2645]: AVC avc: denied { perfmon } for pid=2645 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.036000 audit[2645]: AVC avc: denied { perfmon } for pid=2645 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.036000 audit[2645]: AVC avc: denied { bpf } for pid=2645 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.036000 audit[2645]: AVC avc: denied { bpf } for pid=2645 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.036000 audit: BPF prog-id=137 op=LOAD Sep 10 00:52:09.036000 audit[2645]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00028aac8 items=0 ppid=2463 pid=2645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:09.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662333564663038376531633639316534343661616363356339333830 Sep 10 00:52:09.040000 audit: BPF prog-id=137 op=UNLOAD Sep 10 00:52:09.040000 audit: BPF prog-id=136 op=UNLOAD Sep 10 00:52:09.040000 audit[2645]: AVC avc: denied { bpf } for pid=2645 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.040000 audit[2645]: AVC avc: denied { bpf } for pid=2645 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.040000 audit[2645]: AVC avc: denied { bpf } for pid=2645 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.040000 audit[2645]: AVC avc: denied { perfmon } for pid=2645 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.040000 audit[2645]: AVC avc: denied { perfmon } for pid=2645 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.040000 audit[2645]: AVC avc: denied { perfmon } for pid=2645 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.040000 audit[2645]: AVC avc: denied { perfmon } for pid=2645 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.040000 audit[2645]: AVC avc: denied { perfmon } for pid=2645 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.040000 audit[2645]: AVC avc: denied { bpf } for pid=2645 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.040000 audit[2645]: AVC avc: denied { bpf } for pid=2645 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:09.040000 audit: BPF prog-id=138 op=LOAD Sep 10 00:52:09.040000 audit[2645]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00028ab58 items=0 ppid=2463 pid=2645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:09.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662333564663038376531633639316534343661616363356339333830 Sep 10 00:52:09.057999 env[1206]: time="2025-09-10T00:52:09.057960948Z" level=info msg="StartContainer for \"fb35df087e1c691e446aacc5c9380dba3fa3aa1fa8d3e398e50b80f293b23d9c\" returns successfully" Sep 10 00:52:10.579952 env[1206]: time="2025-09-10T00:52:10.579883039Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 10 00:52:10.581587 systemd[1]: cri-containerd-fb35df087e1c691e446aacc5c9380dba3fa3aa1fa8d3e398e50b80f293b23d9c.scope: Deactivated successfully. Sep 10 00:52:10.586000 audit: BPF prog-id=138 op=UNLOAD Sep 10 00:52:10.597080 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-fb35df087e1c691e446aacc5c9380dba3fa3aa1fa8d3e398e50b80f293b23d9c-rootfs.mount: Deactivated successfully. Sep 10 00:52:10.601744 env[1206]: time="2025-09-10T00:52:10.601689969Z" level=info msg="shim disconnected" id=fb35df087e1c691e446aacc5c9380dba3fa3aa1fa8d3e398e50b80f293b23d9c Sep 10 00:52:10.601844 env[1206]: time="2025-09-10T00:52:10.601744207Z" level=warning msg="cleaning up after shim disconnected" id=fb35df087e1c691e446aacc5c9380dba3fa3aa1fa8d3e398e50b80f293b23d9c namespace=k8s.io Sep 10 00:52:10.601844 env[1206]: time="2025-09-10T00:52:10.601759858Z" level=info msg="cleaning up dead shim" Sep 10 00:52:10.608121 env[1206]: time="2025-09-10T00:52:10.608077961Z" level=warning msg="cleanup warnings time=\"2025-09-10T00:52:10Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2685 runtime=io.containerd.runc.v2\n" Sep 10 00:52:10.674788 kubelet[1980]: I0910 00:52:10.674764 1980 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Sep 10 00:52:10.699379 systemd[1]: Created slice kubepods-burstable-pod7d47c772_cd04_4790_a262_3fd6b9aebfa7.slice. Sep 10 00:52:10.705465 systemd[1]: Created slice kubepods-besteffort-pod21daa049_0018_40da_91f6_73f54e919867.slice. Sep 10 00:52:10.712817 systemd[1]: Created slice kubepods-besteffort-pod6215ffc9_406c_45b6_858c_b40455eb62dc.slice. Sep 10 00:52:10.716296 systemd[1]: Created slice kubepods-burstable-pod7462035c_d572_4145_a342_1748e1d5702b.slice. Sep 10 00:52:10.721087 systemd[1]: Created slice kubepods-besteffort-pod0558f8f2_9880_494d_a747_c8d38d014ba2.slice. Sep 10 00:52:10.725007 systemd[1]: Created slice kubepods-besteffort-pod20f43dfc_1b32_4cd7_a1c0_40453f8c3425.slice. Sep 10 00:52:10.727985 systemd[1]: Created slice kubepods-besteffort-pod931e4d0a_f2cc_4007_991a_6d4a655442aa.slice. Sep 10 00:52:10.794066 systemd[1]: Created slice kubepods-besteffort-poddd1fed80_f428_462e_a294_863944798dcc.slice. Sep 10 00:52:10.795658 env[1206]: time="2025-09-10T00:52:10.795625410Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-zh8cr,Uid:dd1fed80-f428-462e-a294-863944798dcc,Namespace:calico-system,Attempt:0,}" Sep 10 00:52:10.803840 kubelet[1980]: I0910 00:52:10.803817 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rvwx2\" (UniqueName: \"kubernetes.io/projected/0558f8f2-9880-494d-a747-c8d38d014ba2-kube-api-access-rvwx2\") pod \"calico-apiserver-74fc88dd94-cwd5j\" (UID: \"0558f8f2-9880-494d-a747-c8d38d014ba2\") " pod="calico-apiserver/calico-apiserver-74fc88dd94-cwd5j" Sep 10 00:52:10.803961 kubelet[1980]: I0910 00:52:10.803846 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bcq9q\" (UniqueName: \"kubernetes.io/projected/21daa049-0018-40da-91f6-73f54e919867-kube-api-access-bcq9q\") pod \"calico-kube-controllers-568989f48d-8qw66\" (UID: \"21daa049-0018-40da-91f6-73f54e919867\") " pod="calico-system/calico-kube-controllers-568989f48d-8qw66" Sep 10 00:52:10.803961 kubelet[1980]: I0910 00:52:10.803866 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vg77c\" (UniqueName: \"kubernetes.io/projected/6215ffc9-406c-45b6-858c-b40455eb62dc-kube-api-access-vg77c\") pod \"calico-apiserver-74fc88dd94-pj9t2\" (UID: \"6215ffc9-406c-45b6-858c-b40455eb62dc\") " pod="calico-apiserver/calico-apiserver-74fc88dd94-pj9t2" Sep 10 00:52:10.803961 kubelet[1980]: I0910 00:52:10.803882 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/20f43dfc-1b32-4cd7-a1c0-40453f8c3425-goldmane-key-pair\") pod \"goldmane-7988f88666-xfp8d\" (UID: \"20f43dfc-1b32-4cd7-a1c0-40453f8c3425\") " pod="calico-system/goldmane-7988f88666-xfp8d" Sep 10 00:52:10.803961 kubelet[1980]: I0910 00:52:10.803900 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/931e4d0a-f2cc-4007-991a-6d4a655442aa-whisker-ca-bundle\") pod \"whisker-7c5746f9ff-2hrxh\" (UID: \"931e4d0a-f2cc-4007-991a-6d4a655442aa\") " pod="calico-system/whisker-7c5746f9ff-2hrxh" Sep 10 00:52:10.803961 kubelet[1980]: I0910 00:52:10.803914 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dfqht\" (UniqueName: \"kubernetes.io/projected/931e4d0a-f2cc-4007-991a-6d4a655442aa-kube-api-access-dfqht\") pod \"whisker-7c5746f9ff-2hrxh\" (UID: \"931e4d0a-f2cc-4007-991a-6d4a655442aa\") " pod="calico-system/whisker-7c5746f9ff-2hrxh" Sep 10 00:52:10.804087 kubelet[1980]: I0910 00:52:10.803931 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/0558f8f2-9880-494d-a747-c8d38d014ba2-calico-apiserver-certs\") pod \"calico-apiserver-74fc88dd94-cwd5j\" (UID: \"0558f8f2-9880-494d-a747-c8d38d014ba2\") " pod="calico-apiserver/calico-apiserver-74fc88dd94-cwd5j" Sep 10 00:52:10.804087 kubelet[1980]: I0910 00:52:10.803946 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/7d47c772-cd04-4790-a262-3fd6b9aebfa7-config-volume\") pod \"coredns-7c65d6cfc9-8nj94\" (UID: \"7d47c772-cd04-4790-a262-3fd6b9aebfa7\") " pod="kube-system/coredns-7c65d6cfc9-8nj94" Sep 10 00:52:10.804087 kubelet[1980]: I0910 00:52:10.803962 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4mxhb\" (UniqueName: \"kubernetes.io/projected/7462035c-d572-4145-a342-1748e1d5702b-kube-api-access-4mxhb\") pod \"coredns-7c65d6cfc9-7g8cw\" (UID: \"7462035c-d572-4145-a342-1748e1d5702b\") " pod="kube-system/coredns-7c65d6cfc9-7g8cw" Sep 10 00:52:10.804682 kubelet[1980]: I0910 00:52:10.804663 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8665f\" (UniqueName: \"kubernetes.io/projected/20f43dfc-1b32-4cd7-a1c0-40453f8c3425-kube-api-access-8665f\") pod \"goldmane-7988f88666-xfp8d\" (UID: \"20f43dfc-1b32-4cd7-a1c0-40453f8c3425\") " pod="calico-system/goldmane-7988f88666-xfp8d" Sep 10 00:52:10.804805 kubelet[1980]: I0910 00:52:10.804788 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/21daa049-0018-40da-91f6-73f54e919867-tigera-ca-bundle\") pod \"calico-kube-controllers-568989f48d-8qw66\" (UID: \"21daa049-0018-40da-91f6-73f54e919867\") " pod="calico-system/calico-kube-controllers-568989f48d-8qw66" Sep 10 00:52:10.804919 kubelet[1980]: I0910 00:52:10.804904 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/931e4d0a-f2cc-4007-991a-6d4a655442aa-whisker-backend-key-pair\") pod \"whisker-7c5746f9ff-2hrxh\" (UID: \"931e4d0a-f2cc-4007-991a-6d4a655442aa\") " pod="calico-system/whisker-7c5746f9ff-2hrxh" Sep 10 00:52:10.805050 kubelet[1980]: I0910 00:52:10.805034 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/7462035c-d572-4145-a342-1748e1d5702b-config-volume\") pod \"coredns-7c65d6cfc9-7g8cw\" (UID: \"7462035c-d572-4145-a342-1748e1d5702b\") " pod="kube-system/coredns-7c65d6cfc9-7g8cw" Sep 10 00:52:10.805155 kubelet[1980]: I0910 00:52:10.805140 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/20f43dfc-1b32-4cd7-a1c0-40453f8c3425-goldmane-ca-bundle\") pod \"goldmane-7988f88666-xfp8d\" (UID: \"20f43dfc-1b32-4cd7-a1c0-40453f8c3425\") " pod="calico-system/goldmane-7988f88666-xfp8d" Sep 10 00:52:10.805288 kubelet[1980]: I0910 00:52:10.805250 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-c9cgj\" (UniqueName: \"kubernetes.io/projected/7d47c772-cd04-4790-a262-3fd6b9aebfa7-kube-api-access-c9cgj\") pod \"coredns-7c65d6cfc9-8nj94\" (UID: \"7d47c772-cd04-4790-a262-3fd6b9aebfa7\") " pod="kube-system/coredns-7c65d6cfc9-8nj94" Sep 10 00:52:10.805288 kubelet[1980]: I0910 00:52:10.805275 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/6215ffc9-406c-45b6-858c-b40455eb62dc-calico-apiserver-certs\") pod \"calico-apiserver-74fc88dd94-pj9t2\" (UID: \"6215ffc9-406c-45b6-858c-b40455eb62dc\") " pod="calico-apiserver/calico-apiserver-74fc88dd94-pj9t2" Sep 10 00:52:10.805288 kubelet[1980]: I0910 00:52:10.805290 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/20f43dfc-1b32-4cd7-a1c0-40453f8c3425-config\") pod \"goldmane-7988f88666-xfp8d\" (UID: \"20f43dfc-1b32-4cd7-a1c0-40453f8c3425\") " pod="calico-system/goldmane-7988f88666-xfp8d" Sep 10 00:52:10.851326 env[1206]: time="2025-09-10T00:52:10.851191401Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\"" Sep 10 00:52:10.856869 env[1206]: time="2025-09-10T00:52:10.856812764Z" level=error msg="Failed to destroy network for sandbox \"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:10.859419 env[1206]: time="2025-09-10T00:52:10.857136400Z" level=error msg="encountered an error cleaning up failed sandbox \"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:10.859419 env[1206]: time="2025-09-10T00:52:10.857181670Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-zh8cr,Uid:dd1fed80-f428-462e-a294-863944798dcc,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:10.858765 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444-shm.mount: Deactivated successfully. Sep 10 00:52:10.859568 kubelet[1980]: E0910 00:52:10.857350 1980 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:10.859568 kubelet[1980]: E0910 00:52:10.857421 1980 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-zh8cr" Sep 10 00:52:10.859568 kubelet[1980]: E0910 00:52:10.857443 1980 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-zh8cr" Sep 10 00:52:10.859678 kubelet[1980]: E0910 00:52:10.857487 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-zh8cr_calico-system(dd1fed80-f428-462e-a294-863944798dcc)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-zh8cr_calico-system(dd1fed80-f428-462e-a294-863944798dcc)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-zh8cr" podUID="dd1fed80-f428-462e-a294-863944798dcc" Sep 10 00:52:11.001673 kubelet[1980]: E0910 00:52:11.001631 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:52:11.002104 env[1206]: time="2025-09-10T00:52:11.002072868Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-8nj94,Uid:7d47c772-cd04-4790-a262-3fd6b9aebfa7,Namespace:kube-system,Attempt:0,}" Sep 10 00:52:11.009280 env[1206]: time="2025-09-10T00:52:11.009245980Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-568989f48d-8qw66,Uid:21daa049-0018-40da-91f6-73f54e919867,Namespace:calico-system,Attempt:0,}" Sep 10 00:52:11.017904 env[1206]: time="2025-09-10T00:52:11.017862880Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-74fc88dd94-pj9t2,Uid:6215ffc9-406c-45b6-858c-b40455eb62dc,Namespace:calico-apiserver,Attempt:0,}" Sep 10 00:52:11.019034 kubelet[1980]: E0910 00:52:11.018996 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:52:11.019394 env[1206]: time="2025-09-10T00:52:11.019252749Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-7g8cw,Uid:7462035c-d572-4145-a342-1748e1d5702b,Namespace:kube-system,Attempt:0,}" Sep 10 00:52:11.023700 env[1206]: time="2025-09-10T00:52:11.023673147Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-74fc88dd94-cwd5j,Uid:0558f8f2-9880-494d-a747-c8d38d014ba2,Namespace:calico-apiserver,Attempt:0,}" Sep 10 00:52:11.036733 env[1206]: time="2025-09-10T00:52:11.036695376Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7c5746f9ff-2hrxh,Uid:931e4d0a-f2cc-4007-991a-6d4a655442aa,Namespace:calico-system,Attempt:0,}" Sep 10 00:52:11.037278 env[1206]: time="2025-09-10T00:52:11.037067296Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-xfp8d,Uid:20f43dfc-1b32-4cd7-a1c0-40453f8c3425,Namespace:calico-system,Attempt:0,}" Sep 10 00:52:11.070487 env[1206]: time="2025-09-10T00:52:11.070434964Z" level=error msg="Failed to destroy network for sandbox \"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.071427 env[1206]: time="2025-09-10T00:52:11.071368343Z" level=error msg="encountered an error cleaning up failed sandbox \"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.071488 env[1206]: time="2025-09-10T00:52:11.071443513Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-568989f48d-8qw66,Uid:21daa049-0018-40da-91f6-73f54e919867,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.071658 kubelet[1980]: E0910 00:52:11.071620 1980 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.071735 kubelet[1980]: E0910 00:52:11.071677 1980 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-568989f48d-8qw66" Sep 10 00:52:11.071735 kubelet[1980]: E0910 00:52:11.071696 1980 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-568989f48d-8qw66" Sep 10 00:52:11.071796 kubelet[1980]: E0910 00:52:11.071731 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-568989f48d-8qw66_calico-system(21daa049-0018-40da-91f6-73f54e919867)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-568989f48d-8qw66_calico-system(21daa049-0018-40da-91f6-73f54e919867)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-568989f48d-8qw66" podUID="21daa049-0018-40da-91f6-73f54e919867" Sep 10 00:52:11.075805 env[1206]: time="2025-09-10T00:52:11.075748151Z" level=error msg="Failed to destroy network for sandbox \"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.076126 env[1206]: time="2025-09-10T00:52:11.076073579Z" level=error msg="encountered an error cleaning up failed sandbox \"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.076348 env[1206]: time="2025-09-10T00:52:11.076319670Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-8nj94,Uid:7d47c772-cd04-4790-a262-3fd6b9aebfa7,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.077239 kubelet[1980]: E0910 00:52:11.076572 1980 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.077239 kubelet[1980]: E0910 00:52:11.076634 1980 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-8nj94" Sep 10 00:52:11.077239 kubelet[1980]: E0910 00:52:11.076653 1980 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-8nj94" Sep 10 00:52:11.077368 kubelet[1980]: E0910 00:52:11.076697 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-8nj94_kube-system(7d47c772-cd04-4790-a262-3fd6b9aebfa7)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-8nj94_kube-system(7d47c772-cd04-4790-a262-3fd6b9aebfa7)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-8nj94" podUID="7d47c772-cd04-4790-a262-3fd6b9aebfa7" Sep 10 00:52:11.131732 env[1206]: time="2025-09-10T00:52:11.130824655Z" level=error msg="Failed to destroy network for sandbox \"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.132153 env[1206]: time="2025-09-10T00:52:11.132126279Z" level=error msg="encountered an error cleaning up failed sandbox \"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.132317 env[1206]: time="2025-09-10T00:52:11.132287490Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-74fc88dd94-pj9t2,Uid:6215ffc9-406c-45b6-858c-b40455eb62dc,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.132746 kubelet[1980]: E0910 00:52:11.132705 1980 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.132811 kubelet[1980]: E0910 00:52:11.132770 1980 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-74fc88dd94-pj9t2" Sep 10 00:52:11.132811 kubelet[1980]: E0910 00:52:11.132789 1980 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-74fc88dd94-pj9t2" Sep 10 00:52:11.132888 kubelet[1980]: E0910 00:52:11.132833 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-74fc88dd94-pj9t2_calico-apiserver(6215ffc9-406c-45b6-858c-b40455eb62dc)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-74fc88dd94-pj9t2_calico-apiserver(6215ffc9-406c-45b6-858c-b40455eb62dc)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-74fc88dd94-pj9t2" podUID="6215ffc9-406c-45b6-858c-b40455eb62dc" Sep 10 00:52:11.139807 env[1206]: time="2025-09-10T00:52:11.139747575Z" level=error msg="Failed to destroy network for sandbox \"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.140266 env[1206]: time="2025-09-10T00:52:11.140229545Z" level=error msg="encountered an error cleaning up failed sandbox \"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.140376 env[1206]: time="2025-09-10T00:52:11.140348231Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-7g8cw,Uid:7462035c-d572-4145-a342-1748e1d5702b,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.140636 kubelet[1980]: E0910 00:52:11.140607 1980 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.140711 kubelet[1980]: E0910 00:52:11.140658 1980 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-7g8cw" Sep 10 00:52:11.140711 kubelet[1980]: E0910 00:52:11.140674 1980 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-7g8cw" Sep 10 00:52:11.140766 kubelet[1980]: E0910 00:52:11.140728 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-7g8cw_kube-system(7462035c-d572-4145-a342-1748e1d5702b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-7g8cw_kube-system(7462035c-d572-4145-a342-1748e1d5702b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-7g8cw" podUID="7462035c-d572-4145-a342-1748e1d5702b" Sep 10 00:52:11.154100 env[1206]: time="2025-09-10T00:52:11.154022719Z" level=error msg="Failed to destroy network for sandbox \"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.154630 env[1206]: time="2025-09-10T00:52:11.154589639Z" level=error msg="encountered an error cleaning up failed sandbox \"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.154751 env[1206]: time="2025-09-10T00:52:11.154724286Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-74fc88dd94-cwd5j,Uid:0558f8f2-9880-494d-a747-c8d38d014ba2,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.155071 kubelet[1980]: E0910 00:52:11.155038 1980 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.155138 kubelet[1980]: E0910 00:52:11.155095 1980 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-74fc88dd94-cwd5j" Sep 10 00:52:11.155138 kubelet[1980]: E0910 00:52:11.155113 1980 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-74fc88dd94-cwd5j" Sep 10 00:52:11.155185 kubelet[1980]: E0910 00:52:11.155146 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-74fc88dd94-cwd5j_calico-apiserver(0558f8f2-9880-494d-a747-c8d38d014ba2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-74fc88dd94-cwd5j_calico-apiserver(0558f8f2-9880-494d-a747-c8d38d014ba2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-74fc88dd94-cwd5j" podUID="0558f8f2-9880-494d-a747-c8d38d014ba2" Sep 10 00:52:11.159609 env[1206]: time="2025-09-10T00:52:11.159536836Z" level=error msg="Failed to destroy network for sandbox \"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.159908 env[1206]: time="2025-09-10T00:52:11.159870190Z" level=error msg="encountered an error cleaning up failed sandbox \"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.159947 env[1206]: time="2025-09-10T00:52:11.159924669Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-xfp8d,Uid:20f43dfc-1b32-4cd7-a1c0-40453f8c3425,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.160123 kubelet[1980]: E0910 00:52:11.160082 1980 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.160196 kubelet[1980]: E0910 00:52:11.160142 1980 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-7988f88666-xfp8d" Sep 10 00:52:11.160196 kubelet[1980]: E0910 00:52:11.160159 1980 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-7988f88666-xfp8d" Sep 10 00:52:11.160264 kubelet[1980]: E0910 00:52:11.160200 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-7988f88666-xfp8d_calico-system(20f43dfc-1b32-4cd7-a1c0-40453f8c3425)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-7988f88666-xfp8d_calico-system(20f43dfc-1b32-4cd7-a1c0-40453f8c3425)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-7988f88666-xfp8d" podUID="20f43dfc-1b32-4cd7-a1c0-40453f8c3425" Sep 10 00:52:11.162657 env[1206]: time="2025-09-10T00:52:11.162628717Z" level=error msg="Failed to destroy network for sandbox \"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.162874 env[1206]: time="2025-09-10T00:52:11.162848826Z" level=error msg="encountered an error cleaning up failed sandbox \"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.162908 env[1206]: time="2025-09-10T00:52:11.162885589Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7c5746f9ff-2hrxh,Uid:931e4d0a-f2cc-4007-991a-6d4a655442aa,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.163080 kubelet[1980]: E0910 00:52:11.163054 1980 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.163142 kubelet[1980]: E0910 00:52:11.163086 1980 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7c5746f9ff-2hrxh" Sep 10 00:52:11.163142 kubelet[1980]: E0910 00:52:11.163101 1980 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7c5746f9ff-2hrxh" Sep 10 00:52:11.163142 kubelet[1980]: E0910 00:52:11.163128 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-7c5746f9ff-2hrxh_calico-system(931e4d0a-f2cc-4007-991a-6d4a655442aa)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-7c5746f9ff-2hrxh_calico-system(931e4d0a-f2cc-4007-991a-6d4a655442aa)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7c5746f9ff-2hrxh" podUID="931e4d0a-f2cc-4007-991a-6d4a655442aa" Sep 10 00:52:11.850954 kubelet[1980]: I0910 00:52:11.850927 1980 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Sep 10 00:52:11.851443 env[1206]: time="2025-09-10T00:52:11.851414381Z" level=info msg="StopPodSandbox for \"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\"" Sep 10 00:52:11.851715 kubelet[1980]: I0910 00:52:11.851675 1980 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Sep 10 00:52:11.851962 env[1206]: time="2025-09-10T00:52:11.851939067Z" level=info msg="StopPodSandbox for \"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\"" Sep 10 00:52:11.852536 kubelet[1980]: I0910 00:52:11.852514 1980 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Sep 10 00:52:11.852860 env[1206]: time="2025-09-10T00:52:11.852829832Z" level=info msg="StopPodSandbox for \"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\"" Sep 10 00:52:11.853806 kubelet[1980]: I0910 00:52:11.853784 1980 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Sep 10 00:52:11.854127 env[1206]: time="2025-09-10T00:52:11.854104041Z" level=info msg="StopPodSandbox for \"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\"" Sep 10 00:52:11.856033 kubelet[1980]: I0910 00:52:11.855384 1980 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Sep 10 00:52:11.856688 env[1206]: time="2025-09-10T00:52:11.856657008Z" level=info msg="StopPodSandbox for \"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\"" Sep 10 00:52:11.857628 kubelet[1980]: I0910 00:52:11.857513 1980 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Sep 10 00:52:11.860077 kubelet[1980]: I0910 00:52:11.859775 1980 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Sep 10 00:52:11.860193 env[1206]: time="2025-09-10T00:52:11.860147754Z" level=info msg="StopPodSandbox for \"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\"" Sep 10 00:52:11.860274 env[1206]: time="2025-09-10T00:52:11.859232159Z" level=info msg="StopPodSandbox for \"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\"" Sep 10 00:52:11.861283 kubelet[1980]: I0910 00:52:11.861049 1980 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Sep 10 00:52:11.861452 env[1206]: time="2025-09-10T00:52:11.861433365Z" level=info msg="StopPodSandbox for \"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\"" Sep 10 00:52:11.903870 env[1206]: time="2025-09-10T00:52:11.903808460Z" level=error msg="StopPodSandbox for \"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\" failed" error="failed to destroy network for sandbox \"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.904081 kubelet[1980]: E0910 00:52:11.904046 1980 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Sep 10 00:52:11.904152 kubelet[1980]: E0910 00:52:11.904111 1980 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7"} Sep 10 00:52:11.904197 kubelet[1980]: E0910 00:52:11.904185 1980 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7d47c772-cd04-4790-a262-3fd6b9aebfa7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 00:52:11.904260 kubelet[1980]: E0910 00:52:11.904209 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7d47c772-cd04-4790-a262-3fd6b9aebfa7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-8nj94" podUID="7d47c772-cd04-4790-a262-3fd6b9aebfa7" Sep 10 00:52:11.904916 env[1206]: time="2025-09-10T00:52:11.904891097Z" level=error msg="StopPodSandbox for \"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\" failed" error="failed to destroy network for sandbox \"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.905100 kubelet[1980]: E0910 00:52:11.905069 1980 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Sep 10 00:52:11.905100 kubelet[1980]: E0910 00:52:11.905090 1980 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc"} Sep 10 00:52:11.905179 kubelet[1980]: E0910 00:52:11.905128 1980 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"931e4d0a-f2cc-4007-991a-6d4a655442aa\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 00:52:11.905179 kubelet[1980]: E0910 00:52:11.905144 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"931e4d0a-f2cc-4007-991a-6d4a655442aa\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7c5746f9ff-2hrxh" podUID="931e4d0a-f2cc-4007-991a-6d4a655442aa" Sep 10 00:52:11.905898 env[1206]: time="2025-09-10T00:52:11.905858766Z" level=error msg="StopPodSandbox for \"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\" failed" error="failed to destroy network for sandbox \"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.905982 kubelet[1980]: E0910 00:52:11.905963 1980 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Sep 10 00:52:11.906040 kubelet[1980]: E0910 00:52:11.905984 1980 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c"} Sep 10 00:52:11.906040 kubelet[1980]: E0910 00:52:11.906025 1980 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"0558f8f2-9880-494d-a747-c8d38d014ba2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 00:52:11.906106 kubelet[1980]: E0910 00:52:11.906043 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"0558f8f2-9880-494d-a747-c8d38d014ba2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-74fc88dd94-cwd5j" podUID="0558f8f2-9880-494d-a747-c8d38d014ba2" Sep 10 00:52:11.920514 env[1206]: time="2025-09-10T00:52:11.920448988Z" level=error msg="StopPodSandbox for \"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\" failed" error="failed to destroy network for sandbox \"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.920757 kubelet[1980]: E0910 00:52:11.920713 1980 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Sep 10 00:52:11.920818 kubelet[1980]: E0910 00:52:11.920775 1980 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98"} Sep 10 00:52:11.920855 kubelet[1980]: E0910 00:52:11.920818 1980 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"21daa049-0018-40da-91f6-73f54e919867\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 00:52:11.920917 kubelet[1980]: E0910 00:52:11.920845 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"21daa049-0018-40da-91f6-73f54e919867\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-568989f48d-8qw66" podUID="21daa049-0018-40da-91f6-73f54e919867" Sep 10 00:52:11.935803 env[1206]: time="2025-09-10T00:52:11.935745959Z" level=error msg="StopPodSandbox for \"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\" failed" error="failed to destroy network for sandbox \"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.936060 kubelet[1980]: E0910 00:52:11.936016 1980 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Sep 10 00:52:11.936120 kubelet[1980]: E0910 00:52:11.936078 1980 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210"} Sep 10 00:52:11.936147 kubelet[1980]: E0910 00:52:11.936119 1980 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7462035c-d572-4145-a342-1748e1d5702b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 00:52:11.936211 kubelet[1980]: E0910 00:52:11.936152 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7462035c-d572-4145-a342-1748e1d5702b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-7g8cw" podUID="7462035c-d572-4145-a342-1748e1d5702b" Sep 10 00:52:11.936753 env[1206]: time="2025-09-10T00:52:11.936707735Z" level=error msg="StopPodSandbox for \"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\" failed" error="failed to destroy network for sandbox \"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.936798 env[1206]: time="2025-09-10T00:52:11.936729037Z" level=error msg="StopPodSandbox for \"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\" failed" error="failed to destroy network for sandbox \"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.936915 kubelet[1980]: E0910 00:52:11.936859 1980 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Sep 10 00:52:11.936915 kubelet[1980]: E0910 00:52:11.936896 1980 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Sep 10 00:52:11.936989 kubelet[1980]: E0910 00:52:11.936924 1980 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444"} Sep 10 00:52:11.936989 kubelet[1980]: E0910 00:52:11.936959 1980 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"dd1fed80-f428-462e-a294-863944798dcc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 00:52:11.936989 kubelet[1980]: E0910 00:52:11.936908 1980 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a"} Sep 10 00:52:11.936989 kubelet[1980]: E0910 00:52:11.936972 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"dd1fed80-f428-462e-a294-863944798dcc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-zh8cr" podUID="dd1fed80-f428-462e-a294-863944798dcc" Sep 10 00:52:11.937122 kubelet[1980]: E0910 00:52:11.936992 1980 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6215ffc9-406c-45b6-858c-b40455eb62dc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 00:52:11.937122 kubelet[1980]: E0910 00:52:11.937015 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6215ffc9-406c-45b6-858c-b40455eb62dc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-74fc88dd94-pj9t2" podUID="6215ffc9-406c-45b6-858c-b40455eb62dc" Sep 10 00:52:11.939466 env[1206]: time="2025-09-10T00:52:11.939439338Z" level=error msg="StopPodSandbox for \"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\" failed" error="failed to destroy network for sandbox \"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:52:11.939583 kubelet[1980]: E0910 00:52:11.939557 1980 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Sep 10 00:52:11.939661 kubelet[1980]: E0910 00:52:11.939588 1980 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526"} Sep 10 00:52:11.939661 kubelet[1980]: E0910 00:52:11.939635 1980 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"20f43dfc-1b32-4cd7-a1c0-40453f8c3425\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 00:52:11.939661 kubelet[1980]: E0910 00:52:11.939651 1980 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"20f43dfc-1b32-4cd7-a1c0-40453f8c3425\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-7988f88666-xfp8d" podUID="20f43dfc-1b32-4cd7-a1c0-40453f8c3425" Sep 10 00:52:17.273559 systemd[1]: Started sshd@7-10.0.0.141:22-10.0.0.1:45014.service. Sep 10 00:52:17.279569 kernel: kauditd_printk_skb: 40 callbacks suppressed Sep 10 00:52:17.279658 kernel: audit: type=1130 audit(1757465537.273:1006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.141:22-10.0.0.1:45014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:17.273000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.141:22-10.0.0.1:45014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:17.307000 audit[3133]: USER_ACCT pid=3133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:17.312575 sshd[3133]: Accepted publickey for core from 10.0.0.1 port 45014 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:52:17.312837 kernel: audit: type=1101 audit(1757465537.307:1007): pid=3133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:17.312862 kernel: audit: type=1103 audit(1757465537.312:1008): pid=3133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:17.312000 audit[3133]: CRED_ACQ pid=3133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:17.313167 sshd[3133]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:52:17.320486 kernel: audit: type=1006 audit(1757465537.312:1009): pid=3133 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Sep 10 00:52:17.320526 kernel: audit: type=1300 audit(1757465537.312:1009): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc449e6210 a2=3 a3=0 items=0 ppid=1 pid=3133 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:17.312000 audit[3133]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc449e6210 a2=3 a3=0 items=0 ppid=1 pid=3133 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:17.319617 systemd-logind[1191]: New session 8 of user core. Sep 10 00:52:17.319954 systemd[1]: Started session-8.scope. Sep 10 00:52:17.323620 kernel: audit: type=1327 audit(1757465537.312:1009): proctitle=737368643A20636F7265205B707269765D Sep 10 00:52:17.312000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:52:17.324000 audit[3133]: USER_START pid=3133 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:17.329459 kernel: audit: type=1105 audit(1757465537.324:1010): pid=3133 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:17.329506 kernel: audit: type=1103 audit(1757465537.325:1011): pid=3135 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:17.325000 audit[3135]: CRED_ACQ pid=3135 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:17.440893 sshd[3133]: pam_unix(sshd:session): session closed for user core Sep 10 00:52:17.441000 audit[3133]: USER_END pid=3133 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:17.443240 systemd[1]: sshd@7-10.0.0.141:22-10.0.0.1:45014.service: Deactivated successfully. Sep 10 00:52:17.446637 kernel: audit: type=1106 audit(1757465537.441:1012): pid=3133 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:17.443897 systemd[1]: session-8.scope: Deactivated successfully. Sep 10 00:52:17.444684 systemd-logind[1191]: Session 8 logged out. Waiting for processes to exit. Sep 10 00:52:17.445443 systemd-logind[1191]: Removed session 8. Sep 10 00:52:17.441000 audit[3133]: CRED_DISP pid=3133 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:17.442000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.141:22-10.0.0.1:45014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:17.450629 kernel: audit: type=1104 audit(1757465537.441:1013): pid=3133 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:18.231212 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1355040131.mount: Deactivated successfully. Sep 10 00:52:19.428315 env[1206]: time="2025-09-10T00:52:19.428223817Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:19.431014 env[1206]: time="2025-09-10T00:52:19.430977688Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ce9c4ac0f175f22c56e80844e65379d9ebe1d8a4e2bbb38dc1db0f53a8826f0f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:19.432773 env[1206]: time="2025-09-10T00:52:19.432752351Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:19.434458 env[1206]: time="2025-09-10T00:52:19.434413609Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:bcb8146fcaeced1e1c88fad3eaa697f1680746bd23c3e7e8d4535bc484c6f2a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:19.434745 env[1206]: time="2025-09-10T00:52:19.434707561Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\" returns image reference \"sha256:ce9c4ac0f175f22c56e80844e65379d9ebe1d8a4e2bbb38dc1db0f53a8826f0f\"" Sep 10 00:52:19.443742 env[1206]: time="2025-09-10T00:52:19.443706804Z" level=info msg="CreateContainer within sandbox \"de42fbc5edaf08ca50483c93e8485e1f6a0d68d2a1c4feb3e7c4e6bbf4750b9f\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Sep 10 00:52:19.461016 env[1206]: time="2025-09-10T00:52:19.460984253Z" level=info msg="CreateContainer within sandbox \"de42fbc5edaf08ca50483c93e8485e1f6a0d68d2a1c4feb3e7c4e6bbf4750b9f\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"7736a6e54312fff773510a4570737d8cb9480367afe3b755e5f30a2959eddd9a\"" Sep 10 00:52:19.461385 env[1206]: time="2025-09-10T00:52:19.461360509Z" level=info msg="StartContainer for \"7736a6e54312fff773510a4570737d8cb9480367afe3b755e5f30a2959eddd9a\"" Sep 10 00:52:19.478233 systemd[1]: Started cri-containerd-7736a6e54312fff773510a4570737d8cb9480367afe3b755e5f30a2959eddd9a.scope. Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f60644f51c8 items=0 ppid=2463 pid=3155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:19.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737333661366535343331326666663737333531306134353730373337 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit: BPF prog-id=139 op=LOAD Sep 10 00:52:19.492000 audit[3155]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0003c4158 items=0 ppid=2463 pid=3155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:19.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737333661366535343331326666663737333531306134353730373337 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit: BPF prog-id=140 op=LOAD Sep 10 00:52:19.492000 audit[3155]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0003c41a8 items=0 ppid=2463 pid=3155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:19.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737333661366535343331326666663737333531306134353730373337 Sep 10 00:52:19.492000 audit: BPF prog-id=140 op=UNLOAD Sep 10 00:52:19.492000 audit: BPF prog-id=139 op=UNLOAD Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:19.492000 audit: BPF prog-id=141 op=LOAD Sep 10 00:52:19.492000 audit[3155]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0003c4238 items=0 ppid=2463 pid=3155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:19.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737333661366535343331326666663737333531306134353730373337 Sep 10 00:52:19.613333 env[1206]: time="2025-09-10T00:52:19.613271896Z" level=info msg="StartContainer for \"7736a6e54312fff773510a4570737d8cb9480367afe3b755e5f30a2959eddd9a\" returns successfully" Sep 10 00:52:19.647238 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Sep 10 00:52:19.647359 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Sep 10 00:52:19.722551 env[1206]: time="2025-09-10T00:52:19.722431971Z" level=info msg="StopPodSandbox for \"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\"" Sep 10 00:52:19.840751 env[1206]: 2025-09-10 00:52:19.779 [INFO][3213] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Sep 10 00:52:19.840751 env[1206]: 2025-09-10 00:52:19.779 [INFO][3213] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" iface="eth0" netns="/var/run/netns/cni-71574745-7483-98bf-bc97-37b4ab6efb15" Sep 10 00:52:19.840751 env[1206]: 2025-09-10 00:52:19.779 [INFO][3213] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" iface="eth0" netns="/var/run/netns/cni-71574745-7483-98bf-bc97-37b4ab6efb15" Sep 10 00:52:19.840751 env[1206]: 2025-09-10 00:52:19.779 [INFO][3213] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" iface="eth0" netns="/var/run/netns/cni-71574745-7483-98bf-bc97-37b4ab6efb15" Sep 10 00:52:19.840751 env[1206]: 2025-09-10 00:52:19.780 [INFO][3213] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Sep 10 00:52:19.840751 env[1206]: 2025-09-10 00:52:19.780 [INFO][3213] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Sep 10 00:52:19.840751 env[1206]: 2025-09-10 00:52:19.825 [INFO][3224] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" HandleID="k8s-pod-network.502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Workload="localhost-k8s-whisker--7c5746f9ff--2hrxh-eth0" Sep 10 00:52:19.840751 env[1206]: 2025-09-10 00:52:19.826 [INFO][3224] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:19.840751 env[1206]: 2025-09-10 00:52:19.826 [INFO][3224] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:19.840751 env[1206]: 2025-09-10 00:52:19.834 [WARNING][3224] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" HandleID="k8s-pod-network.502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Workload="localhost-k8s-whisker--7c5746f9ff--2hrxh-eth0" Sep 10 00:52:19.840751 env[1206]: 2025-09-10 00:52:19.834 [INFO][3224] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" HandleID="k8s-pod-network.502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Workload="localhost-k8s-whisker--7c5746f9ff--2hrxh-eth0" Sep 10 00:52:19.840751 env[1206]: 2025-09-10 00:52:19.837 [INFO][3224] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:19.840751 env[1206]: 2025-09-10 00:52:19.839 [INFO][3213] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Sep 10 00:52:19.841269 env[1206]: time="2025-09-10T00:52:19.840890922Z" level=info msg="TearDown network for sandbox \"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\" successfully" Sep 10 00:52:19.841269 env[1206]: time="2025-09-10T00:52:19.840923686Z" level=info msg="StopPodSandbox for \"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\" returns successfully" Sep 10 00:52:19.897886 kubelet[1980]: I0910 00:52:19.897810 1980 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-sfsrv" podStartSLOduration=1.7899685760000001 podStartE2EDuration="21.897787253s" podCreationTimestamp="2025-09-10 00:51:58 +0000 UTC" firstStartedPulling="2025-09-10 00:51:59.327526907 +0000 UTC m=+18.618690169" lastFinishedPulling="2025-09-10 00:52:19.435345584 +0000 UTC m=+38.726508846" observedRunningTime="2025-09-10 00:52:19.897534964 +0000 UTC m=+39.188698226" watchObservedRunningTime="2025-09-10 00:52:19.897787253 +0000 UTC m=+39.188950516" Sep 10 00:52:19.961109 kubelet[1980]: I0910 00:52:19.961069 1980 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/931e4d0a-f2cc-4007-991a-6d4a655442aa-whisker-ca-bundle\") pod \"931e4d0a-f2cc-4007-991a-6d4a655442aa\" (UID: \"931e4d0a-f2cc-4007-991a-6d4a655442aa\") " Sep 10 00:52:19.961314 kubelet[1980]: I0910 00:52:19.961120 1980 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/931e4d0a-f2cc-4007-991a-6d4a655442aa-whisker-backend-key-pair\") pod \"931e4d0a-f2cc-4007-991a-6d4a655442aa\" (UID: \"931e4d0a-f2cc-4007-991a-6d4a655442aa\") " Sep 10 00:52:19.961314 kubelet[1980]: I0910 00:52:19.961166 1980 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-dfqht\" (UniqueName: \"kubernetes.io/projected/931e4d0a-f2cc-4007-991a-6d4a655442aa-kube-api-access-dfqht\") pod \"931e4d0a-f2cc-4007-991a-6d4a655442aa\" (UID: \"931e4d0a-f2cc-4007-991a-6d4a655442aa\") " Sep 10 00:52:19.961466 kubelet[1980]: I0910 00:52:19.961422 1980 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/931e4d0a-f2cc-4007-991a-6d4a655442aa-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "931e4d0a-f2cc-4007-991a-6d4a655442aa" (UID: "931e4d0a-f2cc-4007-991a-6d4a655442aa"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Sep 10 00:52:19.964407 kubelet[1980]: I0910 00:52:19.964365 1980 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/931e4d0a-f2cc-4007-991a-6d4a655442aa-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "931e4d0a-f2cc-4007-991a-6d4a655442aa" (UID: "931e4d0a-f2cc-4007-991a-6d4a655442aa"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Sep 10 00:52:19.964949 kubelet[1980]: I0910 00:52:19.964911 1980 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/931e4d0a-f2cc-4007-991a-6d4a655442aa-kube-api-access-dfqht" (OuterVolumeSpecName: "kube-api-access-dfqht") pod "931e4d0a-f2cc-4007-991a-6d4a655442aa" (UID: "931e4d0a-f2cc-4007-991a-6d4a655442aa"). InnerVolumeSpecName "kube-api-access-dfqht". PluginName "kubernetes.io/projected", VolumeGidValue "" Sep 10 00:52:20.062306 kubelet[1980]: I0910 00:52:20.062241 1980 reconciler_common.go:293] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/931e4d0a-f2cc-4007-991a-6d4a655442aa-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Sep 10 00:52:20.062306 kubelet[1980]: I0910 00:52:20.062262 1980 reconciler_common.go:293] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/931e4d0a-f2cc-4007-991a-6d4a655442aa-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Sep 10 00:52:20.062306 kubelet[1980]: I0910 00:52:20.062270 1980 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-dfqht\" (UniqueName: \"kubernetes.io/projected/931e4d0a-f2cc-4007-991a-6d4a655442aa-kube-api-access-dfqht\") on node \"localhost\" DevicePath \"\"" Sep 10 00:52:20.187557 systemd[1]: Removed slice kubepods-besteffort-pod931e4d0a_f2cc_4007_991a_6d4a655442aa.slice. Sep 10 00:52:20.223572 systemd[1]: Created slice kubepods-besteffort-pod587f5229_3f92_4144_adbd_36120e56d867.slice. Sep 10 00:52:20.263779 kubelet[1980]: I0910 00:52:20.263738 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pgx8l\" (UniqueName: \"kubernetes.io/projected/587f5229-3f92-4144-adbd-36120e56d867-kube-api-access-pgx8l\") pod \"whisker-9b9c54998-jvg9s\" (UID: \"587f5229-3f92-4144-adbd-36120e56d867\") " pod="calico-system/whisker-9b9c54998-jvg9s" Sep 10 00:52:20.263779 kubelet[1980]: I0910 00:52:20.263782 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/587f5229-3f92-4144-adbd-36120e56d867-whisker-backend-key-pair\") pod \"whisker-9b9c54998-jvg9s\" (UID: \"587f5229-3f92-4144-adbd-36120e56d867\") " pod="calico-system/whisker-9b9c54998-jvg9s" Sep 10 00:52:20.263779 kubelet[1980]: I0910 00:52:20.263804 1980 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/587f5229-3f92-4144-adbd-36120e56d867-whisker-ca-bundle\") pod \"whisker-9b9c54998-jvg9s\" (UID: \"587f5229-3f92-4144-adbd-36120e56d867\") " pod="calico-system/whisker-9b9c54998-jvg9s" Sep 10 00:52:20.443261 systemd[1]: run-netns-cni\x2d71574745\x2d7483\x2d98bf\x2dbc97\x2d37b4ab6efb15.mount: Deactivated successfully. Sep 10 00:52:20.443336 systemd[1]: var-lib-kubelet-pods-931e4d0a\x2df2cc\x2d4007\x2d991a\x2d6d4a655442aa-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2ddfqht.mount: Deactivated successfully. Sep 10 00:52:20.443390 systemd[1]: var-lib-kubelet-pods-931e4d0a\x2df2cc\x2d4007\x2d991a\x2d6d4a655442aa-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Sep 10 00:52:20.525834 env[1206]: time="2025-09-10T00:52:20.525801044Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-9b9c54998-jvg9s,Uid:587f5229-3f92-4144-adbd-36120e56d867,Namespace:calico-system,Attempt:0,}" Sep 10 00:52:20.789133 kubelet[1980]: I0910 00:52:20.789014 1980 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="931e4d0a-f2cc-4007-991a-6d4a655442aa" path="/var/lib/kubelet/pods/931e4d0a-f2cc-4007-991a-6d4a655442aa/volumes" Sep 10 00:52:20.874000 audit[3296]: AVC avc: denied { write } for pid=3296 comm="tee" name="fd" dev="proc" ino=25850 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 00:52:20.874000 audit[3296]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff4ee0f7f1 a2=241 a3=1b6 items=1 ppid=3270 pid=3296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:20.874000 audit: CWD cwd="/etc/service/enabled/bird6/log" Sep 10 00:52:20.874000 audit: PATH item=0 name="/dev/fd/63" inode=24811 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:52:20.874000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 00:52:20.879000 audit[3307]: AVC avc: denied { write } for pid=3307 comm="tee" name="fd" dev="proc" ino=24816 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 00:52:20.879000 audit[3307]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe69af67e2 a2=241 a3=1b6 items=1 ppid=3282 pid=3307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:20.879000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Sep 10 00:52:20.879000 audit: PATH item=0 name="/dev/fd/63" inode=23326 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:52:20.879000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 00:52:20.880000 audit[3310]: AVC avc: denied { write } for pid=3310 comm="tee" name="fd" dev="proc" ino=24820 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 00:52:20.880000 audit[3310]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff191907f1 a2=241 a3=1b6 items=1 ppid=3277 pid=3310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:20.880000 audit: CWD cwd="/etc/service/enabled/confd/log" Sep 10 00:52:20.880000 audit: PATH item=0 name="/dev/fd/63" inode=25856 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:52:20.880000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 00:52:20.897000 audit[3301]: AVC avc: denied { write } for pid=3301 comm="tee" name="fd" dev="proc" ino=25864 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 00:52:20.897000 audit[3301]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe89f1c7f3 a2=241 a3=1b6 items=1 ppid=3268 pid=3301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:20.904000 audit[3340]: AVC avc: denied { write } for pid=3340 comm="tee" name="fd" dev="proc" ino=24306 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 00:52:20.904000 audit[3340]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffea80367f1 a2=241 a3=1b6 items=1 ppid=3269 pid=3340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:20.904000 audit: CWD cwd="/etc/service/enabled/felix/log" Sep 10 00:52:20.904000 audit: PATH item=0 name="/dev/fd/63" inode=25870 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:52:20.904000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 00:52:20.897000 audit: CWD cwd="/etc/service/enabled/cni/log" Sep 10 00:52:20.897000 audit: PATH item=0 name="/dev/fd/63" inode=24812 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:52:20.897000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 00:52:20.924000 audit[3358]: AVC avc: denied { write } for pid=3358 comm="tee" name="fd" dev="proc" ino=25903 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 00:52:20.924000 audit[3358]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd5b7ea7e1 a2=241 a3=1b6 items=1 ppid=3279 pid=3358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:20.924000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Sep 10 00:52:20.924000 audit: PATH item=0 name="/dev/fd/63" inode=24313 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:52:20.924000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 00:52:20.962000 audit[3361]: AVC avc: denied { write } for pid=3361 comm="tee" name="fd" dev="proc" ino=24840 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 00:52:20.962000 audit[3361]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc28aea7f2 a2=241 a3=1b6 items=1 ppid=3274 pid=3361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:20.962000 audit: CWD cwd="/etc/service/enabled/bird/log" Sep 10 00:52:20.962000 audit: PATH item=0 name="/dev/fd/63" inode=24314 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:52:20.962000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 00:52:21.014972 systemd-networkd[1027]: calid46f1391cf2: Link UP Sep 10 00:52:21.017539 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 10 00:52:21.017687 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid46f1391cf2: link becomes ready Sep 10 00:52:21.017391 systemd-networkd[1027]: calid46f1391cf2: Gained carrier Sep 10 00:52:21.050390 env[1206]: 2025-09-10 00:52:20.856 [INFO][3247] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 10 00:52:21.050390 env[1206]: 2025-09-10 00:52:20.877 [INFO][3247] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--9b9c54998--jvg9s-eth0 whisker-9b9c54998- calico-system 587f5229-3f92-4144-adbd-36120e56d867 939 0 2025-09-10 00:52:20 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:9b9c54998 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-9b9c54998-jvg9s eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calid46f1391cf2 [] [] }} ContainerID="4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca" Namespace="calico-system" Pod="whisker-9b9c54998-jvg9s" WorkloadEndpoint="localhost-k8s-whisker--9b9c54998--jvg9s-" Sep 10 00:52:21.050390 env[1206]: 2025-09-10 00:52:20.877 [INFO][3247] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca" Namespace="calico-system" Pod="whisker-9b9c54998-jvg9s" WorkloadEndpoint="localhost-k8s-whisker--9b9c54998--jvg9s-eth0" Sep 10 00:52:21.050390 env[1206]: 2025-09-10 00:52:20.927 [INFO][3317] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca" HandleID="k8s-pod-network.4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca" Workload="localhost-k8s-whisker--9b9c54998--jvg9s-eth0" Sep 10 00:52:21.050390 env[1206]: 2025-09-10 00:52:20.927 [INFO][3317] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca" HandleID="k8s-pod-network.4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca" Workload="localhost-k8s-whisker--9b9c54998--jvg9s-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd5f0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-9b9c54998-jvg9s", "timestamp":"2025-09-10 00:52:20.927427485 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 00:52:21.050390 env[1206]: 2025-09-10 00:52:20.927 [INFO][3317] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:21.050390 env[1206]: 2025-09-10 00:52:20.927 [INFO][3317] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:21.050390 env[1206]: 2025-09-10 00:52:20.927 [INFO][3317] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 00:52:21.050390 env[1206]: 2025-09-10 00:52:20.948 [INFO][3317] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca" host="localhost" Sep 10 00:52:21.050390 env[1206]: 2025-09-10 00:52:20.972 [INFO][3317] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 00:52:21.050390 env[1206]: 2025-09-10 00:52:20.978 [INFO][3317] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 00:52:21.050390 env[1206]: 2025-09-10 00:52:20.984 [INFO][3317] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 00:52:21.050390 env[1206]: 2025-09-10 00:52:20.990 [INFO][3317] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 00:52:21.050390 env[1206]: 2025-09-10 00:52:20.990 [INFO][3317] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca" host="localhost" Sep 10 00:52:21.050390 env[1206]: 2025-09-10 00:52:20.992 [INFO][3317] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca Sep 10 00:52:21.050390 env[1206]: 2025-09-10 00:52:20.995 [INFO][3317] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca" host="localhost" Sep 10 00:52:21.050390 env[1206]: 2025-09-10 00:52:21.004 [INFO][3317] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca" host="localhost" Sep 10 00:52:21.050390 env[1206]: 2025-09-10 00:52:21.004 [INFO][3317] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca" host="localhost" Sep 10 00:52:21.050390 env[1206]: 2025-09-10 00:52:21.004 [INFO][3317] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:21.050390 env[1206]: 2025-09-10 00:52:21.004 [INFO][3317] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca" HandleID="k8s-pod-network.4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca" Workload="localhost-k8s-whisker--9b9c54998--jvg9s-eth0" Sep 10 00:52:21.051132 env[1206]: 2025-09-10 00:52:21.007 [INFO][3247] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca" Namespace="calico-system" Pod="whisker-9b9c54998-jvg9s" WorkloadEndpoint="localhost-k8s-whisker--9b9c54998--jvg9s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--9b9c54998--jvg9s-eth0", GenerateName:"whisker-9b9c54998-", Namespace:"calico-system", SelfLink:"", UID:"587f5229-3f92-4144-adbd-36120e56d867", ResourceVersion:"939", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 52, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"9b9c54998", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-9b9c54998-jvg9s", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calid46f1391cf2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:21.051132 env[1206]: 2025-09-10 00:52:21.007 [INFO][3247] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca" Namespace="calico-system" Pod="whisker-9b9c54998-jvg9s" WorkloadEndpoint="localhost-k8s-whisker--9b9c54998--jvg9s-eth0" Sep 10 00:52:21.051132 env[1206]: 2025-09-10 00:52:21.007 [INFO][3247] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid46f1391cf2 ContainerID="4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca" Namespace="calico-system" Pod="whisker-9b9c54998-jvg9s" WorkloadEndpoint="localhost-k8s-whisker--9b9c54998--jvg9s-eth0" Sep 10 00:52:21.051132 env[1206]: 2025-09-10 00:52:21.017 [INFO][3247] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca" Namespace="calico-system" Pod="whisker-9b9c54998-jvg9s" WorkloadEndpoint="localhost-k8s-whisker--9b9c54998--jvg9s-eth0" Sep 10 00:52:21.051132 env[1206]: 2025-09-10 00:52:21.018 [INFO][3247] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca" Namespace="calico-system" Pod="whisker-9b9c54998-jvg9s" WorkloadEndpoint="localhost-k8s-whisker--9b9c54998--jvg9s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--9b9c54998--jvg9s-eth0", GenerateName:"whisker-9b9c54998-", Namespace:"calico-system", SelfLink:"", UID:"587f5229-3f92-4144-adbd-36120e56d867", ResourceVersion:"939", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 52, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"9b9c54998", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca", Pod:"whisker-9b9c54998-jvg9s", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calid46f1391cf2", MAC:"8e:0c:8c:35:d7:d0", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:21.051132 env[1206]: 2025-09-10 00:52:21.044 [INFO][3247] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca" Namespace="calico-system" Pod="whisker-9b9c54998-jvg9s" WorkloadEndpoint="localhost-k8s-whisker--9b9c54998--jvg9s-eth0" Sep 10 00:52:21.064876 env[1206]: time="2025-09-10T00:52:21.064822519Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:52:21.065060 env[1206]: time="2025-09-10T00:52:21.065027023Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:52:21.065147 env[1206]: time="2025-09-10T00:52:21.065125648Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:52:21.065345 env[1206]: time="2025-09-10T00:52:21.065322507Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca pid=3419 runtime=io.containerd.runc.v2 Sep 10 00:52:21.080708 systemd[1]: Started cri-containerd-4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca.scope. Sep 10 00:52:21.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.101000 audit: BPF prog-id=142 op=LOAD Sep 10 00:52:21.102000 audit[3433]: AVC avc: denied { bpf } for pid=3433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.102000 audit[3433]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3419 pid=3433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465373930373134626163313235326237663739363731323635643832 Sep 10 00:52:21.102000 audit[3433]: AVC avc: denied { perfmon } for pid=3433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.102000 audit[3433]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3419 pid=3433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465373930373134626163313235326237663739363731323635643832 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { bpf } for pid=3433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { bpf } for pid=3433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { bpf } for pid=3433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { perfmon } for pid=3433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { perfmon } for pid=3433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { perfmon } for pid=3433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { perfmon } for pid=3433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { perfmon } for pid=3433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { bpf } for pid=3433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { bpf } for pid=3433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit: BPF prog-id=143 op=LOAD Sep 10 00:52:21.103000 audit[3433]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000343b70 items=0 ppid=3419 pid=3433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465373930373134626163313235326237663739363731323635643832 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { bpf } for pid=3433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { bpf } for pid=3433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { perfmon } for pid=3433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { perfmon } for pid=3433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { perfmon } for pid=3433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { perfmon } for pid=3433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { perfmon } for pid=3433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { bpf } for pid=3433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { bpf } for pid=3433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit: BPF prog-id=144 op=LOAD Sep 10 00:52:21.103000 audit[3433]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000343bb8 items=0 ppid=3419 pid=3433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465373930373134626163313235326237663739363731323635643832 Sep 10 00:52:21.103000 audit: BPF prog-id=144 op=UNLOAD Sep 10 00:52:21.103000 audit: BPF prog-id=143 op=UNLOAD Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { bpf } for pid=3433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { bpf } for pid=3433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { bpf } for pid=3433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { perfmon } for pid=3433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { perfmon } for pid=3433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { perfmon } for pid=3433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { perfmon } for pid=3433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { perfmon } for pid=3433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { bpf } for pid=3433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit[3433]: AVC avc: denied { bpf } for pid=3433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.103000 audit: BPF prog-id=145 op=LOAD Sep 10 00:52:21.103000 audit[3433]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000343fc8 items=0 ppid=3419 pid=3433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465373930373134626163313235326237663739363731323635643832 Sep 10 00:52:21.107111 systemd-resolved[1146]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 00:52:21.119000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.119000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.119000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.119000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.119000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.119000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.119000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.119000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.119000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.119000 audit: BPF prog-id=146 op=LOAD Sep 10 00:52:21.119000 audit[3459]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcf7e66a80 a2=98 a3=1fffffffffffffff items=0 ppid=3271 pid=3459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.119000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 10 00:52:21.120000 audit: BPF prog-id=146 op=UNLOAD Sep 10 00:52:21.120000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.120000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.120000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.120000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.120000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.120000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.120000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.120000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.120000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.120000 audit: BPF prog-id=147 op=LOAD Sep 10 00:52:21.120000 audit[3459]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcf7e66960 a2=94 a3=3 items=0 ppid=3271 pid=3459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.120000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 10 00:52:21.120000 audit: BPF prog-id=147 op=UNLOAD Sep 10 00:52:21.120000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.120000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.120000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.120000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.120000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.120000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.120000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.120000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.120000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.120000 audit: BPF prog-id=148 op=LOAD Sep 10 00:52:21.120000 audit[3459]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcf7e669a0 a2=94 a3=7ffcf7e66b80 items=0 ppid=3271 pid=3459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.120000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 10 00:52:21.120000 audit: BPF prog-id=148 op=UNLOAD Sep 10 00:52:21.120000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.120000 audit[3459]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffcf7e66a70 a2=50 a3=a000000085 items=0 ppid=3271 pid=3459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.120000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 10 00:52:21.121000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.121000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.121000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.121000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.121000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.121000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.121000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.121000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.121000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.121000 audit: BPF prog-id=149 op=LOAD Sep 10 00:52:21.121000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe8eb42320 a2=98 a3=3 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.121000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.122000 audit: BPF prog-id=149 op=UNLOAD Sep 10 00:52:21.122000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.122000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.122000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.122000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.122000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.122000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.122000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.122000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.122000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.122000 audit: BPF prog-id=150 op=LOAD Sep 10 00:52:21.122000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe8eb42110 a2=94 a3=54428f items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.122000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.122000 audit: BPF prog-id=150 op=UNLOAD Sep 10 00:52:21.122000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.122000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.122000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.122000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.122000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.122000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.122000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.122000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.122000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.122000 audit: BPF prog-id=151 op=LOAD Sep 10 00:52:21.122000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe8eb42140 a2=94 a3=2 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.122000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.123000 audit: BPF prog-id=151 op=UNLOAD Sep 10 00:52:21.131101 env[1206]: time="2025-09-10T00:52:21.131073532Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-9b9c54998-jvg9s,Uid:587f5229-3f92-4144-adbd-36120e56d867,Namespace:calico-system,Attempt:0,} returns sandbox id \"4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca\"" Sep 10 00:52:21.132311 env[1206]: time="2025-09-10T00:52:21.132295437Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\"" Sep 10 00:52:21.225000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.225000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.225000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.225000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.225000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.225000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.225000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.225000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.225000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.225000 audit: BPF prog-id=152 op=LOAD Sep 10 00:52:21.225000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe8eb42000 a2=94 a3=1 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.225000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.225000 audit: BPF prog-id=152 op=UNLOAD Sep 10 00:52:21.225000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.225000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffe8eb420d0 a2=50 a3=7ffe8eb421b0 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.225000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.233000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.233000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe8eb42010 a2=28 a3=0 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.233000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.233000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.233000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe8eb42040 a2=28 a3=0 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.233000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.233000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.233000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe8eb41f50 a2=28 a3=0 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.233000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.233000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.233000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe8eb42060 a2=28 a3=0 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.233000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.233000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.233000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe8eb42040 a2=28 a3=0 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.233000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.233000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.233000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe8eb42030 a2=28 a3=0 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.233000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.233000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.233000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe8eb42060 a2=28 a3=0 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.233000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.233000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.233000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe8eb42040 a2=28 a3=0 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.233000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.233000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.233000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe8eb42060 a2=28 a3=0 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.233000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.233000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.233000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe8eb42030 a2=28 a3=0 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.233000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.233000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.233000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe8eb420a0 a2=28 a3=0 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.233000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe8eb41e50 a2=50 a3=1 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.234000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit: BPF prog-id=153 op=LOAD Sep 10 00:52:21.234000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe8eb41e50 a2=94 a3=5 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.234000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.234000 audit: BPF prog-id=153 op=UNLOAD Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe8eb41f00 a2=50 a3=1 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.234000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffe8eb42020 a2=4 a3=38 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.234000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { confidentiality } for pid=3460 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 00:52:21.234000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe8eb42070 a2=94 a3=6 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.234000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { confidentiality } for pid=3460 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 00:52:21.234000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe8eb41820 a2=94 a3=88 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.234000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.234000 audit[3460]: AVC avc: denied { confidentiality } for pid=3460 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 00:52:21.234000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe8eb41820 a2=94 a3=88 items=0 ppid=3271 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.234000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit: BPF prog-id=154 op=LOAD Sep 10 00:52:21.241000 audit[3469]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffff066e200 a2=98 a3=1999999999999999 items=0 ppid=3271 pid=3469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.241000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 10 00:52:21.241000 audit: BPF prog-id=154 op=UNLOAD Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit: BPF prog-id=155 op=LOAD Sep 10 00:52:21.241000 audit[3469]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffff066e0e0 a2=94 a3=ffff items=0 ppid=3271 pid=3469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.241000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 10 00:52:21.241000 audit: BPF prog-id=155 op=UNLOAD Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.241000 audit: BPF prog-id=156 op=LOAD Sep 10 00:52:21.241000 audit[3469]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffff066e120 a2=94 a3=7ffff066e300 items=0 ppid=3271 pid=3469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.241000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 10 00:52:21.241000 audit: BPF prog-id=156 op=UNLOAD Sep 10 00:52:21.287290 systemd-networkd[1027]: vxlan.calico: Link UP Sep 10 00:52:21.287298 systemd-networkd[1027]: vxlan.calico: Gained carrier Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit: BPF prog-id=157 op=LOAD Sep 10 00:52:21.299000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdeed05e00 a2=98 a3=0 items=0 ppid=3271 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.299000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:52:21.299000 audit: BPF prog-id=157 op=UNLOAD Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit: BPF prog-id=158 op=LOAD Sep 10 00:52:21.299000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdeed05c10 a2=94 a3=54428f items=0 ppid=3271 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.299000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:52:21.299000 audit: BPF prog-id=158 op=UNLOAD Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit: BPF prog-id=159 op=LOAD Sep 10 00:52:21.299000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdeed05c40 a2=94 a3=2 items=0 ppid=3271 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.299000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:52:21.299000 audit: BPF prog-id=159 op=UNLOAD Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffdeed05b10 a2=28 a3=0 items=0 ppid=3271 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.299000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdeed05b40 a2=28 a3=0 items=0 ppid=3271 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.299000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdeed05a50 a2=28 a3=0 items=0 ppid=3271 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.299000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffdeed05b60 a2=28 a3=0 items=0 ppid=3271 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.299000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffdeed05b40 a2=28 a3=0 items=0 ppid=3271 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.299000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:52:21.299000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.299000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffdeed05b30 a2=28 a3=0 items=0 ppid=3271 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.299000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:52:21.300000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.300000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffdeed05b60 a2=28 a3=0 items=0 ppid=3271 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.300000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:52:21.300000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.300000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdeed05b40 a2=28 a3=0 items=0 ppid=3271 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.300000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:52:21.300000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.300000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdeed05b60 a2=28 a3=0 items=0 ppid=3271 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.300000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:52:21.300000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.300000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdeed05b30 a2=28 a3=0 items=0 ppid=3271 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.300000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:52:21.300000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.300000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffdeed05ba0 a2=28 a3=0 items=0 ppid=3271 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.300000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:52:21.300000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.300000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.300000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.300000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.300000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.300000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.300000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.300000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.300000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.300000 audit: BPF prog-id=160 op=LOAD Sep 10 00:52:21.300000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffdeed05a10 a2=94 a3=0 items=0 ppid=3271 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.300000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:52:21.300000 audit: BPF prog-id=160 op=UNLOAD Sep 10 00:52:21.303000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.303000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffdeed05a00 a2=50 a3=2800 items=0 ppid=3271 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.303000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:52:21.303000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.303000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffdeed05a00 a2=50 a3=2800 items=0 ppid=3271 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.303000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:52:21.303000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.303000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.303000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.303000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.303000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.303000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.303000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.303000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.303000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.303000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.303000 audit: BPF prog-id=161 op=LOAD Sep 10 00:52:21.303000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffdeed05220 a2=94 a3=2 items=0 ppid=3271 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.303000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:52:21.303000 audit: BPF prog-id=161 op=UNLOAD Sep 10 00:52:21.303000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.303000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.303000 audit[3496]: AVC avc: denied { bpf } for pid=3496 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.303000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.303000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.303000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.303000 audit[3496]: AVC avc: denied { perfmon } for pid=3496 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.303000 audit[3496]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffdeed05320 a2=94 a3=30 items=0 ppid=3271 pid=3496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.303000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit: BPF prog-id=163 op=LOAD Sep 10 00:52:21.310000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff3c8643a0 a2=98 a3=0 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.310000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.310000 audit: BPF prog-id=163 op=UNLOAD Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit: BPF prog-id=164 op=LOAD Sep 10 00:52:21.310000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff3c864190 a2=94 a3=54428f items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.310000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.310000 audit: BPF prog-id=164 op=UNLOAD Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.310000 audit: BPF prog-id=165 op=LOAD Sep 10 00:52:21.310000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff3c8641c0 a2=94 a3=2 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.310000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.310000 audit: BPF prog-id=165 op=UNLOAD Sep 10 00:52:21.410000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.410000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.410000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.410000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.410000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.410000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.410000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.410000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.410000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.410000 audit: BPF prog-id=166 op=LOAD Sep 10 00:52:21.410000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff3c864080 a2=94 a3=1 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.410000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.410000 audit: BPF prog-id=166 op=UNLOAD Sep 10 00:52:21.410000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.410000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff3c864150 a2=50 a3=7fff3c864230 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.410000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff3c864090 a2=28 a3=0 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.419000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff3c8640c0 a2=28 a3=0 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.419000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff3c863fd0 a2=28 a3=0 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.419000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff3c8640e0 a2=28 a3=0 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.419000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff3c8640c0 a2=28 a3=0 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.419000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff3c8640b0 a2=28 a3=0 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.419000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff3c8640e0 a2=28 a3=0 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.419000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff3c8640c0 a2=28 a3=0 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.419000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff3c8640e0 a2=28 a3=0 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.419000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff3c8640b0 a2=28 a3=0 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.419000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff3c864120 a2=28 a3=0 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.419000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff3c863ed0 a2=50 a3=1 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.419000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit: BPF prog-id=167 op=LOAD Sep 10 00:52:21.419000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff3c863ed0 a2=94 a3=5 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.419000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.419000 audit: BPF prog-id=167 op=UNLOAD Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff3c863f80 a2=50 a3=1 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.419000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fff3c8640a0 a2=4 a3=38 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.419000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { confidentiality } for pid=3505 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 00:52:21.419000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff3c8640f0 a2=94 a3=6 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.419000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { confidentiality } for pid=3505 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 00:52:21.419000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff3c8638a0 a2=94 a3=88 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.419000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { perfmon } for pid=3505 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.419000 audit[3505]: AVC avc: denied { confidentiality } for pid=3505 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 00:52:21.419000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff3c8638a0 a2=94 a3=88 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.419000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.420000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.420000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff3c8652d0 a2=10 a3=208 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.420000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.420000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.420000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff3c865170 a2=10 a3=3 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.420000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.420000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.420000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff3c865110 a2=10 a3=3 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.420000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.420000 audit[3505]: AVC avc: denied { bpf } for pid=3505 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:21.420000 audit[3505]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff3c865110 a2=10 a3=7 items=0 ppid=3271 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.420000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:52:21.426000 audit: BPF prog-id=162 op=UNLOAD Sep 10 00:52:21.470000 audit[3528]: NETFILTER_CFG table=nat:99 family=2 entries=15 op=nft_register_chain pid=3528 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:52:21.470000 audit[3528]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffe9bf633d0 a2=0 a3=7ffe9bf633bc items=0 ppid=3271 pid=3528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.470000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:52:21.471000 audit[3531]: NETFILTER_CFG table=mangle:100 family=2 entries=16 op=nft_register_chain pid=3531 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:52:21.471000 audit[3531]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffddf52b980 a2=0 a3=7ffddf52b96c items=0 ppid=3271 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.471000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:52:21.480000 audit[3527]: NETFILTER_CFG table=raw:101 family=2 entries=21 op=nft_register_chain pid=3527 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:52:21.480000 audit[3527]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffc7a358a10 a2=0 a3=7ffc7a3589fc items=0 ppid=3271 pid=3527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.480000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:52:21.480000 audit[3529]: NETFILTER_CFG table=filter:102 family=2 entries=94 op=nft_register_chain pid=3529 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:52:21.480000 audit[3529]: SYSCALL arch=c000003e syscall=46 success=yes exit=53116 a0=3 a1=7ffe3effa400 a2=0 a3=5591eb7c3000 items=0 ppid=3271 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:21.480000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:52:22.392720 systemd-networkd[1027]: calid46f1391cf2: Gained IPv6LL Sep 10 00:52:22.445806 systemd[1]: Started sshd@8-10.0.0.141:22-10.0.0.1:35496.service. Sep 10 00:52:22.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.141:22-10.0.0.1:35496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:22.451019 kernel: kauditd_printk_skb: 666 callbacks suppressed Sep 10 00:52:22.451197 kernel: audit: type=1130 audit(1757465542.444:1148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.141:22-10.0.0.1:35496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:22.478000 audit[3564]: USER_ACCT pid=3564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:22.480212 sshd[3564]: Accepted publickey for core from 10.0.0.1 port 35496 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:52:22.482000 audit[3564]: CRED_ACQ pid=3564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:22.484118 sshd[3564]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:52:22.487246 kernel: audit: type=1101 audit(1757465542.478:1149): pid=3564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:22.487296 kernel: audit: type=1103 audit(1757465542.482:1150): pid=3564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:22.487313 kernel: audit: type=1006 audit(1757465542.482:1151): pid=3564 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Sep 10 00:52:22.490312 kernel: audit: type=1300 audit(1757465542.482:1151): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd29b1aca0 a2=3 a3=0 items=0 ppid=1 pid=3564 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:22.482000 audit[3564]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd29b1aca0 a2=3 a3=0 items=0 ppid=1 pid=3564 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:22.491516 systemd[1]: Started session-9.scope. Sep 10 00:52:22.492517 systemd-logind[1191]: New session 9 of user core. Sep 10 00:52:22.494309 kernel: audit: type=1327 audit(1757465542.482:1151): proctitle=737368643A20636F7265205B707269765D Sep 10 00:52:22.482000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:52:22.495000 audit[3564]: USER_START pid=3564 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:22.504428 kernel: audit: type=1105 audit(1757465542.495:1152): pid=3564 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:22.504475 kernel: audit: type=1103 audit(1757465542.496:1153): pid=3566 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:22.496000 audit[3566]: CRED_ACQ pid=3566 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:22.541388 env[1206]: time="2025-09-10T00:52:22.541352698Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:22.543521 env[1206]: time="2025-09-10T00:52:22.543497135Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9a4eedeed4a531acefb7f5d0a1b7e3856b1a9a24d9e7d25deef2134d7a734c2d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:22.545320 env[1206]: time="2025-09-10T00:52:22.545283204Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:22.546892 env[1206]: time="2025-09-10T00:52:22.546869659Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:e7113761fc7633d515882f0d48b5c8d0b8e62f3f9d34823f2ee194bb16d2ec44,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:22.547312 env[1206]: time="2025-09-10T00:52:22.547274729Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\" returns image reference \"sha256:9a4eedeed4a531acefb7f5d0a1b7e3856b1a9a24d9e7d25deef2134d7a734c2d\"" Sep 10 00:52:22.549460 env[1206]: time="2025-09-10T00:52:22.549433796Z" level=info msg="CreateContainer within sandbox \"4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Sep 10 00:52:22.565428 env[1206]: time="2025-09-10T00:52:22.565377942Z" level=info msg="CreateContainer within sandbox \"4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"1896112c96ac8e5c22fb4bec95a4acb4453bd4d4c64789e8b8bd2e90f786d933\"" Sep 10 00:52:22.567838 env[1206]: time="2025-09-10T00:52:22.567789156Z" level=info msg="StartContainer for \"1896112c96ac8e5c22fb4bec95a4acb4453bd4d4c64789e8b8bd2e90f786d933\"" Sep 10 00:52:22.586858 systemd[1]: run-containerd-runc-k8s.io-1896112c96ac8e5c22fb4bec95a4acb4453bd4d4c64789e8b8bd2e90f786d933-runc.ysBVi5.mount: Deactivated successfully. Sep 10 00:52:22.589324 systemd[1]: Started cri-containerd-1896112c96ac8e5c22fb4bec95a4acb4453bd4d4c64789e8b8bd2e90f786d933.scope. Sep 10 00:52:22.605889 kernel: audit: type=1400 audit(1757465542.598:1154): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.606027 kernel: audit: type=1400 audit(1757465542.598:1155): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.601000 audit: BPF prog-id=168 op=LOAD Sep 10 00:52:22.601000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.601000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3419 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:22.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138393631313263393661633865356332326662346265633935613461 Sep 10 00:52:22.601000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.601000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=3419 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:22.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138393631313263393661633865356332326662346265633935613461 Sep 10 00:52:22.601000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.601000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.601000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.601000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.601000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.601000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.601000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.601000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.601000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.601000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.601000 audit: BPF prog-id=169 op=LOAD Sep 10 00:52:22.601000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001f9f50 items=0 ppid=3419 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:22.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138393631313263393661633865356332326662346265633935613461 Sep 10 00:52:22.604000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.604000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.604000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.604000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.604000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.604000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.604000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.604000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.604000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.604000 audit: BPF prog-id=170 op=LOAD Sep 10 00:52:22.604000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001f9f98 items=0 ppid=3419 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:22.604000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138393631313263393661633865356332326662346265633935613461 Sep 10 00:52:22.604000 audit: BPF prog-id=170 op=UNLOAD Sep 10 00:52:22.604000 audit: BPF prog-id=169 op=UNLOAD Sep 10 00:52:22.604000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.604000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.604000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.604000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.604000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.604000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.604000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.604000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.604000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.604000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:22.604000 audit: BPF prog-id=171 op=LOAD Sep 10 00:52:22.604000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003d63a8 items=0 ppid=3419 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:22.604000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138393631313263393661633865356332326662346265633935613461 Sep 10 00:52:22.630078 sshd[3564]: pam_unix(sshd:session): session closed for user core Sep 10 00:52:22.629000 audit[3564]: USER_END pid=3564 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:22.629000 audit[3564]: CRED_DISP pid=3564 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:22.633020 systemd[1]: sshd@8-10.0.0.141:22-10.0.0.1:35496.service: Deactivated successfully. Sep 10 00:52:22.631000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.141:22-10.0.0.1:35496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:22.633686 systemd[1]: session-9.scope: Deactivated successfully. Sep 10 00:52:22.634231 systemd-logind[1191]: Session 9 logged out. Waiting for processes to exit. Sep 10 00:52:22.634913 systemd-logind[1191]: Removed session 9. Sep 10 00:52:22.660933 env[1206]: time="2025-09-10T00:52:22.660858411Z" level=info msg="StartContainer for \"1896112c96ac8e5c22fb4bec95a4acb4453bd4d4c64789e8b8bd2e90f786d933\" returns successfully" Sep 10 00:52:22.662838 env[1206]: time="2025-09-10T00:52:22.662719048Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\"" Sep 10 00:52:22.666000 audit[3595]: AVC avc: denied { search } for pid=3595 comm="nginx" name="crypto" dev="proc" ino=27664 scontext=system_u:system_r:svirt_lxc_net_t:s0:c142,c643 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Sep 10 00:52:22.666000 audit[3595]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f90c478e728 a2=0 a3=0 items=0 ppid=3419 pid=3595 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c142,c643 key=(null) Sep 10 00:52:22.666000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Sep 10 00:52:22.968752 systemd-networkd[1027]: vxlan.calico: Gained IPv6LL Sep 10 00:52:24.787994 env[1206]: time="2025-09-10T00:52:24.787943841Z" level=info msg="StopPodSandbox for \"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\"" Sep 10 00:52:24.789826 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1787039405.mount: Deactivated successfully. Sep 10 00:52:24.791082 env[1206]: time="2025-09-10T00:52:24.791036817Z" level=info msg="StopPodSandbox for \"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\"" Sep 10 00:52:24.955641 env[1206]: time="2025-09-10T00:52:24.955582149Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:24.958138 env[1206]: time="2025-09-10T00:52:24.958110611Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7e29b0984d517678aab6ca138482c318989f6f28daf9d3b5dd6e4a5a3115ac16,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:24.960210 env[1206]: time="2025-09-10T00:52:24.960164816Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:24.961135 env[1206]: 2025-09-10 00:52:24.899 [INFO][3639] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Sep 10 00:52:24.961135 env[1206]: 2025-09-10 00:52:24.899 [INFO][3639] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" iface="eth0" netns="/var/run/netns/cni-d65012f2-d00f-6854-8880-4c738cf08c74" Sep 10 00:52:24.961135 env[1206]: 2025-09-10 00:52:24.899 [INFO][3639] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" iface="eth0" netns="/var/run/netns/cni-d65012f2-d00f-6854-8880-4c738cf08c74" Sep 10 00:52:24.961135 env[1206]: 2025-09-10 00:52:24.900 [INFO][3639] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" iface="eth0" netns="/var/run/netns/cni-d65012f2-d00f-6854-8880-4c738cf08c74" Sep 10 00:52:24.961135 env[1206]: 2025-09-10 00:52:24.900 [INFO][3639] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Sep 10 00:52:24.961135 env[1206]: 2025-09-10 00:52:24.900 [INFO][3639] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Sep 10 00:52:24.961135 env[1206]: 2025-09-10 00:52:24.917 [INFO][3655] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" HandleID="k8s-pod-network.6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Workload="localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0" Sep 10 00:52:24.961135 env[1206]: 2025-09-10 00:52:24.917 [INFO][3655] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:24.961135 env[1206]: 2025-09-10 00:52:24.917 [INFO][3655] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:24.961135 env[1206]: 2025-09-10 00:52:24.954 [WARNING][3655] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" HandleID="k8s-pod-network.6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Workload="localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0" Sep 10 00:52:24.961135 env[1206]: 2025-09-10 00:52:24.955 [INFO][3655] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" HandleID="k8s-pod-network.6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Workload="localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0" Sep 10 00:52:24.961135 env[1206]: 2025-09-10 00:52:24.956 [INFO][3655] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:24.961135 env[1206]: 2025-09-10 00:52:24.959 [INFO][3639] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Sep 10 00:52:24.961910 env[1206]: time="2025-09-10T00:52:24.961882006Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:29becebc47401da9997a2a30f4c25c511a5f379d17275680b048224829af71a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:24.962424 env[1206]: time="2025-09-10T00:52:24.962376352Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\" returns image reference \"sha256:7e29b0984d517678aab6ca138482c318989f6f28daf9d3b5dd6e4a5a3115ac16\"" Sep 10 00:52:24.963390 env[1206]: time="2025-09-10T00:52:24.963350244Z" level=info msg="TearDown network for sandbox \"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\" successfully" Sep 10 00:52:24.963390 env[1206]: time="2025-09-10T00:52:24.963386615Z" level=info msg="StopPodSandbox for \"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\" returns successfully" Sep 10 00:52:24.963834 systemd[1]: run-netns-cni\x2dd65012f2\x2dd00f\x2d6854\x2d8880\x2d4c738cf08c74.mount: Deactivated successfully. Sep 10 00:52:24.965408 env[1206]: time="2025-09-10T00:52:24.965374129Z" level=info msg="CreateContainer within sandbox \"4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Sep 10 00:52:24.965522 env[1206]: time="2025-09-10T00:52:24.965491711Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-568989f48d-8qw66,Uid:21daa049-0018-40da-91f6-73f54e919867,Namespace:calico-system,Attempt:1,}" Sep 10 00:52:24.985416 env[1206]: time="2025-09-10T00:52:24.985366425Z" level=info msg="CreateContainer within sandbox \"4e790714bac1252b7f79671265d82c06f55c178cf8866c9c1297b0ae78155aca\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"67245081d3712bd3188a9935f5b91f98036959d877c5f9671db81e6908443c6a\"" Sep 10 00:52:24.985923 env[1206]: time="2025-09-10T00:52:24.985899377Z" level=info msg="StartContainer for \"67245081d3712bd3188a9935f5b91f98036959d877c5f9671db81e6908443c6a\"" Sep 10 00:52:24.995394 env[1206]: 2025-09-10 00:52:24.952 [INFO][3640] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Sep 10 00:52:24.995394 env[1206]: 2025-09-10 00:52:24.952 [INFO][3640] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" iface="eth0" netns="/var/run/netns/cni-ad6e6983-f424-39f0-df2a-5b1b0c8b55ea" Sep 10 00:52:24.995394 env[1206]: 2025-09-10 00:52:24.953 [INFO][3640] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" iface="eth0" netns="/var/run/netns/cni-ad6e6983-f424-39f0-df2a-5b1b0c8b55ea" Sep 10 00:52:24.995394 env[1206]: 2025-09-10 00:52:24.953 [INFO][3640] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" iface="eth0" netns="/var/run/netns/cni-ad6e6983-f424-39f0-df2a-5b1b0c8b55ea" Sep 10 00:52:24.995394 env[1206]: 2025-09-10 00:52:24.954 [INFO][3640] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Sep 10 00:52:24.995394 env[1206]: 2025-09-10 00:52:24.954 [INFO][3640] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Sep 10 00:52:24.995394 env[1206]: 2025-09-10 00:52:24.982 [INFO][3665] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" HandleID="k8s-pod-network.c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Workload="localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0" Sep 10 00:52:24.995394 env[1206]: 2025-09-10 00:52:24.982 [INFO][3665] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:24.995394 env[1206]: 2025-09-10 00:52:24.982 [INFO][3665] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:24.995394 env[1206]: 2025-09-10 00:52:24.989 [WARNING][3665] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" HandleID="k8s-pod-network.c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Workload="localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0" Sep 10 00:52:24.995394 env[1206]: 2025-09-10 00:52:24.989 [INFO][3665] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" HandleID="k8s-pod-network.c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Workload="localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0" Sep 10 00:52:24.995394 env[1206]: 2025-09-10 00:52:24.991 [INFO][3665] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:24.995394 env[1206]: 2025-09-10 00:52:24.993 [INFO][3640] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Sep 10 00:52:24.995914 env[1206]: time="2025-09-10T00:52:24.995499168Z" level=info msg="TearDown network for sandbox \"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\" successfully" Sep 10 00:52:24.995914 env[1206]: time="2025-09-10T00:52:24.995526702Z" level=info msg="StopPodSandbox for \"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\" returns successfully" Sep 10 00:52:24.995968 kubelet[1980]: E0910 00:52:24.995757 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:52:24.997321 env[1206]: time="2025-09-10T00:52:24.997294272Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-7g8cw,Uid:7462035c-d572-4145-a342-1748e1d5702b,Namespace:kube-system,Attempt:1,}" Sep 10 00:52:25.006912 systemd[1]: Started cri-containerd-67245081d3712bd3188a9935f5b91f98036959d877c5f9671db81e6908443c6a.scope. Sep 10 00:52:25.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit: BPF prog-id=172 op=LOAD Sep 10 00:52:25.021000 audit[3693]: AVC avc: denied { bpf } for pid=3693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit[3693]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3419 pid=3693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637323435303831643337313262643331383861393933356635623931 Sep 10 00:52:25.021000 audit[3693]: AVC avc: denied { perfmon } for pid=3693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit[3693]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3419 pid=3693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637323435303831643337313262643331383861393933356635623931 Sep 10 00:52:25.021000 audit[3693]: AVC avc: denied { bpf } for pid=3693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit[3693]: AVC avc: denied { bpf } for pid=3693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit[3693]: AVC avc: denied { bpf } for pid=3693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit[3693]: AVC avc: denied { perfmon } for pid=3693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit[3693]: AVC avc: denied { perfmon } for pid=3693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit[3693]: AVC avc: denied { perfmon } for pid=3693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit[3693]: AVC avc: denied { perfmon } for pid=3693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit[3693]: AVC avc: denied { perfmon } for pid=3693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit[3693]: AVC avc: denied { bpf } for pid=3693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit[3693]: AVC avc: denied { bpf } for pid=3693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit: BPF prog-id=173 op=LOAD Sep 10 00:52:25.021000 audit[3693]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0000243a0 items=0 ppid=3419 pid=3693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637323435303831643337313262643331383861393933356635623931 Sep 10 00:52:25.021000 audit[3693]: AVC avc: denied { bpf } for pid=3693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit[3693]: AVC avc: denied { bpf } for pid=3693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit[3693]: AVC avc: denied { perfmon } for pid=3693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit[3693]: AVC avc: denied { perfmon } for pid=3693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit[3693]: AVC avc: denied { perfmon } for pid=3693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit[3693]: AVC avc: denied { perfmon } for pid=3693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit[3693]: AVC avc: denied { perfmon } for pid=3693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit[3693]: AVC avc: denied { bpf } for pid=3693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit[3693]: AVC avc: denied { bpf } for pid=3693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.021000 audit: BPF prog-id=174 op=LOAD Sep 10 00:52:25.021000 audit[3693]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000243e8 items=0 ppid=3419 pid=3693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637323435303831643337313262643331383861393933356635623931 Sep 10 00:52:25.022000 audit: BPF prog-id=174 op=UNLOAD Sep 10 00:52:25.022000 audit: BPF prog-id=173 op=UNLOAD Sep 10 00:52:25.022000 audit[3693]: AVC avc: denied { bpf } for pid=3693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.022000 audit[3693]: AVC avc: denied { bpf } for pid=3693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.022000 audit[3693]: AVC avc: denied { bpf } for pid=3693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.022000 audit[3693]: AVC avc: denied { perfmon } for pid=3693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.022000 audit[3693]: AVC avc: denied { perfmon } for pid=3693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.022000 audit[3693]: AVC avc: denied { perfmon } for pid=3693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.022000 audit[3693]: AVC avc: denied { perfmon } for pid=3693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.022000 audit[3693]: AVC avc: denied { perfmon } for pid=3693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.022000 audit[3693]: AVC avc: denied { bpf } for pid=3693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.022000 audit[3693]: AVC avc: denied { bpf } for pid=3693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.022000 audit: BPF prog-id=175 op=LOAD Sep 10 00:52:25.022000 audit[3693]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0000247f8 items=0 ppid=3419 pid=3693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.022000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637323435303831643337313262643331383861393933356635623931 Sep 10 00:52:25.050689 env[1206]: time="2025-09-10T00:52:25.048982074Z" level=info msg="StartContainer for \"67245081d3712bd3188a9935f5b91f98036959d877c5f9671db81e6908443c6a\" returns successfully" Sep 10 00:52:25.139980 systemd[1]: run-netns-cni\x2dad6e6983\x2df424\x2d39f0\x2ddf2a\x2d5b1b0c8b55ea.mount: Deactivated successfully. Sep 10 00:52:25.317977 systemd-networkd[1027]: calia525a5b798c: Link UP Sep 10 00:52:25.319844 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 10 00:52:25.320189 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia525a5b798c: link becomes ready Sep 10 00:52:25.320345 systemd-networkd[1027]: calia525a5b798c: Gained carrier Sep 10 00:52:25.331665 env[1206]: 2025-09-10 00:52:25.031 [INFO][3682] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0 calico-kube-controllers-568989f48d- calico-system 21daa049-0018-40da-91f6-73f54e919867 981 0 2025-09-10 00:51:59 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:568989f48d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-568989f48d-8qw66 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calia525a5b798c [] [] }} ContainerID="ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d" Namespace="calico-system" Pod="calico-kube-controllers-568989f48d-8qw66" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--568989f48d--8qw66-" Sep 10 00:52:25.331665 env[1206]: 2025-09-10 00:52:25.031 [INFO][3682] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d" Namespace="calico-system" Pod="calico-kube-controllers-568989f48d-8qw66" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0" Sep 10 00:52:25.331665 env[1206]: 2025-09-10 00:52:25.066 [INFO][3729] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d" HandleID="k8s-pod-network.ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d" Workload="localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0" Sep 10 00:52:25.331665 env[1206]: 2025-09-10 00:52:25.066 [INFO][3729] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d" HandleID="k8s-pod-network.ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d" Workload="localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002df5f0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-568989f48d-8qw66", "timestamp":"2025-09-10 00:52:25.06635253 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 00:52:25.331665 env[1206]: 2025-09-10 00:52:25.066 [INFO][3729] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:25.331665 env[1206]: 2025-09-10 00:52:25.066 [INFO][3729] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:25.331665 env[1206]: 2025-09-10 00:52:25.066 [INFO][3729] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 00:52:25.331665 env[1206]: 2025-09-10 00:52:25.072 [INFO][3729] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d" host="localhost" Sep 10 00:52:25.331665 env[1206]: 2025-09-10 00:52:25.076 [INFO][3729] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 00:52:25.331665 env[1206]: 2025-09-10 00:52:25.080 [INFO][3729] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 00:52:25.331665 env[1206]: 2025-09-10 00:52:25.081 [INFO][3729] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 00:52:25.331665 env[1206]: 2025-09-10 00:52:25.083 [INFO][3729] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 00:52:25.331665 env[1206]: 2025-09-10 00:52:25.083 [INFO][3729] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d" host="localhost" Sep 10 00:52:25.331665 env[1206]: 2025-09-10 00:52:25.086 [INFO][3729] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d Sep 10 00:52:25.331665 env[1206]: 2025-09-10 00:52:25.301 [INFO][3729] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d" host="localhost" Sep 10 00:52:25.331665 env[1206]: 2025-09-10 00:52:25.311 [INFO][3729] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d" host="localhost" Sep 10 00:52:25.331665 env[1206]: 2025-09-10 00:52:25.311 [INFO][3729] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d" host="localhost" Sep 10 00:52:25.331665 env[1206]: 2025-09-10 00:52:25.311 [INFO][3729] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:25.331665 env[1206]: 2025-09-10 00:52:25.311 [INFO][3729] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d" HandleID="k8s-pod-network.ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d" Workload="localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0" Sep 10 00:52:25.332264 env[1206]: 2025-09-10 00:52:25.313 [INFO][3682] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d" Namespace="calico-system" Pod="calico-kube-controllers-568989f48d-8qw66" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0", GenerateName:"calico-kube-controllers-568989f48d-", Namespace:"calico-system", SelfLink:"", UID:"21daa049-0018-40da-91f6-73f54e919867", ResourceVersion:"981", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"568989f48d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-568989f48d-8qw66", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calia525a5b798c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:25.332264 env[1206]: 2025-09-10 00:52:25.313 [INFO][3682] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d" Namespace="calico-system" Pod="calico-kube-controllers-568989f48d-8qw66" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0" Sep 10 00:52:25.332264 env[1206]: 2025-09-10 00:52:25.313 [INFO][3682] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia525a5b798c ContainerID="ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d" Namespace="calico-system" Pod="calico-kube-controllers-568989f48d-8qw66" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0" Sep 10 00:52:25.332264 env[1206]: 2025-09-10 00:52:25.319 [INFO][3682] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d" Namespace="calico-system" Pod="calico-kube-controllers-568989f48d-8qw66" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0" Sep 10 00:52:25.332264 env[1206]: 2025-09-10 00:52:25.321 [INFO][3682] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d" Namespace="calico-system" Pod="calico-kube-controllers-568989f48d-8qw66" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0", GenerateName:"calico-kube-controllers-568989f48d-", Namespace:"calico-system", SelfLink:"", UID:"21daa049-0018-40da-91f6-73f54e919867", ResourceVersion:"981", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"568989f48d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d", Pod:"calico-kube-controllers-568989f48d-8qw66", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calia525a5b798c", MAC:"2e:7b:8a:6c:fa:7a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:25.332264 env[1206]: 2025-09-10 00:52:25.329 [INFO][3682] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d" Namespace="calico-system" Pod="calico-kube-controllers-568989f48d-8qw66" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0" Sep 10 00:52:25.338000 audit[3774]: NETFILTER_CFG table=filter:103 family=2 entries=36 op=nft_register_chain pid=3774 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:52:25.338000 audit[3774]: SYSCALL arch=c000003e syscall=46 success=yes exit=19576 a0=3 a1=7fffb6a6ae40 a2=0 a3=7fffb6a6ae2c items=0 ppid=3271 pid=3774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.338000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:52:25.341989 env[1206]: time="2025-09-10T00:52:25.341893182Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:52:25.342228 env[1206]: time="2025-09-10T00:52:25.342135129Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:52:25.342372 env[1206]: time="2025-09-10T00:52:25.342338360Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:52:25.342709 env[1206]: time="2025-09-10T00:52:25.342648463Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d pid=3777 runtime=io.containerd.runc.v2 Sep 10 00:52:25.353057 systemd-networkd[1027]: calif4c95d67d70: Link UP Sep 10 00:52:25.354773 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif4c95d67d70: link becomes ready Sep 10 00:52:25.354887 systemd-networkd[1027]: calif4c95d67d70: Gained carrier Sep 10 00:52:25.365035 systemd[1]: Started cri-containerd-ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d.scope. Sep 10 00:52:25.373567 env[1206]: 2025-09-10 00:52:25.041 [INFO][3712] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0 coredns-7c65d6cfc9- kube-system 7462035c-d572-4145-a342-1748e1d5702b 982 0 2025-09-10 00:51:47 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-7g8cw eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calif4c95d67d70 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752" Namespace="kube-system" Pod="coredns-7c65d6cfc9-7g8cw" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--7g8cw-" Sep 10 00:52:25.373567 env[1206]: 2025-09-10 00:52:25.041 [INFO][3712] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752" Namespace="kube-system" Pod="coredns-7c65d6cfc9-7g8cw" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0" Sep 10 00:52:25.373567 env[1206]: 2025-09-10 00:52:25.070 [INFO][3741] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752" HandleID="k8s-pod-network.b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752" Workload="localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0" Sep 10 00:52:25.373567 env[1206]: 2025-09-10 00:52:25.070 [INFO][3741] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752" HandleID="k8s-pod-network.b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752" Workload="localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000122e30), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-7g8cw", "timestamp":"2025-09-10 00:52:25.070704627 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 00:52:25.373567 env[1206]: 2025-09-10 00:52:25.070 [INFO][3741] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:25.373567 env[1206]: 2025-09-10 00:52:25.312 [INFO][3741] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:25.373567 env[1206]: 2025-09-10 00:52:25.313 [INFO][3741] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 00:52:25.373567 env[1206]: 2025-09-10 00:52:25.325 [INFO][3741] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752" host="localhost" Sep 10 00:52:25.373567 env[1206]: 2025-09-10 00:52:25.331 [INFO][3741] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 00:52:25.373567 env[1206]: 2025-09-10 00:52:25.334 [INFO][3741] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 00:52:25.373567 env[1206]: 2025-09-10 00:52:25.335 [INFO][3741] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 00:52:25.373567 env[1206]: 2025-09-10 00:52:25.337 [INFO][3741] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 00:52:25.373567 env[1206]: 2025-09-10 00:52:25.337 [INFO][3741] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752" host="localhost" Sep 10 00:52:25.373567 env[1206]: 2025-09-10 00:52:25.338 [INFO][3741] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752 Sep 10 00:52:25.373567 env[1206]: 2025-09-10 00:52:25.342 [INFO][3741] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752" host="localhost" Sep 10 00:52:25.373567 env[1206]: 2025-09-10 00:52:25.348 [INFO][3741] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752" host="localhost" Sep 10 00:52:25.373567 env[1206]: 2025-09-10 00:52:25.348 [INFO][3741] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752" host="localhost" Sep 10 00:52:25.373567 env[1206]: 2025-09-10 00:52:25.348 [INFO][3741] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:25.373567 env[1206]: 2025-09-10 00:52:25.348 [INFO][3741] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752" HandleID="k8s-pod-network.b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752" Workload="localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0" Sep 10 00:52:25.374139 env[1206]: 2025-09-10 00:52:25.351 [INFO][3712] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752" Namespace="kube-system" Pod="coredns-7c65d6cfc9-7g8cw" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"7462035c-d572-4145-a342-1748e1d5702b", ResourceVersion:"982", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-7g8cw", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif4c95d67d70", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:25.374139 env[1206]: 2025-09-10 00:52:25.351 [INFO][3712] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752" Namespace="kube-system" Pod="coredns-7c65d6cfc9-7g8cw" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0" Sep 10 00:52:25.374139 env[1206]: 2025-09-10 00:52:25.351 [INFO][3712] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif4c95d67d70 ContainerID="b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752" Namespace="kube-system" Pod="coredns-7c65d6cfc9-7g8cw" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0" Sep 10 00:52:25.374139 env[1206]: 2025-09-10 00:52:25.359 [INFO][3712] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752" Namespace="kube-system" Pod="coredns-7c65d6cfc9-7g8cw" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0" Sep 10 00:52:25.374139 env[1206]: 2025-09-10 00:52:25.359 [INFO][3712] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752" Namespace="kube-system" Pod="coredns-7c65d6cfc9-7g8cw" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"7462035c-d572-4145-a342-1748e1d5702b", ResourceVersion:"982", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752", Pod:"coredns-7c65d6cfc9-7g8cw", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif4c95d67d70", MAC:"42:fe:e4:6e:00:12", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:25.374139 env[1206]: 2025-09-10 00:52:25.370 [INFO][3712] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752" Namespace="kube-system" Pod="coredns-7c65d6cfc9-7g8cw" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0" Sep 10 00:52:25.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit: BPF prog-id=176 op=LOAD Sep 10 00:52:25.374000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit[3787]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3777 pid=3787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.374000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561353665646363633038393530373731303432343835373462343836 Sep 10 00:52:25.374000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit[3787]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3777 pid=3787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.374000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561353665646363633038393530373731303432343835373462343836 Sep 10 00:52:25.374000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.374000 audit: BPF prog-id=177 op=LOAD Sep 10 00:52:25.374000 audit[3787]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000308a10 items=0 ppid=3777 pid=3787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.374000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561353665646363633038393530373731303432343835373462343836 Sep 10 00:52:25.375000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.375000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.375000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.375000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.375000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.375000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.375000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.375000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.375000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.375000 audit: BPF prog-id=178 op=LOAD Sep 10 00:52:25.375000 audit[3787]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000308a58 items=0 ppid=3777 pid=3787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561353665646363633038393530373731303432343835373462343836 Sep 10 00:52:25.375000 audit: BPF prog-id=178 op=UNLOAD Sep 10 00:52:25.375000 audit: BPF prog-id=177 op=UNLOAD Sep 10 00:52:25.375000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.375000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.375000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.375000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.375000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.375000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.375000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.375000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.375000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.375000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.375000 audit: BPF prog-id=179 op=LOAD Sep 10 00:52:25.375000 audit[3787]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000308e68 items=0 ppid=3777 pid=3787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561353665646363633038393530373731303432343835373462343836 Sep 10 00:52:25.377421 systemd-resolved[1146]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 00:52:25.384158 env[1206]: time="2025-09-10T00:52:25.384085646Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:52:25.384307 env[1206]: time="2025-09-10T00:52:25.384136336Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:52:25.384307 env[1206]: time="2025-09-10T00:52:25.384146776Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:52:25.384307 env[1206]: time="2025-09-10T00:52:25.384274177Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752 pid=3820 runtime=io.containerd.runc.v2 Sep 10 00:52:25.386000 audit[3830]: NETFILTER_CFG table=filter:104 family=2 entries=46 op=nft_register_chain pid=3830 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:52:25.386000 audit[3830]: SYSCALL arch=c000003e syscall=46 success=yes exit=23740 a0=3 a1=7ffc5623b9d0 a2=0 a3=7ffc5623b9bc items=0 ppid=3271 pid=3830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.386000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:52:25.400509 systemd[1]: Started cri-containerd-b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752.scope. Sep 10 00:52:25.408402 env[1206]: time="2025-09-10T00:52:25.408334402Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-568989f48d-8qw66,Uid:21daa049-0018-40da-91f6-73f54e919867,Namespace:calico-system,Attempt:1,} returns sandbox id \"ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d\"" Sep 10 00:52:25.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit: BPF prog-id=180 op=LOAD Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { bpf } for pid=3831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3820 pid=3831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237333131643261313435373035376261643164386235383230613638 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { perfmon } for pid=3831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3820 pid=3831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237333131643261313435373035376261643164386235383230613638 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { bpf } for pid=3831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { bpf } for pid=3831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { bpf } for pid=3831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { perfmon } for pid=3831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { perfmon } for pid=3831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { perfmon } for pid=3831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { perfmon } for pid=3831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { perfmon } for pid=3831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { bpf } for pid=3831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { bpf } for pid=3831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit: BPF prog-id=181 op=LOAD Sep 10 00:52:25.409000 audit[3831]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003e09d0 items=0 ppid=3820 pid=3831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237333131643261313435373035376261643164386235383230613638 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { bpf } for pid=3831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { bpf } for pid=3831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { perfmon } for pid=3831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { perfmon } for pid=3831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { perfmon } for pid=3831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { perfmon } for pid=3831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { perfmon } for pid=3831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { bpf } for pid=3831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { bpf } for pid=3831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit: BPF prog-id=182 op=LOAD Sep 10 00:52:25.409000 audit[3831]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003e0a18 items=0 ppid=3820 pid=3831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237333131643261313435373035376261643164386235383230613638 Sep 10 00:52:25.409000 audit: BPF prog-id=182 op=UNLOAD Sep 10 00:52:25.409000 audit: BPF prog-id=181 op=UNLOAD Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { bpf } for pid=3831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { bpf } for pid=3831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { bpf } for pid=3831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { perfmon } for pid=3831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { perfmon } for pid=3831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { perfmon } for pid=3831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { perfmon } for pid=3831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { perfmon } for pid=3831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { bpf } for pid=3831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit[3831]: AVC avc: denied { bpf } for pid=3831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.409000 audit: BPF prog-id=183 op=LOAD Sep 10 00:52:25.409000 audit[3831]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003e0e28 items=0 ppid=3820 pid=3831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237333131643261313435373035376261643164386235383230613638 Sep 10 00:52:25.413124 env[1206]: time="2025-09-10T00:52:25.411560919Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\"" Sep 10 00:52:25.412166 systemd-resolved[1146]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 00:52:25.436248 env[1206]: time="2025-09-10T00:52:25.436206299Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-7g8cw,Uid:7462035c-d572-4145-a342-1748e1d5702b,Namespace:kube-system,Attempt:1,} returns sandbox id \"b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752\"" Sep 10 00:52:25.436717 kubelet[1980]: E0910 00:52:25.436697 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:52:25.438123 env[1206]: time="2025-09-10T00:52:25.438092982Z" level=info msg="CreateContainer within sandbox \"b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 10 00:52:25.453844 env[1206]: time="2025-09-10T00:52:25.453816918Z" level=info msg="CreateContainer within sandbox \"b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"99f33a6587ec847d39814c4b90810716ecdc08b194df96b8bbe86232cb716d5b\"" Sep 10 00:52:25.454309 env[1206]: time="2025-09-10T00:52:25.454293719Z" level=info msg="StartContainer for \"99f33a6587ec847d39814c4b90810716ecdc08b194df96b8bbe86232cb716d5b\"" Sep 10 00:52:25.467994 systemd[1]: Started cri-containerd-99f33a6587ec847d39814c4b90810716ecdc08b194df96b8bbe86232cb716d5b.scope. Sep 10 00:52:25.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit: BPF prog-id=184 op=LOAD Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3820 pid=3871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939663333613635383765633834376433393831346334623930383130 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=3820 pid=3871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939663333613635383765633834376433393831346334623930383130 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit: BPF prog-id=185 op=LOAD Sep 10 00:52:25.478000 audit[3871]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0001d59b0 items=0 ppid=3820 pid=3871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939663333613635383765633834376433393831346334623930383130 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit: BPF prog-id=186 op=LOAD Sep 10 00:52:25.478000 audit[3871]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0001d59f8 items=0 ppid=3820 pid=3871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939663333613635383765633834376433393831346334623930383130 Sep 10 00:52:25.478000 audit: BPF prog-id=186 op=UNLOAD Sep 10 00:52:25.478000 audit: BPF prog-id=185 op=UNLOAD Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:25.478000 audit: BPF prog-id=187 op=LOAD Sep 10 00:52:25.478000 audit[3871]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0001d5e08 items=0 ppid=3820 pid=3871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939663333613635383765633834376433393831346334623930383130 Sep 10 00:52:25.492700 env[1206]: time="2025-09-10T00:52:25.492664110Z" level=info msg="StartContainer for \"99f33a6587ec847d39814c4b90810716ecdc08b194df96b8bbe86232cb716d5b\" returns successfully" Sep 10 00:52:25.521000 audit[3881]: AVC avc: denied { getattr } for pid=3881 comm="coredns" path="cgroup:[4026532534]" dev="nsfs" ino=4026532534 scontext=system_u:system_r:svirt_lxc_net_t:s0:c148,c589 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 10 00:52:25.521000 audit[3881]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c0000fc900 a2=c000445898 a3=0 items=0 ppid=3820 pid=3881 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c148,c589 key=(null) Sep 10 00:52:25.521000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 10 00:52:25.786714 env[1206]: time="2025-09-10T00:52:25.786677613Z" level=info msg="StopPodSandbox for \"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\"" Sep 10 00:52:25.787027 env[1206]: time="2025-09-10T00:52:25.786834082Z" level=info msg="StopPodSandbox for \"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\"" Sep 10 00:52:25.853790 env[1206]: 2025-09-10 00:52:25.822 [INFO][3926] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Sep 10 00:52:25.853790 env[1206]: 2025-09-10 00:52:25.822 [INFO][3926] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" iface="eth0" netns="/var/run/netns/cni-84c39706-933d-745d-a375-fc44846990cb" Sep 10 00:52:25.853790 env[1206]: 2025-09-10 00:52:25.822 [INFO][3926] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" iface="eth0" netns="/var/run/netns/cni-84c39706-933d-745d-a375-fc44846990cb" Sep 10 00:52:25.853790 env[1206]: 2025-09-10 00:52:25.822 [INFO][3926] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" iface="eth0" netns="/var/run/netns/cni-84c39706-933d-745d-a375-fc44846990cb" Sep 10 00:52:25.853790 env[1206]: 2025-09-10 00:52:25.822 [INFO][3926] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Sep 10 00:52:25.853790 env[1206]: 2025-09-10 00:52:25.822 [INFO][3926] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Sep 10 00:52:25.853790 env[1206]: 2025-09-10 00:52:25.843 [INFO][3942] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" HandleID="k8s-pod-network.fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Workload="localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0" Sep 10 00:52:25.853790 env[1206]: 2025-09-10 00:52:25.844 [INFO][3942] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:25.853790 env[1206]: 2025-09-10 00:52:25.844 [INFO][3942] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:25.853790 env[1206]: 2025-09-10 00:52:25.849 [WARNING][3942] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" HandleID="k8s-pod-network.fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Workload="localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0" Sep 10 00:52:25.853790 env[1206]: 2025-09-10 00:52:25.849 [INFO][3942] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" HandleID="k8s-pod-network.fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Workload="localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0" Sep 10 00:52:25.853790 env[1206]: 2025-09-10 00:52:25.850 [INFO][3942] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:25.853790 env[1206]: 2025-09-10 00:52:25.851 [INFO][3926] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Sep 10 00:52:25.855744 env[1206]: time="2025-09-10T00:52:25.855696490Z" level=info msg="TearDown network for sandbox \"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\" successfully" Sep 10 00:52:25.855939 env[1206]: time="2025-09-10T00:52:25.855917596Z" level=info msg="StopPodSandbox for \"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\" returns successfully" Sep 10 00:52:25.856581 env[1206]: time="2025-09-10T00:52:25.856559833Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-74fc88dd94-pj9t2,Uid:6215ffc9-406c-45b6-858c-b40455eb62dc,Namespace:calico-apiserver,Attempt:1,}" Sep 10 00:52:25.861333 env[1206]: 2025-09-10 00:52:25.831 [INFO][3925] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Sep 10 00:52:25.861333 env[1206]: 2025-09-10 00:52:25.831 [INFO][3925] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" iface="eth0" netns="/var/run/netns/cni-5e52cfef-22d9-35f5-0141-d726798b91e7" Sep 10 00:52:25.861333 env[1206]: 2025-09-10 00:52:25.831 [INFO][3925] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" iface="eth0" netns="/var/run/netns/cni-5e52cfef-22d9-35f5-0141-d726798b91e7" Sep 10 00:52:25.861333 env[1206]: 2025-09-10 00:52:25.831 [INFO][3925] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" iface="eth0" netns="/var/run/netns/cni-5e52cfef-22d9-35f5-0141-d726798b91e7" Sep 10 00:52:25.861333 env[1206]: 2025-09-10 00:52:25.831 [INFO][3925] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Sep 10 00:52:25.861333 env[1206]: 2025-09-10 00:52:25.831 [INFO][3925] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Sep 10 00:52:25.861333 env[1206]: 2025-09-10 00:52:25.848 [INFO][3948] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" HandleID="k8s-pod-network.c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Workload="localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0" Sep 10 00:52:25.861333 env[1206]: 2025-09-10 00:52:25.848 [INFO][3948] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:25.861333 env[1206]: 2025-09-10 00:52:25.850 [INFO][3948] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:25.861333 env[1206]: 2025-09-10 00:52:25.856 [WARNING][3948] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" HandleID="k8s-pod-network.c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Workload="localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0" Sep 10 00:52:25.861333 env[1206]: 2025-09-10 00:52:25.857 [INFO][3948] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" HandleID="k8s-pod-network.c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Workload="localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0" Sep 10 00:52:25.861333 env[1206]: 2025-09-10 00:52:25.858 [INFO][3948] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:25.861333 env[1206]: 2025-09-10 00:52:25.859 [INFO][3925] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Sep 10 00:52:25.861727 env[1206]: time="2025-09-10T00:52:25.861431365Z" level=info msg="TearDown network for sandbox \"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\" successfully" Sep 10 00:52:25.861727 env[1206]: time="2025-09-10T00:52:25.861457177Z" level=info msg="StopPodSandbox for \"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\" returns successfully" Sep 10 00:52:25.861999 env[1206]: time="2025-09-10T00:52:25.861978065Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-74fc88dd94-cwd5j,Uid:0558f8f2-9880-494d-a747-c8d38d014ba2,Namespace:calico-apiserver,Attempt:1,}" Sep 10 00:52:25.911651 kubelet[1980]: E0910 00:52:25.908217 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:52:25.922061 kubelet[1980]: I0910 00:52:25.921581 1980 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-7g8cw" podStartSLOduration=38.921560902 podStartE2EDuration="38.921560902s" podCreationTimestamp="2025-09-10 00:51:47 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-10 00:52:25.921489491 +0000 UTC m=+45.212652753" watchObservedRunningTime="2025-09-10 00:52:25.921560902 +0000 UTC m=+45.212724154" Sep 10 00:52:25.922061 kubelet[1980]: I0910 00:52:25.921899 1980 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-9b9c54998-jvg9s" podStartSLOduration=2.09030138 podStartE2EDuration="5.92189454s" podCreationTimestamp="2025-09-10 00:52:20 +0000 UTC" firstStartedPulling="2025-09-10 00:52:21.131949854 +0000 UTC m=+40.423113116" lastFinishedPulling="2025-09-10 00:52:24.963543014 +0000 UTC m=+44.254706276" observedRunningTime="2025-09-10 00:52:25.910812363 +0000 UTC m=+45.201975645" watchObservedRunningTime="2025-09-10 00:52:25.92189454 +0000 UTC m=+45.213057802" Sep 10 00:52:25.924000 audit[3996]: NETFILTER_CFG table=filter:105 family=2 entries=19 op=nft_register_rule pid=3996 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:25.924000 audit[3996]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffc428a35a0 a2=0 a3=7ffc428a358c items=0 ppid=2086 pid=3996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.924000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:25.931000 audit[3996]: NETFILTER_CFG table=nat:106 family=2 entries=21 op=nft_register_chain pid=3996 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:25.931000 audit[3996]: SYSCALL arch=c000003e syscall=46 success=yes exit=7044 a0=3 a1=7ffc428a35a0 a2=0 a3=7ffc428a358c items=0 ppid=2086 pid=3996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.931000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:25.949000 audit[4007]: NETFILTER_CFG table=filter:107 family=2 entries=15 op=nft_register_rule pid=4007 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:25.949000 audit[4007]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffc4db7dd60 a2=0 a3=7ffc4db7dd4c items=0 ppid=2086 pid=4007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.949000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:25.956000 audit[4007]: NETFILTER_CFG table=nat:108 family=2 entries=37 op=nft_register_chain pid=4007 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:25.956000 audit[4007]: SYSCALL arch=c000003e syscall=46 success=yes exit=14964 a0=3 a1=7ffc4db7dd60 a2=0 a3=7ffc4db7dd4c items=0 ppid=2086 pid=4007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.956000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:25.973739 systemd-networkd[1027]: calie17548d4b90: Link UP Sep 10 00:52:25.975222 systemd-networkd[1027]: calie17548d4b90: Gained carrier Sep 10 00:52:25.975690 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie17548d4b90: link becomes ready Sep 10 00:52:25.987916 env[1206]: 2025-09-10 00:52:25.916 [INFO][3972] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0 calico-apiserver-74fc88dd94- calico-apiserver 0558f8f2-9880-494d-a747-c8d38d014ba2 1004 0 2025-09-10 00:51:55 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:74fc88dd94 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-74fc88dd94-cwd5j eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calie17548d4b90 [] [] }} ContainerID="ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6" Namespace="calico-apiserver" Pod="calico-apiserver-74fc88dd94-cwd5j" WorkloadEndpoint="localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-" Sep 10 00:52:25.987916 env[1206]: 2025-09-10 00:52:25.916 [INFO][3972] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6" Namespace="calico-apiserver" Pod="calico-apiserver-74fc88dd94-cwd5j" WorkloadEndpoint="localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0" Sep 10 00:52:25.987916 env[1206]: 2025-09-10 00:52:25.942 [INFO][3998] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6" HandleID="k8s-pod-network.ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6" Workload="localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0" Sep 10 00:52:25.987916 env[1206]: 2025-09-10 00:52:25.942 [INFO][3998] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6" HandleID="k8s-pod-network.ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6" Workload="localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00026cfe0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-74fc88dd94-cwd5j", "timestamp":"2025-09-10 00:52:25.942766866 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 00:52:25.987916 env[1206]: 2025-09-10 00:52:25.943 [INFO][3998] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:25.987916 env[1206]: 2025-09-10 00:52:25.943 [INFO][3998] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:25.987916 env[1206]: 2025-09-10 00:52:25.943 [INFO][3998] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 00:52:25.987916 env[1206]: 2025-09-10 00:52:25.949 [INFO][3998] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6" host="localhost" Sep 10 00:52:25.987916 env[1206]: 2025-09-10 00:52:25.955 [INFO][3998] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 00:52:25.987916 env[1206]: 2025-09-10 00:52:25.958 [INFO][3998] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 00:52:25.987916 env[1206]: 2025-09-10 00:52:25.959 [INFO][3998] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 00:52:25.987916 env[1206]: 2025-09-10 00:52:25.961 [INFO][3998] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 00:52:25.987916 env[1206]: 2025-09-10 00:52:25.961 [INFO][3998] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6" host="localhost" Sep 10 00:52:25.987916 env[1206]: 2025-09-10 00:52:25.962 [INFO][3998] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6 Sep 10 00:52:25.987916 env[1206]: 2025-09-10 00:52:25.965 [INFO][3998] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6" host="localhost" Sep 10 00:52:25.987916 env[1206]: 2025-09-10 00:52:25.970 [INFO][3998] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6" host="localhost" Sep 10 00:52:25.987916 env[1206]: 2025-09-10 00:52:25.970 [INFO][3998] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6" host="localhost" Sep 10 00:52:25.987916 env[1206]: 2025-09-10 00:52:25.970 [INFO][3998] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:25.987916 env[1206]: 2025-09-10 00:52:25.970 [INFO][3998] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6" HandleID="k8s-pod-network.ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6" Workload="localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0" Sep 10 00:52:25.988461 env[1206]: 2025-09-10 00:52:25.972 [INFO][3972] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6" Namespace="calico-apiserver" Pod="calico-apiserver-74fc88dd94-cwd5j" WorkloadEndpoint="localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0", GenerateName:"calico-apiserver-74fc88dd94-", Namespace:"calico-apiserver", SelfLink:"", UID:"0558f8f2-9880-494d-a747-c8d38d014ba2", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"74fc88dd94", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-74fc88dd94-cwd5j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie17548d4b90", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:25.988461 env[1206]: 2025-09-10 00:52:25.972 [INFO][3972] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6" Namespace="calico-apiserver" Pod="calico-apiserver-74fc88dd94-cwd5j" WorkloadEndpoint="localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0" Sep 10 00:52:25.988461 env[1206]: 2025-09-10 00:52:25.972 [INFO][3972] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie17548d4b90 ContainerID="ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6" Namespace="calico-apiserver" Pod="calico-apiserver-74fc88dd94-cwd5j" WorkloadEndpoint="localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0" Sep 10 00:52:25.988461 env[1206]: 2025-09-10 00:52:25.975 [INFO][3972] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6" Namespace="calico-apiserver" Pod="calico-apiserver-74fc88dd94-cwd5j" WorkloadEndpoint="localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0" Sep 10 00:52:25.988461 env[1206]: 2025-09-10 00:52:25.976 [INFO][3972] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6" Namespace="calico-apiserver" Pod="calico-apiserver-74fc88dd94-cwd5j" WorkloadEndpoint="localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0", GenerateName:"calico-apiserver-74fc88dd94-", Namespace:"calico-apiserver", SelfLink:"", UID:"0558f8f2-9880-494d-a747-c8d38d014ba2", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"74fc88dd94", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6", Pod:"calico-apiserver-74fc88dd94-cwd5j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie17548d4b90", MAC:"1e:b4:a1:1e:b5:1e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:25.988461 env[1206]: 2025-09-10 00:52:25.986 [INFO][3972] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6" Namespace="calico-apiserver" Pod="calico-apiserver-74fc88dd94-cwd5j" WorkloadEndpoint="localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0" Sep 10 00:52:25.997250 env[1206]: time="2025-09-10T00:52:25.997184491Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:52:25.997250 env[1206]: time="2025-09-10T00:52:25.997226153Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:52:25.997412 env[1206]: time="2025-09-10T00:52:25.997235402Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:52:25.997716 env[1206]: time="2025-09-10T00:52:25.997638658Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6 pid=4025 runtime=io.containerd.runc.v2 Sep 10 00:52:25.996000 audit[4030]: NETFILTER_CFG table=filter:109 family=2 entries=58 op=nft_register_chain pid=4030 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:52:25.996000 audit[4030]: SYSCALL arch=c000003e syscall=46 success=yes exit=30584 a0=3 a1=7fffe5c24500 a2=0 a3=7fffe5c244ec items=0 ppid=3271 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:25.996000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:52:26.008046 systemd[1]: Started cri-containerd-ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6.scope. Sep 10 00:52:26.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit: BPF prog-id=188 op=LOAD Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4025 pid=4037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:26.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666333735656334656262643339383561393761393862366231363066 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4025 pid=4037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:26.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666333735656334656262643339383561393761393862366231363066 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit: BPF prog-id=189 op=LOAD Sep 10 00:52:26.016000 audit[4037]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002a4a30 items=0 ppid=4025 pid=4037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:26.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666333735656334656262643339383561393761393862366231363066 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit: BPF prog-id=190 op=LOAD Sep 10 00:52:26.016000 audit[4037]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002a4a78 items=0 ppid=4025 pid=4037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:26.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666333735656334656262643339383561393761393862366231363066 Sep 10 00:52:26.016000 audit: BPF prog-id=190 op=UNLOAD Sep 10 00:52:26.016000 audit: BPF prog-id=189 op=UNLOAD Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { perfmon } for pid=4037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit[4037]: AVC avc: denied { bpf } for pid=4037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.016000 audit: BPF prog-id=191 op=LOAD Sep 10 00:52:26.016000 audit[4037]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002a4e88 items=0 ppid=4025 pid=4037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:26.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666333735656334656262643339383561393761393862366231363066 Sep 10 00:52:26.019812 systemd-resolved[1146]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 00:52:26.038870 env[1206]: time="2025-09-10T00:52:26.038273447Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-74fc88dd94-cwd5j,Uid:0558f8f2-9880-494d-a747-c8d38d014ba2,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6\"" Sep 10 00:52:26.076953 systemd-networkd[1027]: calibfff9df04be: Link UP Sep 10 00:52:26.077114 systemd-networkd[1027]: calibfff9df04be: Gained carrier Sep 10 00:52:26.077763 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calibfff9df04be: link becomes ready Sep 10 00:52:26.086864 env[1206]: 2025-09-10 00:52:25.897 [INFO][3959] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0 calico-apiserver-74fc88dd94- calico-apiserver 6215ffc9-406c-45b6-858c-b40455eb62dc 1003 0 2025-09-10 00:51:55 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:74fc88dd94 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-74fc88dd94-pj9t2 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calibfff9df04be [] [] }} ContainerID="14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8" Namespace="calico-apiserver" Pod="calico-apiserver-74fc88dd94-pj9t2" WorkloadEndpoint="localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-" Sep 10 00:52:26.086864 env[1206]: 2025-09-10 00:52:25.897 [INFO][3959] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8" Namespace="calico-apiserver" Pod="calico-apiserver-74fc88dd94-pj9t2" WorkloadEndpoint="localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0" Sep 10 00:52:26.086864 env[1206]: 2025-09-10 00:52:25.959 [INFO][3989] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8" HandleID="k8s-pod-network.14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8" Workload="localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0" Sep 10 00:52:26.086864 env[1206]: 2025-09-10 00:52:25.959 [INFO][3989] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8" HandleID="k8s-pod-network.14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8" Workload="localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002e7540), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-74fc88dd94-pj9t2", "timestamp":"2025-09-10 00:52:25.959784044 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 00:52:26.086864 env[1206]: 2025-09-10 00:52:25.959 [INFO][3989] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:26.086864 env[1206]: 2025-09-10 00:52:25.970 [INFO][3989] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:26.086864 env[1206]: 2025-09-10 00:52:25.970 [INFO][3989] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 00:52:26.086864 env[1206]: 2025-09-10 00:52:26.048 [INFO][3989] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8" host="localhost" Sep 10 00:52:26.086864 env[1206]: 2025-09-10 00:52:26.055 [INFO][3989] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 00:52:26.086864 env[1206]: 2025-09-10 00:52:26.058 [INFO][3989] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 00:52:26.086864 env[1206]: 2025-09-10 00:52:26.059 [INFO][3989] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 00:52:26.086864 env[1206]: 2025-09-10 00:52:26.060 [INFO][3989] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 00:52:26.086864 env[1206]: 2025-09-10 00:52:26.061 [INFO][3989] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8" host="localhost" Sep 10 00:52:26.086864 env[1206]: 2025-09-10 00:52:26.062 [INFO][3989] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8 Sep 10 00:52:26.086864 env[1206]: 2025-09-10 00:52:26.064 [INFO][3989] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8" host="localhost" Sep 10 00:52:26.086864 env[1206]: 2025-09-10 00:52:26.071 [INFO][3989] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8" host="localhost" Sep 10 00:52:26.086864 env[1206]: 2025-09-10 00:52:26.071 [INFO][3989] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8" host="localhost" Sep 10 00:52:26.086864 env[1206]: 2025-09-10 00:52:26.071 [INFO][3989] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:26.086864 env[1206]: 2025-09-10 00:52:26.071 [INFO][3989] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8" HandleID="k8s-pod-network.14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8" Workload="localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0" Sep 10 00:52:26.087983 env[1206]: 2025-09-10 00:52:26.073 [INFO][3959] cni-plugin/k8s.go 418: Populated endpoint ContainerID="14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8" Namespace="calico-apiserver" Pod="calico-apiserver-74fc88dd94-pj9t2" WorkloadEndpoint="localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0", GenerateName:"calico-apiserver-74fc88dd94-", Namespace:"calico-apiserver", SelfLink:"", UID:"6215ffc9-406c-45b6-858c-b40455eb62dc", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"74fc88dd94", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-74fc88dd94-pj9t2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibfff9df04be", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:26.087983 env[1206]: 2025-09-10 00:52:26.073 [INFO][3959] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8" Namespace="calico-apiserver" Pod="calico-apiserver-74fc88dd94-pj9t2" WorkloadEndpoint="localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0" Sep 10 00:52:26.087983 env[1206]: 2025-09-10 00:52:26.073 [INFO][3959] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calibfff9df04be ContainerID="14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8" Namespace="calico-apiserver" Pod="calico-apiserver-74fc88dd94-pj9t2" WorkloadEndpoint="localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0" Sep 10 00:52:26.087983 env[1206]: 2025-09-10 00:52:26.077 [INFO][3959] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8" Namespace="calico-apiserver" Pod="calico-apiserver-74fc88dd94-pj9t2" WorkloadEndpoint="localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0" Sep 10 00:52:26.087983 env[1206]: 2025-09-10 00:52:26.078 [INFO][3959] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8" Namespace="calico-apiserver" Pod="calico-apiserver-74fc88dd94-pj9t2" WorkloadEndpoint="localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0", GenerateName:"calico-apiserver-74fc88dd94-", Namespace:"calico-apiserver", SelfLink:"", UID:"6215ffc9-406c-45b6-858c-b40455eb62dc", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"74fc88dd94", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8", Pod:"calico-apiserver-74fc88dd94-pj9t2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibfff9df04be", MAC:"36:5f:24:a5:3e:ec", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:26.087983 env[1206]: 2025-09-10 00:52:26.084 [INFO][3959] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8" Namespace="calico-apiserver" Pod="calico-apiserver-74fc88dd94-pj9t2" WorkloadEndpoint="localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0" Sep 10 00:52:26.100108 env[1206]: time="2025-09-10T00:52:26.100053369Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:52:26.098000 audit[4076]: NETFILTER_CFG table=filter:110 family=2 entries=49 op=nft_register_chain pid=4076 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:52:26.098000 audit[4076]: SYSCALL arch=c000003e syscall=46 success=yes exit=25452 a0=3 a1=7ffdc3772450 a2=0 a3=7ffdc377243c items=0 ppid=3271 pid=4076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:26.098000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:52:26.100415 env[1206]: time="2025-09-10T00:52:26.100092737Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:52:26.100415 env[1206]: time="2025-09-10T00:52:26.100102266Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:52:26.100415 env[1206]: time="2025-09-10T00:52:26.100283673Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8 pid=4077 runtime=io.containerd.runc.v2 Sep 10 00:52:26.110215 systemd[1]: Started cri-containerd-14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8.scope. Sep 10 00:52:26.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.118000 audit: BPF prog-id=192 op=LOAD Sep 10 00:52:26.118000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.118000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4077 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:26.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134373138656438303635356238303332646365643632323864626137 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4077 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:26.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134373138656438303635356238303332646365643632323864626137 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit: BPF prog-id=193 op=LOAD Sep 10 00:52:26.119000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003e2710 items=0 ppid=4077 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:26.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134373138656438303635356238303332646365643632323864626137 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit: BPF prog-id=194 op=LOAD Sep 10 00:52:26.119000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003e2758 items=0 ppid=4077 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:26.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134373138656438303635356238303332646365643632323864626137 Sep 10 00:52:26.119000 audit: BPF prog-id=194 op=UNLOAD Sep 10 00:52:26.119000 audit: BPF prog-id=193 op=UNLOAD Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { perfmon } for pid=4087 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit[4087]: AVC avc: denied { bpf } for pid=4087 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:26.119000 audit: BPF prog-id=195 op=LOAD Sep 10 00:52:26.119000 audit[4087]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003e2b68 items=0 ppid=4077 pid=4087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:26.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134373138656438303635356238303332646365643632323864626137 Sep 10 00:52:26.121357 systemd-resolved[1146]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 00:52:26.142824 env[1206]: time="2025-09-10T00:52:26.142776014Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-74fc88dd94-pj9t2,Uid:6215ffc9-406c-45b6-858c-b40455eb62dc,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8\"" Sep 10 00:52:26.143204 systemd[1]: run-netns-cni\x2d5e52cfef\x2d22d9\x2d35f5\x2d0141\x2dd726798b91e7.mount: Deactivated successfully. Sep 10 00:52:26.143298 systemd[1]: run-netns-cni\x2d84c39706\x2d933d\x2d745d\x2da375\x2dfc44846990cb.mount: Deactivated successfully. Sep 10 00:52:26.424750 systemd-networkd[1027]: calif4c95d67d70: Gained IPv6LL Sep 10 00:52:26.787109 env[1206]: time="2025-09-10T00:52:26.786992228Z" level=info msg="StopPodSandbox for \"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\"" Sep 10 00:52:26.787225 env[1206]: time="2025-09-10T00:52:26.787116563Z" level=info msg="StopPodSandbox for \"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\"" Sep 10 00:52:26.787333 env[1206]: time="2025-09-10T00:52:26.787311257Z" level=info msg="StopPodSandbox for \"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\"" Sep 10 00:52:26.912799 kubelet[1980]: E0910 00:52:26.912767 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:52:27.069434 env[1206]: 2025-09-10 00:52:27.027 [INFO][4145] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Sep 10 00:52:27.069434 env[1206]: 2025-09-10 00:52:27.027 [INFO][4145] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" iface="eth0" netns="/var/run/netns/cni-4bb1c179-8751-9bb4-d804-d44e59150c91" Sep 10 00:52:27.069434 env[1206]: 2025-09-10 00:52:27.027 [INFO][4145] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" iface="eth0" netns="/var/run/netns/cni-4bb1c179-8751-9bb4-d804-d44e59150c91" Sep 10 00:52:27.069434 env[1206]: 2025-09-10 00:52:27.027 [INFO][4145] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" iface="eth0" netns="/var/run/netns/cni-4bb1c179-8751-9bb4-d804-d44e59150c91" Sep 10 00:52:27.069434 env[1206]: 2025-09-10 00:52:27.027 [INFO][4145] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Sep 10 00:52:27.069434 env[1206]: 2025-09-10 00:52:27.027 [INFO][4145] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Sep 10 00:52:27.069434 env[1206]: 2025-09-10 00:52:27.056 [INFO][4173] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" HandleID="k8s-pod-network.fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Workload="localhost-k8s-csi--node--driver--zh8cr-eth0" Sep 10 00:52:27.069434 env[1206]: 2025-09-10 00:52:27.056 [INFO][4173] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:27.069434 env[1206]: 2025-09-10 00:52:27.056 [INFO][4173] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:27.069434 env[1206]: 2025-09-10 00:52:27.061 [WARNING][4173] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" HandleID="k8s-pod-network.fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Workload="localhost-k8s-csi--node--driver--zh8cr-eth0" Sep 10 00:52:27.069434 env[1206]: 2025-09-10 00:52:27.061 [INFO][4173] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" HandleID="k8s-pod-network.fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Workload="localhost-k8s-csi--node--driver--zh8cr-eth0" Sep 10 00:52:27.069434 env[1206]: 2025-09-10 00:52:27.066 [INFO][4173] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:27.069434 env[1206]: 2025-09-10 00:52:27.068 [INFO][4145] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Sep 10 00:52:27.071627 systemd[1]: run-netns-cni\x2d4bb1c179\x2d8751\x2d9bb4\x2dd804\x2dd44e59150c91.mount: Deactivated successfully. Sep 10 00:52:27.072603 env[1206]: time="2025-09-10T00:52:27.071706010Z" level=info msg="TearDown network for sandbox \"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\" successfully" Sep 10 00:52:27.072603 env[1206]: time="2025-09-10T00:52:27.071736430Z" level=info msg="StopPodSandbox for \"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\" returns successfully" Sep 10 00:52:27.073185 env[1206]: time="2025-09-10T00:52:27.073140658Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-zh8cr,Uid:dd1fed80-f428-462e-a294-863944798dcc,Namespace:calico-system,Attempt:1,}" Sep 10 00:52:27.089480 env[1206]: 2025-09-10 00:52:27.030 [INFO][4160] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Sep 10 00:52:27.089480 env[1206]: 2025-09-10 00:52:27.030 [INFO][4160] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" iface="eth0" netns="/var/run/netns/cni-55ce07dc-935f-a59e-53cf-e99bf59c95f8" Sep 10 00:52:27.089480 env[1206]: 2025-09-10 00:52:27.032 [INFO][4160] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" iface="eth0" netns="/var/run/netns/cni-55ce07dc-935f-a59e-53cf-e99bf59c95f8" Sep 10 00:52:27.089480 env[1206]: 2025-09-10 00:52:27.033 [INFO][4160] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" iface="eth0" netns="/var/run/netns/cni-55ce07dc-935f-a59e-53cf-e99bf59c95f8" Sep 10 00:52:27.089480 env[1206]: 2025-09-10 00:52:27.033 [INFO][4160] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Sep 10 00:52:27.089480 env[1206]: 2025-09-10 00:52:27.033 [INFO][4160] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Sep 10 00:52:27.089480 env[1206]: 2025-09-10 00:52:27.058 [INFO][4182] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" HandleID="k8s-pod-network.65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Workload="localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0" Sep 10 00:52:27.089480 env[1206]: 2025-09-10 00:52:27.058 [INFO][4182] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:27.089480 env[1206]: 2025-09-10 00:52:27.066 [INFO][4182] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:27.089480 env[1206]: 2025-09-10 00:52:27.080 [WARNING][4182] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" HandleID="k8s-pod-network.65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Workload="localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0" Sep 10 00:52:27.089480 env[1206]: 2025-09-10 00:52:27.080 [INFO][4182] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" HandleID="k8s-pod-network.65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Workload="localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0" Sep 10 00:52:27.089480 env[1206]: 2025-09-10 00:52:27.084 [INFO][4182] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:27.089480 env[1206]: 2025-09-10 00:52:27.087 [INFO][4160] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Sep 10 00:52:27.093581 env[1206]: time="2025-09-10T00:52:27.089734073Z" level=info msg="TearDown network for sandbox \"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\" successfully" Sep 10 00:52:27.093581 env[1206]: time="2025-09-10T00:52:27.089763812Z" level=info msg="StopPodSandbox for \"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\" returns successfully" Sep 10 00:52:27.093581 env[1206]: time="2025-09-10T00:52:27.093267981Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-8nj94,Uid:7d47c772-cd04-4790-a262-3fd6b9aebfa7,Namespace:kube-system,Attempt:1,}" Sep 10 00:52:27.091847 systemd[1]: run-netns-cni\x2d55ce07dc\x2d935f\x2da59e\x2d53cf\x2de99bf59c95f8.mount: Deactivated successfully. Sep 10 00:52:27.093777 kubelet[1980]: E0910 00:52:27.090962 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:52:27.097550 env[1206]: 2025-09-10 00:52:27.028 [INFO][4155] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Sep 10 00:52:27.097550 env[1206]: 2025-09-10 00:52:27.028 [INFO][4155] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" iface="eth0" netns="/var/run/netns/cni-71067954-6c37-42d7-e122-140ab03e1312" Sep 10 00:52:27.097550 env[1206]: 2025-09-10 00:52:27.028 [INFO][4155] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" iface="eth0" netns="/var/run/netns/cni-71067954-6c37-42d7-e122-140ab03e1312" Sep 10 00:52:27.097550 env[1206]: 2025-09-10 00:52:27.029 [INFO][4155] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" iface="eth0" netns="/var/run/netns/cni-71067954-6c37-42d7-e122-140ab03e1312" Sep 10 00:52:27.097550 env[1206]: 2025-09-10 00:52:27.029 [INFO][4155] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Sep 10 00:52:27.097550 env[1206]: 2025-09-10 00:52:27.029 [INFO][4155] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Sep 10 00:52:27.097550 env[1206]: 2025-09-10 00:52:27.078 [INFO][4181] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" HandleID="k8s-pod-network.ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Workload="localhost-k8s-goldmane--7988f88666--xfp8d-eth0" Sep 10 00:52:27.097550 env[1206]: 2025-09-10 00:52:27.078 [INFO][4181] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:27.097550 env[1206]: 2025-09-10 00:52:27.084 [INFO][4181] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:27.097550 env[1206]: 2025-09-10 00:52:27.091 [WARNING][4181] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" HandleID="k8s-pod-network.ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Workload="localhost-k8s-goldmane--7988f88666--xfp8d-eth0" Sep 10 00:52:27.097550 env[1206]: 2025-09-10 00:52:27.091 [INFO][4181] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" HandleID="k8s-pod-network.ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Workload="localhost-k8s-goldmane--7988f88666--xfp8d-eth0" Sep 10 00:52:27.097550 env[1206]: 2025-09-10 00:52:27.093 [INFO][4181] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:27.097550 env[1206]: 2025-09-10 00:52:27.096 [INFO][4155] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Sep 10 00:52:27.177562 env[1206]: time="2025-09-10T00:52:27.097715300Z" level=info msg="TearDown network for sandbox \"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\" successfully" Sep 10 00:52:27.177562 env[1206]: time="2025-09-10T00:52:27.097757092Z" level=info msg="StopPodSandbox for \"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\" returns successfully" Sep 10 00:52:27.177562 env[1206]: time="2025-09-10T00:52:27.098241617Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-xfp8d,Uid:20f43dfc-1b32-4cd7-a1c0-40453f8c3425,Namespace:calico-system,Attempt:1,}" Sep 10 00:52:27.101287 systemd[1]: run-netns-cni\x2d71067954\x2d6c37\x2d42d7\x2de122\x2d140ab03e1312.mount: Deactivated successfully. Sep 10 00:52:27.320805 systemd-networkd[1027]: calia525a5b798c: Gained IPv6LL Sep 10 00:52:27.384951 systemd-networkd[1027]: calibfff9df04be: Gained IPv6LL Sep 10 00:52:27.576778 systemd-networkd[1027]: calie17548d4b90: Gained IPv6LL Sep 10 00:52:27.634000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.141:22-10.0.0.1:35498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:27.634627 systemd[1]: Started sshd@9-10.0.0.141:22-10.0.0.1:35498.service. Sep 10 00:52:27.635712 kernel: kauditd_printk_skb: 430 callbacks suppressed Sep 10 00:52:27.635764 kernel: audit: type=1130 audit(1757465547.634:1293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.141:22-10.0.0.1:35498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:27.829000 audit[4198]: USER_ACCT pid=4198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:27.830861 sshd[4198]: Accepted publickey for core from 10.0.0.1 port 35498 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:52:27.832610 sshd[4198]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:52:27.831000 audit[4198]: CRED_ACQ pid=4198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:27.835989 systemd-logind[1191]: New session 10 of user core. Sep 10 00:52:27.836717 systemd[1]: Started session-10.scope. Sep 10 00:52:27.837947 kernel: audit: type=1101 audit(1757465547.829:1294): pid=4198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:27.838009 kernel: audit: type=1103 audit(1757465547.831:1295): pid=4198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:27.838045 kernel: audit: type=1006 audit(1757465547.831:1296): pid=4198 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Sep 10 00:52:27.831000 audit[4198]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc1536a580 a2=3 a3=0 items=0 ppid=1 pid=4198 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:27.843880 kernel: audit: type=1300 audit(1757465547.831:1296): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc1536a580 a2=3 a3=0 items=0 ppid=1 pid=4198 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:27.843946 kernel: audit: type=1327 audit(1757465547.831:1296): proctitle=737368643A20636F7265205B707269765D Sep 10 00:52:27.831000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:52:27.845117 kernel: audit: type=1105 audit(1757465547.841:1297): pid=4198 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:27.841000 audit[4198]: USER_START pid=4198 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:27.849164 kernel: audit: type=1103 audit(1757465547.842:1298): pid=4200 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:27.842000 audit[4200]: CRED_ACQ pid=4200 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:27.914613 kubelet[1980]: E0910 00:52:27.914568 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:52:27.957995 sshd[4198]: pam_unix(sshd:session): session closed for user core Sep 10 00:52:27.965728 kernel: audit: type=1106 audit(1757465547.958:1299): pid=4198 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:27.958000 audit[4198]: USER_END pid=4198 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:27.963961 systemd[1]: sshd@9-10.0.0.141:22-10.0.0.1:35498.service: Deactivated successfully. Sep 10 00:52:27.964828 systemd[1]: session-10.scope: Deactivated successfully. Sep 10 00:52:27.958000 audit[4198]: CRED_DISP pid=4198 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:27.966466 systemd-logind[1191]: Session 10 logged out. Waiting for processes to exit. Sep 10 00:52:27.967761 systemd-logind[1191]: Removed session 10. Sep 10 00:52:27.963000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.141:22-10.0.0.1:35498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:27.971620 kernel: audit: type=1104 audit(1757465547.958:1300): pid=4198 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:28.088255 systemd-networkd[1027]: cali44ad042d96d: Link UP Sep 10 00:52:28.091879 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 10 00:52:28.091983 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali44ad042d96d: link becomes ready Sep 10 00:52:28.092124 systemd-networkd[1027]: cali44ad042d96d: Gained carrier Sep 10 00:52:28.105209 env[1206]: 2025-09-10 00:52:28.024 [INFO][4228] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0 coredns-7c65d6cfc9- kube-system 7d47c772-cd04-4790-a262-3fd6b9aebfa7 1030 0 2025-09-10 00:51:47 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-8nj94 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali44ad042d96d [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b" Namespace="kube-system" Pod="coredns-7c65d6cfc9-8nj94" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--8nj94-" Sep 10 00:52:28.105209 env[1206]: 2025-09-10 00:52:28.024 [INFO][4228] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b" Namespace="kube-system" Pod="coredns-7c65d6cfc9-8nj94" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0" Sep 10 00:52:28.105209 env[1206]: 2025-09-10 00:52:28.054 [INFO][4258] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b" HandleID="k8s-pod-network.0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b" Workload="localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0" Sep 10 00:52:28.105209 env[1206]: 2025-09-10 00:52:28.054 [INFO][4258] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b" HandleID="k8s-pod-network.0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b" Workload="localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0001a47b0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-8nj94", "timestamp":"2025-09-10 00:52:28.054522059 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 00:52:28.105209 env[1206]: 2025-09-10 00:52:28.054 [INFO][4258] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:28.105209 env[1206]: 2025-09-10 00:52:28.054 [INFO][4258] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:28.105209 env[1206]: 2025-09-10 00:52:28.054 [INFO][4258] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 00:52:28.105209 env[1206]: 2025-09-10 00:52:28.060 [INFO][4258] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b" host="localhost" Sep 10 00:52:28.105209 env[1206]: 2025-09-10 00:52:28.063 [INFO][4258] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 00:52:28.105209 env[1206]: 2025-09-10 00:52:28.067 [INFO][4258] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 00:52:28.105209 env[1206]: 2025-09-10 00:52:28.068 [INFO][4258] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 00:52:28.105209 env[1206]: 2025-09-10 00:52:28.070 [INFO][4258] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 00:52:28.105209 env[1206]: 2025-09-10 00:52:28.070 [INFO][4258] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b" host="localhost" Sep 10 00:52:28.105209 env[1206]: 2025-09-10 00:52:28.071 [INFO][4258] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b Sep 10 00:52:28.105209 env[1206]: 2025-09-10 00:52:28.077 [INFO][4258] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b" host="localhost" Sep 10 00:52:28.105209 env[1206]: 2025-09-10 00:52:28.082 [INFO][4258] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b" host="localhost" Sep 10 00:52:28.105209 env[1206]: 2025-09-10 00:52:28.082 [INFO][4258] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b" host="localhost" Sep 10 00:52:28.105209 env[1206]: 2025-09-10 00:52:28.082 [INFO][4258] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:28.105209 env[1206]: 2025-09-10 00:52:28.082 [INFO][4258] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b" HandleID="k8s-pod-network.0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b" Workload="localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0" Sep 10 00:52:28.105965 env[1206]: 2025-09-10 00:52:28.085 [INFO][4228] cni-plugin/k8s.go 418: Populated endpoint ContainerID="0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b" Namespace="kube-system" Pod="coredns-7c65d6cfc9-8nj94" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"7d47c772-cd04-4790-a262-3fd6b9aebfa7", ResourceVersion:"1030", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-8nj94", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali44ad042d96d", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:28.105965 env[1206]: 2025-09-10 00:52:28.085 [INFO][4228] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b" Namespace="kube-system" Pod="coredns-7c65d6cfc9-8nj94" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0" Sep 10 00:52:28.105965 env[1206]: 2025-09-10 00:52:28.085 [INFO][4228] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali44ad042d96d ContainerID="0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b" Namespace="kube-system" Pod="coredns-7c65d6cfc9-8nj94" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0" Sep 10 00:52:28.105965 env[1206]: 2025-09-10 00:52:28.091 [INFO][4228] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b" Namespace="kube-system" Pod="coredns-7c65d6cfc9-8nj94" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0" Sep 10 00:52:28.105965 env[1206]: 2025-09-10 00:52:28.092 [INFO][4228] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b" Namespace="kube-system" Pod="coredns-7c65d6cfc9-8nj94" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"7d47c772-cd04-4790-a262-3fd6b9aebfa7", ResourceVersion:"1030", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b", Pod:"coredns-7c65d6cfc9-8nj94", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali44ad042d96d", MAC:"f6:27:e2:34:fd:a1", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:28.105965 env[1206]: 2025-09-10 00:52:28.102 [INFO][4228] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b" Namespace="kube-system" Pod="coredns-7c65d6cfc9-8nj94" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0" Sep 10 00:52:28.115000 audit[4294]: NETFILTER_CFG table=filter:111 family=2 entries=48 op=nft_register_chain pid=4294 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:52:28.115000 audit[4294]: SYSCALL arch=c000003e syscall=46 success=yes exit=22720 a0=3 a1=7ffc79a6c870 a2=0 a3=7ffc79a6c85c items=0 ppid=3271 pid=4294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.115000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:52:28.122965 env[1206]: time="2025-09-10T00:52:28.122899839Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:52:28.122965 env[1206]: time="2025-09-10T00:52:28.122949198Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:52:28.122965 env[1206]: time="2025-09-10T00:52:28.122960158Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:52:28.123223 env[1206]: time="2025-09-10T00:52:28.123189096Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b pid=4302 runtime=io.containerd.runc.v2 Sep 10 00:52:28.141917 systemd[1]: Started cri-containerd-0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b.scope. Sep 10 00:52:28.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.160000 audit: BPF prog-id=196 op=LOAD Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4302 pid=4312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063633935646362326239376330366637616561663163623732386333 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4302 pid=4312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063633935646362326239376330366637616561663163623732386333 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit: BPF prog-id=197 op=LOAD Sep 10 00:52:28.161000 audit[4312]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000218360 items=0 ppid=4302 pid=4312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063633935646362326239376330366637616561663163623732386333 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit: BPF prog-id=198 op=LOAD Sep 10 00:52:28.161000 audit[4312]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002183a8 items=0 ppid=4302 pid=4312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063633935646362326239376330366637616561663163623732386333 Sep 10 00:52:28.161000 audit: BPF prog-id=198 op=UNLOAD Sep 10 00:52:28.161000 audit: BPF prog-id=197 op=UNLOAD Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.161000 audit: BPF prog-id=199 op=LOAD Sep 10 00:52:28.161000 audit[4312]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002187b8 items=0 ppid=4302 pid=4312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063633935646362326239376330366637616561663163623732386333 Sep 10 00:52:28.162953 systemd-resolved[1146]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 00:52:28.184615 env[1206]: time="2025-09-10T00:52:28.184086425Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-8nj94,Uid:7d47c772-cd04-4790-a262-3fd6b9aebfa7,Namespace:kube-system,Attempt:1,} returns sandbox id \"0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b\"" Sep 10 00:52:28.184803 kubelet[1980]: E0910 00:52:28.184779 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:52:28.186899 env[1206]: time="2025-09-10T00:52:28.186857297Z" level=info msg="CreateContainer within sandbox \"0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 10 00:52:28.355652 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie1646eb29a4: link becomes ready Sep 10 00:52:28.356861 systemd-networkd[1027]: calie1646eb29a4: Link UP Sep 10 00:52:28.357046 systemd-networkd[1027]: calie1646eb29a4: Gained carrier Sep 10 00:52:28.361320 env[1206]: time="2025-09-10T00:52:28.361279367Z" level=info msg="CreateContainer within sandbox \"0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"390c307d4eaa008c3b84dab971bab1400e004f96049b256b653e72648ced170b\"" Sep 10 00:52:28.362301 env[1206]: time="2025-09-10T00:52:28.362207919Z" level=info msg="StartContainer for \"390c307d4eaa008c3b84dab971bab1400e004f96049b256b653e72648ced170b\"" Sep 10 00:52:28.371024 env[1206]: 2025-09-10 00:52:28.026 [INFO][4210] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--zh8cr-eth0 csi-node-driver- calico-system dd1fed80-f428-462e-a294-863944798dcc 1029 0 2025-09-10 00:51:59 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:856c6b598f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-zh8cr eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calie1646eb29a4 [] [] }} ContainerID="ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e" Namespace="calico-system" Pod="csi-node-driver-zh8cr" WorkloadEndpoint="localhost-k8s-csi--node--driver--zh8cr-" Sep 10 00:52:28.371024 env[1206]: 2025-09-10 00:52:28.026 [INFO][4210] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e" Namespace="calico-system" Pod="csi-node-driver-zh8cr" WorkloadEndpoint="localhost-k8s-csi--node--driver--zh8cr-eth0" Sep 10 00:52:28.371024 env[1206]: 2025-09-10 00:52:28.068 [INFO][4260] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e" HandleID="k8s-pod-network.ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e" Workload="localhost-k8s-csi--node--driver--zh8cr-eth0" Sep 10 00:52:28.371024 env[1206]: 2025-09-10 00:52:28.069 [INFO][4260] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e" HandleID="k8s-pod-network.ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e" Workload="localhost-k8s-csi--node--driver--zh8cr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00034d590), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-zh8cr", "timestamp":"2025-09-10 00:52:28.068867346 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 00:52:28.371024 env[1206]: 2025-09-10 00:52:28.069 [INFO][4260] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:28.371024 env[1206]: 2025-09-10 00:52:28.082 [INFO][4260] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:28.371024 env[1206]: 2025-09-10 00:52:28.082 [INFO][4260] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 00:52:28.371024 env[1206]: 2025-09-10 00:52:28.160 [INFO][4260] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e" host="localhost" Sep 10 00:52:28.371024 env[1206]: 2025-09-10 00:52:28.167 [INFO][4260] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 00:52:28.371024 env[1206]: 2025-09-10 00:52:28.170 [INFO][4260] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 00:52:28.371024 env[1206]: 2025-09-10 00:52:28.172 [INFO][4260] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 00:52:28.371024 env[1206]: 2025-09-10 00:52:28.174 [INFO][4260] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 00:52:28.371024 env[1206]: 2025-09-10 00:52:28.174 [INFO][4260] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e" host="localhost" Sep 10 00:52:28.371024 env[1206]: 2025-09-10 00:52:28.175 [INFO][4260] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e Sep 10 00:52:28.371024 env[1206]: 2025-09-10 00:52:28.235 [INFO][4260] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e" host="localhost" Sep 10 00:52:28.371024 env[1206]: 2025-09-10 00:52:28.348 [INFO][4260] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e" host="localhost" Sep 10 00:52:28.371024 env[1206]: 2025-09-10 00:52:28.348 [INFO][4260] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e" host="localhost" Sep 10 00:52:28.371024 env[1206]: 2025-09-10 00:52:28.348 [INFO][4260] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:28.371024 env[1206]: 2025-09-10 00:52:28.348 [INFO][4260] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e" HandleID="k8s-pod-network.ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e" Workload="localhost-k8s-csi--node--driver--zh8cr-eth0" Sep 10 00:52:28.371651 env[1206]: 2025-09-10 00:52:28.352 [INFO][4210] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e" Namespace="calico-system" Pod="csi-node-driver-zh8cr" WorkloadEndpoint="localhost-k8s-csi--node--driver--zh8cr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--zh8cr-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"dd1fed80-f428-462e-a294-863944798dcc", ResourceVersion:"1029", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-zh8cr", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calie1646eb29a4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:28.371651 env[1206]: 2025-09-10 00:52:28.352 [INFO][4210] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e" Namespace="calico-system" Pod="csi-node-driver-zh8cr" WorkloadEndpoint="localhost-k8s-csi--node--driver--zh8cr-eth0" Sep 10 00:52:28.371651 env[1206]: 2025-09-10 00:52:28.352 [INFO][4210] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie1646eb29a4 ContainerID="ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e" Namespace="calico-system" Pod="csi-node-driver-zh8cr" WorkloadEndpoint="localhost-k8s-csi--node--driver--zh8cr-eth0" Sep 10 00:52:28.371651 env[1206]: 2025-09-10 00:52:28.356 [INFO][4210] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e" Namespace="calico-system" Pod="csi-node-driver-zh8cr" WorkloadEndpoint="localhost-k8s-csi--node--driver--zh8cr-eth0" Sep 10 00:52:28.371651 env[1206]: 2025-09-10 00:52:28.356 [INFO][4210] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e" Namespace="calico-system" Pod="csi-node-driver-zh8cr" WorkloadEndpoint="localhost-k8s-csi--node--driver--zh8cr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--zh8cr-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"dd1fed80-f428-462e-a294-863944798dcc", ResourceVersion:"1029", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e", Pod:"csi-node-driver-zh8cr", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calie1646eb29a4", MAC:"52:18:86:cf:dc:f1", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:28.371651 env[1206]: 2025-09-10 00:52:28.368 [INFO][4210] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e" Namespace="calico-system" Pod="csi-node-driver-zh8cr" WorkloadEndpoint="localhost-k8s-csi--node--driver--zh8cr-eth0" Sep 10 00:52:28.380000 audit[4352]: NETFILTER_CFG table=filter:112 family=2 entries=62 op=nft_register_chain pid=4352 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:52:28.380000 audit[4352]: SYSCALL arch=c000003e syscall=46 success=yes exit=28368 a0=3 a1=7fffd57a33b0 a2=0 a3=7fffd57a339c items=0 ppid=3271 pid=4352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.380000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:52:28.393799 env[1206]: time="2025-09-10T00:52:28.393727993Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:52:28.393799 env[1206]: time="2025-09-10T00:52:28.393800825Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:52:28.393988 env[1206]: time="2025-09-10T00:52:28.393824308Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:52:28.397036 env[1206]: time="2025-09-10T00:52:28.396968090Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e pid=4365 runtime=io.containerd.runc.v2 Sep 10 00:52:28.399200 systemd-networkd[1027]: cali57a657cc938: Link UP Sep 10 00:52:28.400663 systemd[1]: Started cri-containerd-390c307d4eaa008c3b84dab971bab1400e004f96049b256b653e72648ced170b.scope. Sep 10 00:52:28.401927 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali57a657cc938: link becomes ready Sep 10 00:52:28.401404 systemd-networkd[1027]: cali57a657cc938: Gained carrier Sep 10 00:52:28.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.413000 audit: BPF prog-id=200 op=LOAD Sep 10 00:52:28.413000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.413000 audit[4351]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4302 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339306333303764346561613030386333623834646162393731626162 Sep 10 00:52:28.413000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.413000 audit[4351]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=4302 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339306333303764346561613030386333623834646162393731626162 Sep 10 00:52:28.413000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.413000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.413000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.413000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.413000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.413000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.413000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.413000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.413000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.413000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.413000 audit: BPF prog-id=201 op=LOAD Sep 10 00:52:28.413000 audit[4351]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000373380 items=0 ppid=4302 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339306333303764346561613030386333623834646162393731626162 Sep 10 00:52:28.414000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.414000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.414000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.414000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.414000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.414000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.414000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.414000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.414000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.414000 audit: BPF prog-id=202 op=LOAD Sep 10 00:52:28.414000 audit[4351]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003733c8 items=0 ppid=4302 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339306333303764346561613030386333623834646162393731626162 Sep 10 00:52:28.414000 audit: BPF prog-id=202 op=UNLOAD Sep 10 00:52:28.414000 audit: BPF prog-id=201 op=UNLOAD Sep 10 00:52:28.414000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.414000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.414000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.414000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.414000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.414000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.414000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.414000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.414000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.418976 env[1206]: 2025-09-10 00:52:28.028 [INFO][4225] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--7988f88666--xfp8d-eth0 goldmane-7988f88666- calico-system 20f43dfc-1b32-4cd7-a1c0-40453f8c3425 1031 0 2025-09-10 00:51:57 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:7988f88666 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-7988f88666-xfp8d eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali57a657cc938 [] [] }} ContainerID="44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e" Namespace="calico-system" Pod="goldmane-7988f88666-xfp8d" WorkloadEndpoint="localhost-k8s-goldmane--7988f88666--xfp8d-" Sep 10 00:52:28.418976 env[1206]: 2025-09-10 00:52:28.029 [INFO][4225] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e" Namespace="calico-system" Pod="goldmane-7988f88666-xfp8d" WorkloadEndpoint="localhost-k8s-goldmane--7988f88666--xfp8d-eth0" Sep 10 00:52:28.418976 env[1206]: 2025-09-10 00:52:28.080 [INFO][4268] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e" HandleID="k8s-pod-network.44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e" Workload="localhost-k8s-goldmane--7988f88666--xfp8d-eth0" Sep 10 00:52:28.418976 env[1206]: 2025-09-10 00:52:28.080 [INFO][4268] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e" HandleID="k8s-pod-network.44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e" Workload="localhost-k8s-goldmane--7988f88666--xfp8d-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004ead0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-7988f88666-xfp8d", "timestamp":"2025-09-10 00:52:28.080175144 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 00:52:28.418976 env[1206]: 2025-09-10 00:52:28.080 [INFO][4268] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:28.418976 env[1206]: 2025-09-10 00:52:28.348 [INFO][4268] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:28.418976 env[1206]: 2025-09-10 00:52:28.348 [INFO][4268] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 00:52:28.418976 env[1206]: 2025-09-10 00:52:28.368 [INFO][4268] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e" host="localhost" Sep 10 00:52:28.418976 env[1206]: 2025-09-10 00:52:28.374 [INFO][4268] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 00:52:28.418976 env[1206]: 2025-09-10 00:52:28.378 [INFO][4268] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 00:52:28.418976 env[1206]: 2025-09-10 00:52:28.380 [INFO][4268] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 00:52:28.418976 env[1206]: 2025-09-10 00:52:28.381 [INFO][4268] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 00:52:28.418976 env[1206]: 2025-09-10 00:52:28.381 [INFO][4268] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e" host="localhost" Sep 10 00:52:28.418976 env[1206]: 2025-09-10 00:52:28.383 [INFO][4268] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e Sep 10 00:52:28.418976 env[1206]: 2025-09-10 00:52:28.386 [INFO][4268] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e" host="localhost" Sep 10 00:52:28.418976 env[1206]: 2025-09-10 00:52:28.392 [INFO][4268] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e" host="localhost" Sep 10 00:52:28.418976 env[1206]: 2025-09-10 00:52:28.392 [INFO][4268] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e" host="localhost" Sep 10 00:52:28.418976 env[1206]: 2025-09-10 00:52:28.392 [INFO][4268] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:28.418976 env[1206]: 2025-09-10 00:52:28.392 [INFO][4268] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e" HandleID="k8s-pod-network.44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e" Workload="localhost-k8s-goldmane--7988f88666--xfp8d-eth0" Sep 10 00:52:28.419529 env[1206]: 2025-09-10 00:52:28.394 [INFO][4225] cni-plugin/k8s.go 418: Populated endpoint ContainerID="44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e" Namespace="calico-system" Pod="goldmane-7988f88666-xfp8d" WorkloadEndpoint="localhost-k8s-goldmane--7988f88666--xfp8d-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--7988f88666--xfp8d-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"20f43dfc-1b32-4cd7-a1c0-40453f8c3425", ResourceVersion:"1031", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-7988f88666-xfp8d", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali57a657cc938", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:28.419529 env[1206]: 2025-09-10 00:52:28.394 [INFO][4225] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e" Namespace="calico-system" Pod="goldmane-7988f88666-xfp8d" WorkloadEndpoint="localhost-k8s-goldmane--7988f88666--xfp8d-eth0" Sep 10 00:52:28.419529 env[1206]: 2025-09-10 00:52:28.394 [INFO][4225] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali57a657cc938 ContainerID="44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e" Namespace="calico-system" Pod="goldmane-7988f88666-xfp8d" WorkloadEndpoint="localhost-k8s-goldmane--7988f88666--xfp8d-eth0" Sep 10 00:52:28.419529 env[1206]: 2025-09-10 00:52:28.405 [INFO][4225] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e" Namespace="calico-system" Pod="goldmane-7988f88666-xfp8d" WorkloadEndpoint="localhost-k8s-goldmane--7988f88666--xfp8d-eth0" Sep 10 00:52:28.419529 env[1206]: 2025-09-10 00:52:28.405 [INFO][4225] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e" Namespace="calico-system" Pod="goldmane-7988f88666-xfp8d" WorkloadEndpoint="localhost-k8s-goldmane--7988f88666--xfp8d-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--7988f88666--xfp8d-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"20f43dfc-1b32-4cd7-a1c0-40453f8c3425", ResourceVersion:"1031", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e", Pod:"goldmane-7988f88666-xfp8d", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali57a657cc938", MAC:"d2:1e:1c:34:2e:c5", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:28.419529 env[1206]: 2025-09-10 00:52:28.415 [INFO][4225] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e" Namespace="calico-system" Pod="goldmane-7988f88666-xfp8d" WorkloadEndpoint="localhost-k8s-goldmane--7988f88666--xfp8d-eth0" Sep 10 00:52:28.420386 systemd[1]: Started cri-containerd-ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e.scope. Sep 10 00:52:28.414000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.414000 audit: BPF prog-id=203 op=LOAD Sep 10 00:52:28.414000 audit[4351]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003737d8 items=0 ppid=4302 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339306333303764346561613030386333623834646162393731626162 Sep 10 00:52:28.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit: BPF prog-id=204 op=LOAD Sep 10 00:52:28.439000 audit[4382]: AVC avc: denied { bpf } for pid=4382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit[4382]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c7c48 a2=10 a3=1c items=0 ppid=4365 pid=4382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563343231653235666661623862613633326332656362316436323162 Sep 10 00:52:28.439000 audit[4382]: AVC avc: denied { perfmon } for pid=4382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit[4382]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c76b0 a2=3c a3=c items=0 ppid=4365 pid=4382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563343231653235666661623862613633326332656362316436323162 Sep 10 00:52:28.439000 audit[4382]: AVC avc: denied { bpf } for pid=4382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit[4382]: AVC avc: denied { bpf } for pid=4382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit[4382]: AVC avc: denied { bpf } for pid=4382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit[4382]: AVC avc: denied { perfmon } for pid=4382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit[4382]: AVC avc: denied { perfmon } for pid=4382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit[4382]: AVC avc: denied { perfmon } for pid=4382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit[4382]: AVC avc: denied { perfmon } for pid=4382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit[4382]: AVC avc: denied { perfmon } for pid=4382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit[4382]: AVC avc: denied { bpf } for pid=4382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit[4382]: AVC avc: denied { bpf } for pid=4382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit: BPF prog-id=205 op=LOAD Sep 10 00:52:28.439000 audit[4382]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c79d8 a2=78 a3=c000025130 items=0 ppid=4365 pid=4382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563343231653235666661623862613633326332656362316436323162 Sep 10 00:52:28.439000 audit[4382]: AVC avc: denied { bpf } for pid=4382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit[4382]: AVC avc: denied { bpf } for pid=4382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit[4382]: AVC avc: denied { perfmon } for pid=4382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit[4382]: AVC avc: denied { perfmon } for pid=4382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit[4382]: AVC avc: denied { perfmon } for pid=4382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit[4382]: AVC avc: denied { perfmon } for pid=4382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit[4382]: AVC avc: denied { perfmon } for pid=4382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit[4382]: AVC avc: denied { bpf } for pid=4382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit[4382]: AVC avc: denied { bpf } for pid=4382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.439000 audit: BPF prog-id=206 op=LOAD Sep 10 00:52:28.439000 audit[4382]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7770 a2=78 a3=c000025178 items=0 ppid=4365 pid=4382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563343231653235666661623862613633326332656362316436323162 Sep 10 00:52:28.440000 audit: BPF prog-id=206 op=UNLOAD Sep 10 00:52:28.440000 audit: BPF prog-id=205 op=UNLOAD Sep 10 00:52:28.440000 audit[4382]: AVC avc: denied { bpf } for pid=4382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.440000 audit[4382]: AVC avc: denied { bpf } for pid=4382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.440000 audit[4382]: AVC avc: denied { bpf } for pid=4382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.440000 audit[4382]: AVC avc: denied { perfmon } for pid=4382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.440000 audit[4382]: AVC avc: denied { perfmon } for pid=4382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.440000 audit[4382]: AVC avc: denied { perfmon } for pid=4382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.440000 audit[4382]: AVC avc: denied { perfmon } for pid=4382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.440000 audit[4382]: AVC avc: denied { perfmon } for pid=4382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.440000 audit[4382]: AVC avc: denied { bpf } for pid=4382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.440000 audit[4382]: AVC avc: denied { bpf } for pid=4382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.440000 audit: BPF prog-id=207 op=LOAD Sep 10 00:52:28.440000 audit[4382]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c7c30 a2=78 a3=c000025588 items=0 ppid=4365 pid=4382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.440000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563343231653235666661623862613633326332656362316436323162 Sep 10 00:52:28.439000 audit[4421]: NETFILTER_CFG table=filter:113 family=2 entries=64 op=nft_register_chain pid=4421 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:52:28.439000 audit[4421]: SYSCALL arch=c000003e syscall=46 success=yes exit=31104 a0=3 a1=7fffed32df40 a2=0 a3=7fffed32df2c items=0 ppid=3271 pid=4421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.439000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:52:28.441324 systemd-resolved[1146]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 00:52:28.622459 env[1206]: time="2025-09-10T00:52:28.448747043Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-zh8cr,Uid:dd1fed80-f428-462e-a294-863944798dcc,Namespace:calico-system,Attempt:1,} returns sandbox id \"ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e\"" Sep 10 00:52:28.633000 audit[4384]: AVC avc: denied { getattr } for pid=4384 comm="coredns" path="cgroup:[4026532706]" dev="nsfs" ino=4026532706 scontext=system_u:system_r:svirt_lxc_net_t:s0:c412,c673 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 10 00:52:28.633000 audit[4384]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c0005767f8 a2=c00057ad38 a3=0 items=0 ppid=4302 pid=4384 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c412,c673 key=(null) Sep 10 00:52:28.633000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 10 00:52:28.750556 env[1206]: time="2025-09-10T00:52:28.750455204Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:52:28.750556 env[1206]: time="2025-09-10T00:52:28.750506127Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:52:28.750556 env[1206]: time="2025-09-10T00:52:28.750515154Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:52:28.750762 env[1206]: time="2025-09-10T00:52:28.750677569Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e pid=4443 runtime=io.containerd.runc.v2 Sep 10 00:52:28.768341 systemd[1]: Started cri-containerd-44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e.scope. Sep 10 00:52:28.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.776000 audit: BPF prog-id=208 op=LOAD Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4443 pid=4454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.777000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434633734313235306465363236313139343532373233626238616561 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4443 pid=4454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.777000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434633734313235306465363236313139343532373233626238616561 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit: BPF prog-id=209 op=LOAD Sep 10 00:52:28.777000 audit[4454]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0002fabb0 items=0 ppid=4443 pid=4454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.777000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434633734313235306465363236313139343532373233626238616561 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit: BPF prog-id=210 op=LOAD Sep 10 00:52:28.777000 audit[4454]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0002fabf8 items=0 ppid=4443 pid=4454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.777000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434633734313235306465363236313139343532373233626238616561 Sep 10 00:52:28.777000 audit: BPF prog-id=210 op=UNLOAD Sep 10 00:52:28.777000 audit: BPF prog-id=209 op=UNLOAD Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { perfmon } for pid=4454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit[4454]: AVC avc: denied { bpf } for pid=4454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:28.777000 audit: BPF prog-id=211 op=LOAD Sep 10 00:52:28.777000 audit[4454]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0002fb008 items=0 ppid=4443 pid=4454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.777000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434633734313235306465363236313139343532373233626238616561 Sep 10 00:52:28.778819 systemd-resolved[1146]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 00:52:28.802736 env[1206]: time="2025-09-10T00:52:28.801721994Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-xfp8d,Uid:20f43dfc-1b32-4cd7-a1c0-40453f8c3425,Namespace:calico-system,Attempt:1,} returns sandbox id \"44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e\"" Sep 10 00:52:28.822735 env[1206]: time="2025-09-10T00:52:28.822702449Z" level=info msg="StartContainer for \"390c307d4eaa008c3b84dab971bab1400e004f96049b256b653e72648ced170b\" returns successfully" Sep 10 00:52:28.920465 kubelet[1980]: E0910 00:52:28.920432 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:52:28.940119 kubelet[1980]: I0910 00:52:28.939776 1980 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-8nj94" podStartSLOduration=41.939760511 podStartE2EDuration="41.939760511s" podCreationTimestamp="2025-09-10 00:51:47 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-10 00:52:28.92850074 +0000 UTC m=+48.219664002" watchObservedRunningTime="2025-09-10 00:52:28.939760511 +0000 UTC m=+48.230923773" Sep 10 00:52:28.938000 audit[4475]: NETFILTER_CFG table=filter:114 family=2 entries=12 op=nft_register_rule pid=4475 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:28.938000 audit[4475]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffc2a375dd0 a2=0 a3=7ffc2a375dbc items=0 ppid=2086 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.938000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:28.944000 audit[4475]: NETFILTER_CFG table=nat:115 family=2 entries=46 op=nft_register_rule pid=4475 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:28.944000 audit[4475]: SYSCALL arch=c000003e syscall=46 success=yes exit=14964 a0=3 a1=7ffc2a375dd0 a2=0 a3=7ffc2a375dbc items=0 ppid=2086 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.944000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:28.955000 audit[4477]: NETFILTER_CFG table=filter:116 family=2 entries=12 op=nft_register_rule pid=4477 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:28.955000 audit[4477]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffd1b7d3760 a2=0 a3=7ffd1b7d374c items=0 ppid=2086 pid=4477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.955000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:28.966000 audit[4477]: NETFILTER_CFG table=nat:117 family=2 entries=58 op=nft_register_chain pid=4477 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:28.966000 audit[4477]: SYSCALL arch=c000003e syscall=46 success=yes exit=20628 a0=3 a1=7ffd1b7d3760 a2=0 a3=7ffd1b7d374c items=0 ppid=2086 pid=4477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:28.966000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:29.168467 env[1206]: time="2025-09-10T00:52:29.168413361Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:29.170211 env[1206]: time="2025-09-10T00:52:29.170178265Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:df191a54fb79de3c693f8b1b864a1bd3bd14f63b3fff9d5fa4869c471ce3cd37,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:29.171716 env[1206]: time="2025-09-10T00:52:29.171613046Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:29.173066 env[1206]: time="2025-09-10T00:52:29.173018815Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:27c4187717f08f0a5727019d8beb7597665eb47e69eaa1d7d091a7e28913e577,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:29.173371 env[1206]: time="2025-09-10T00:52:29.173337808Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\" returns image reference \"sha256:df191a54fb79de3c693f8b1b864a1bd3bd14f63b3fff9d5fa4869c471ce3cd37\"" Sep 10 00:52:29.174626 env[1206]: time="2025-09-10T00:52:29.174303422Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 10 00:52:29.184500 env[1206]: time="2025-09-10T00:52:29.184464078Z" level=info msg="CreateContainer within sandbox \"ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Sep 10 00:52:29.197879 env[1206]: time="2025-09-10T00:52:29.197830311Z" level=info msg="CreateContainer within sandbox \"ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"7360bf363999d5f3a9b8efabe796e59720f9a90a0ea80b6aa8797cd691420c89\"" Sep 10 00:52:29.198339 env[1206]: time="2025-09-10T00:52:29.198273870Z" level=info msg="StartContainer for \"7360bf363999d5f3a9b8efabe796e59720f9a90a0ea80b6aa8797cd691420c89\"" Sep 10 00:52:29.212671 systemd[1]: Started cri-containerd-7360bf363999d5f3a9b8efabe796e59720f9a90a0ea80b6aa8797cd691420c89.scope. Sep 10 00:52:29.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.223000 audit: BPF prog-id=212 op=LOAD Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3777 pid=4488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:29.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733363062663336333939396435663361396238656661626537393665 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3777 pid=4488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:29.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733363062663336333939396435663361396238656661626537393665 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit: BPF prog-id=213 op=LOAD Sep 10 00:52:29.224000 audit[4488]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00027bdc0 items=0 ppid=3777 pid=4488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:29.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733363062663336333939396435663361396238656661626537393665 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit: BPF prog-id=214 op=LOAD Sep 10 00:52:29.224000 audit[4488]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00027be08 items=0 ppid=3777 pid=4488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:29.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733363062663336333939396435663361396238656661626537393665 Sep 10 00:52:29.224000 audit: BPF prog-id=214 op=UNLOAD Sep 10 00:52:29.224000 audit: BPF prog-id=213 op=UNLOAD Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { perfmon } for pid=4488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit[4488]: AVC avc: denied { bpf } for pid=4488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:29.224000 audit: BPF prog-id=215 op=LOAD Sep 10 00:52:29.224000 audit[4488]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003dc218 items=0 ppid=3777 pid=4488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:29.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733363062663336333939396435663361396238656661626537393665 Sep 10 00:52:29.249489 env[1206]: time="2025-09-10T00:52:29.249444609Z" level=info msg="StartContainer for \"7360bf363999d5f3a9b8efabe796e59720f9a90a0ea80b6aa8797cd691420c89\" returns successfully" Sep 10 00:52:29.752807 systemd-networkd[1027]: cali44ad042d96d: Gained IPv6LL Sep 10 00:52:29.924706 kubelet[1980]: E0910 00:52:29.924677 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:52:30.265755 systemd-networkd[1027]: calie1646eb29a4: Gained IPv6LL Sep 10 00:52:30.328757 systemd-networkd[1027]: cali57a657cc938: Gained IPv6LL Sep 10 00:52:30.926736 kubelet[1980]: E0910 00:52:30.926470 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:52:30.943970 systemd[1]: run-containerd-runc-k8s.io-7360bf363999d5f3a9b8efabe796e59720f9a90a0ea80b6aa8797cd691420c89-runc.SxDcGR.mount: Deactivated successfully. Sep 10 00:52:30.983949 kubelet[1980]: I0910 00:52:30.983103 1980 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-568989f48d-8qw66" podStartSLOduration=28.218578513 podStartE2EDuration="31.983086888s" podCreationTimestamp="2025-09-10 00:51:59 +0000 UTC" firstStartedPulling="2025-09-10 00:52:25.40961047 +0000 UTC m=+44.700773732" lastFinishedPulling="2025-09-10 00:52:29.174118855 +0000 UTC m=+48.465282107" observedRunningTime="2025-09-10 00:52:29.933122451 +0000 UTC m=+49.224285713" watchObservedRunningTime="2025-09-10 00:52:30.983086888 +0000 UTC m=+50.274250150" Sep 10 00:52:32.958998 systemd[1]: Started sshd@10-10.0.0.141:22-10.0.0.1:44736.service. Sep 10 00:52:32.957000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.141:22-10.0.0.1:44736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:32.959944 kernel: kauditd_printk_skb: 310 callbacks suppressed Sep 10 00:52:32.959986 kernel: audit: type=1130 audit(1757465552.957:1400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.141:22-10.0.0.1:44736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:33.155000 audit[4558]: USER_ACCT pid=4558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.156967 sshd[4558]: Accepted publickey for core from 10.0.0.1 port 44736 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:52:33.159352 sshd[4558]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:52:33.157000 audit[4558]: CRED_ACQ pid=4558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.164043 kernel: audit: type=1101 audit(1757465553.155:1401): pid=4558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.164097 kernel: audit: type=1103 audit(1757465553.157:1402): pid=4558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.164119 kernel: audit: type=1006 audit(1757465553.157:1403): pid=4558 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Sep 10 00:52:33.163662 systemd-logind[1191]: New session 11 of user core. Sep 10 00:52:33.164428 systemd[1]: Started session-11.scope. Sep 10 00:52:33.166136 kernel: audit: type=1300 audit(1757465553.157:1403): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff8055e230 a2=3 a3=0 items=0 ppid=1 pid=4558 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:33.157000 audit[4558]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff8055e230 a2=3 a3=0 items=0 ppid=1 pid=4558 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:33.169841 kernel: audit: type=1327 audit(1757465553.157:1403): proctitle=737368643A20636F7265205B707269765D Sep 10 00:52:33.157000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:52:33.167000 audit[4558]: USER_START pid=4558 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.175099 kernel: audit: type=1105 audit(1757465553.167:1404): pid=4558 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.175154 kernel: audit: type=1103 audit(1757465553.168:1405): pid=4560 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.168000 audit[4560]: CRED_ACQ pid=4560 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.398386 sshd[4558]: pam_unix(sshd:session): session closed for user core Sep 10 00:52:33.398000 audit[4558]: USER_END pid=4558 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.401733 systemd[1]: sshd@10-10.0.0.141:22-10.0.0.1:44736.service: Deactivated successfully. Sep 10 00:52:33.402284 systemd[1]: session-11.scope: Deactivated successfully. Sep 10 00:52:33.402962 systemd-logind[1191]: Session 11 logged out. Waiting for processes to exit. Sep 10 00:52:33.398000 audit[4558]: CRED_DISP pid=4558 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.405975 systemd[1]: Started sshd@11-10.0.0.141:22-10.0.0.1:44750.service. Sep 10 00:52:33.406952 systemd-logind[1191]: Removed session 11. Sep 10 00:52:33.407725 kernel: audit: type=1106 audit(1757465553.398:1406): pid=4558 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.407763 kernel: audit: type=1104 audit(1757465553.398:1407): pid=4558 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.141:22-10.0.0.1:44736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:33.404000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.141:22-10.0.0.1:44750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:33.436000 audit[4574]: USER_ACCT pid=4574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.437882 sshd[4574]: Accepted publickey for core from 10.0.0.1 port 44750 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:52:33.437000 audit[4574]: CRED_ACQ pid=4574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.437000 audit[4574]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff3e382720 a2=3 a3=0 items=0 ppid=1 pid=4574 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:33.437000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:52:33.439264 sshd[4574]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:52:33.442415 systemd-logind[1191]: New session 12 of user core. Sep 10 00:52:33.443142 systemd[1]: Started session-12.scope. Sep 10 00:52:33.444000 audit[4574]: USER_START pid=4574 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.445000 audit[4576]: CRED_ACQ pid=4576 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.648686 sshd[4574]: pam_unix(sshd:session): session closed for user core Sep 10 00:52:33.650000 audit[4574]: USER_END pid=4574 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.652135 systemd[1]: Started sshd@12-10.0.0.141:22-10.0.0.1:44766.service. Sep 10 00:52:33.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.141:22-10.0.0.1:44766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:33.651000 audit[4574]: CRED_DISP pid=4574 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.655416 systemd[1]: sshd@11-10.0.0.141:22-10.0.0.1:44750.service: Deactivated successfully. Sep 10 00:52:33.653000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.141:22-10.0.0.1:44750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:33.656026 systemd[1]: session-12.scope: Deactivated successfully. Sep 10 00:52:33.656668 systemd-logind[1191]: Session 12 logged out. Waiting for processes to exit. Sep 10 00:52:33.657378 systemd-logind[1191]: Removed session 12. Sep 10 00:52:33.670337 env[1206]: time="2025-09-10T00:52:33.670287726Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:33.677192 env[1206]: time="2025-09-10T00:52:33.676695915Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:33.679724 env[1206]: time="2025-09-10T00:52:33.679643602Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:33.681159 env[1206]: time="2025-09-10T00:52:33.681125380Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:33.682368 env[1206]: time="2025-09-10T00:52:33.682341350Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a\"" Sep 10 00:52:33.683520 env[1206]: time="2025-09-10T00:52:33.683496196Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 10 00:52:33.684665 env[1206]: time="2025-09-10T00:52:33.684639301Z" level=info msg="CreateContainer within sandbox \"ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 10 00:52:33.689000 audit[4586]: USER_ACCT pid=4586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.690778 sshd[4586]: Accepted publickey for core from 10.0.0.1 port 44766 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:52:33.690000 audit[4586]: CRED_ACQ pid=4586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.690000 audit[4586]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7799a970 a2=3 a3=0 items=0 ppid=1 pid=4586 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:33.690000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:52:33.692020 sshd[4586]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:52:33.699577 systemd-logind[1191]: New session 13 of user core. Sep 10 00:52:33.700079 systemd[1]: Started session-13.scope. Sep 10 00:52:33.703031 env[1206]: time="2025-09-10T00:52:33.702978878Z" level=info msg="CreateContainer within sandbox \"ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"12b915be57fadff90ed121e63f24225b9cf561f3842b3e6567a126ac2f660114\"" Sep 10 00:52:33.703648 env[1206]: time="2025-09-10T00:52:33.703629335Z" level=info msg="StartContainer for \"12b915be57fadff90ed121e63f24225b9cf561f3842b3e6567a126ac2f660114\"" Sep 10 00:52:33.703000 audit[4586]: USER_START pid=4586 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.705000 audit[4594]: CRED_ACQ pid=4594 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.721987 systemd[1]: run-containerd-runc-k8s.io-12b915be57fadff90ed121e63f24225b9cf561f3842b3e6567a126ac2f660114-runc.X7PonD.mount: Deactivated successfully. Sep 10 00:52:33.727333 systemd[1]: Started cri-containerd-12b915be57fadff90ed121e63f24225b9cf561f3842b3e6567a126ac2f660114.scope. Sep 10 00:52:33.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit: BPF prog-id=216 op=LOAD Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4025 pid=4598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:33.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132623931356265353766616466663930656431323165363366323432 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4025 pid=4598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:33.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132623931356265353766616466663930656431323165363366323432 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit: BPF prog-id=217 op=LOAD Sep 10 00:52:33.737000 audit[4598]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000360350 items=0 ppid=4025 pid=4598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:33.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132623931356265353766616466663930656431323165363366323432 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit: BPF prog-id=218 op=LOAD Sep 10 00:52:33.737000 audit[4598]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000360398 items=0 ppid=4025 pid=4598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:33.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132623931356265353766616466663930656431323165363366323432 Sep 10 00:52:33.737000 audit: BPF prog-id=218 op=UNLOAD Sep 10 00:52:33.737000 audit: BPF prog-id=217 op=UNLOAD Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { perfmon } for pid=4598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit[4598]: AVC avc: denied { bpf } for pid=4598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:33.737000 audit: BPF prog-id=219 op=LOAD Sep 10 00:52:33.737000 audit[4598]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003607a8 items=0 ppid=4025 pid=4598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:33.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132623931356265353766616466663930656431323165363366323432 Sep 10 00:52:33.857981 env[1206]: time="2025-09-10T00:52:33.857926138Z" level=info msg="StartContainer for \"12b915be57fadff90ed121e63f24225b9cf561f3842b3e6567a126ac2f660114\" returns successfully" Sep 10 00:52:33.905197 sshd[4586]: pam_unix(sshd:session): session closed for user core Sep 10 00:52:33.904000 audit[4586]: USER_END pid=4586 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.904000 audit[4586]: CRED_DISP pid=4586 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:33.909191 systemd[1]: sshd@12-10.0.0.141:22-10.0.0.1:44766.service: Deactivated successfully. Sep 10 00:52:33.907000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.141:22-10.0.0.1:44766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:33.909888 systemd[1]: session-13.scope: Deactivated successfully. Sep 10 00:52:33.910707 systemd-logind[1191]: Session 13 logged out. Waiting for processes to exit. Sep 10 00:52:33.911375 systemd-logind[1191]: Removed session 13. Sep 10 00:52:33.952000 audit[4641]: NETFILTER_CFG table=filter:118 family=2 entries=12 op=nft_register_rule pid=4641 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:33.952000 audit[4641]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffd0d4743d0 a2=0 a3=7ffd0d4743bc items=0 ppid=2086 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:33.952000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:33.958000 audit[4641]: NETFILTER_CFG table=nat:119 family=2 entries=22 op=nft_register_rule pid=4641 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:33.958000 audit[4641]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffd0d4743d0 a2=0 a3=7ffd0d4743bc items=0 ppid=2086 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:33.958000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:34.034810 env[1206]: time="2025-09-10T00:52:34.034773108Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:34.036941 env[1206]: time="2025-09-10T00:52:34.036920870Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:34.038660 env[1206]: time="2025-09-10T00:52:34.038628760Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:34.040176 env[1206]: time="2025-09-10T00:52:34.040155275Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:34.040525 env[1206]: time="2025-09-10T00:52:34.040503888Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a\"" Sep 10 00:52:34.041532 env[1206]: time="2025-09-10T00:52:34.041513661Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\"" Sep 10 00:52:34.042407 env[1206]: time="2025-09-10T00:52:34.042384667Z" level=info msg="CreateContainer within sandbox \"14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 10 00:52:34.058589 env[1206]: time="2025-09-10T00:52:34.058534825Z" level=info msg="CreateContainer within sandbox \"14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"ce5587e7d8b4236e07eced59a3de32de15af35e28adfb2d4be056e65154bf2a9\"" Sep 10 00:52:34.059117 env[1206]: time="2025-09-10T00:52:34.059076374Z" level=info msg="StartContainer for \"ce5587e7d8b4236e07eced59a3de32de15af35e28adfb2d4be056e65154bf2a9\"" Sep 10 00:52:34.072382 systemd[1]: Started cri-containerd-ce5587e7d8b4236e07eced59a3de32de15af35e28adfb2d4be056e65154bf2a9.scope. Sep 10 00:52:34.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.091000 audit: BPF prog-id=220 op=LOAD Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { bpf } for pid=4649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4077 pid=4649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:34.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365353538376537643862343233366530376563656435396133646533 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { perfmon } for pid=4649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4077 pid=4649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:34.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365353538376537643862343233366530376563656435396133646533 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { bpf } for pid=4649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { bpf } for pid=4649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { bpf } for pid=4649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { perfmon } for pid=4649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { perfmon } for pid=4649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { perfmon } for pid=4649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { perfmon } for pid=4649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { perfmon } for pid=4649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { bpf } for pid=4649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { bpf } for pid=4649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit: BPF prog-id=221 op=LOAD Sep 10 00:52:34.092000 audit[4649]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001d5c50 items=0 ppid=4077 pid=4649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:34.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365353538376537643862343233366530376563656435396133646533 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { bpf } for pid=4649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { bpf } for pid=4649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { perfmon } for pid=4649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { perfmon } for pid=4649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { perfmon } for pid=4649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { perfmon } for pid=4649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { perfmon } for pid=4649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { bpf } for pid=4649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { bpf } for pid=4649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit: BPF prog-id=222 op=LOAD Sep 10 00:52:34.092000 audit[4649]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001d5c98 items=0 ppid=4077 pid=4649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:34.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365353538376537643862343233366530376563656435396133646533 Sep 10 00:52:34.092000 audit: BPF prog-id=222 op=UNLOAD Sep 10 00:52:34.092000 audit: BPF prog-id=221 op=UNLOAD Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { bpf } for pid=4649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { bpf } for pid=4649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { bpf } for pid=4649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { perfmon } for pid=4649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { perfmon } for pid=4649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { perfmon } for pid=4649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { perfmon } for pid=4649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { perfmon } for pid=4649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { bpf } for pid=4649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit[4649]: AVC avc: denied { bpf } for pid=4649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:34.092000 audit: BPF prog-id=223 op=LOAD Sep 10 00:52:34.092000 audit[4649]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00039e0a8 items=0 ppid=4077 pid=4649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:34.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365353538376537643862343233366530376563656435396133646533 Sep 10 00:52:34.122571 env[1206]: time="2025-09-10T00:52:34.122516536Z" level=info msg="StartContainer for \"ce5587e7d8b4236e07eced59a3de32de15af35e28adfb2d4be056e65154bf2a9\" returns successfully" Sep 10 00:52:34.938884 kubelet[1980]: I0910 00:52:34.938831 1980 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 10 00:52:34.949026 kubelet[1980]: I0910 00:52:34.948958 1980 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-74fc88dd94-pj9t2" podStartSLOduration=32.05210541 podStartE2EDuration="39.948942405s" podCreationTimestamp="2025-09-10 00:51:55 +0000 UTC" firstStartedPulling="2025-09-10 00:52:26.144463883 +0000 UTC m=+45.435627145" lastFinishedPulling="2025-09-10 00:52:34.041300878 +0000 UTC m=+53.332464140" observedRunningTime="2025-09-10 00:52:34.948729552 +0000 UTC m=+54.239892814" watchObservedRunningTime="2025-09-10 00:52:34.948942405 +0000 UTC m=+54.240105668" Sep 10 00:52:34.949214 kubelet[1980]: I0910 00:52:34.949052 1980 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-74fc88dd94-cwd5j" podStartSLOduration=32.305969377 podStartE2EDuration="39.94904755s" podCreationTimestamp="2025-09-10 00:51:55 +0000 UTC" firstStartedPulling="2025-09-10 00:52:26.040161701 +0000 UTC m=+45.331324963" lastFinishedPulling="2025-09-10 00:52:33.683239874 +0000 UTC m=+52.974403136" observedRunningTime="2025-09-10 00:52:33.944584214 +0000 UTC m=+53.235747476" watchObservedRunningTime="2025-09-10 00:52:34.94904755 +0000 UTC m=+54.240210802" Sep 10 00:52:34.958000 audit[4684]: NETFILTER_CFG table=filter:120 family=2 entries=12 op=nft_register_rule pid=4684 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:34.958000 audit[4684]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffeb65693d0 a2=0 a3=7ffeb65693bc items=0 ppid=2086 pid=4684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:34.958000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:34.964000 audit[4684]: NETFILTER_CFG table=nat:121 family=2 entries=22 op=nft_register_rule pid=4684 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:34.964000 audit[4684]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffeb65693d0 a2=0 a3=7ffeb65693bc items=0 ppid=2086 pid=4684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:34.964000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:35.384000 audit[4608]: AVC avc: denied { watch } for pid=4608 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_00_52_10.3443924322/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c666 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c61,c666 tclass=file permissive=0 Sep 10 00:52:35.384000 audit[4608]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0026d0840 a2=fc6 a3=0 items=0 ppid=4025 pid=4608 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c666 key=(null) Sep 10 00:52:35.384000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 00:52:35.480000 audit[4660]: AVC avc: denied { watch } for pid=4660 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_00_52_10.3009330705/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c803,c836 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c803,c836 tclass=file permissive=0 Sep 10 00:52:35.480000 audit[4660]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001001920 a2=fc6 a3=0 items=0 ppid=4077 pid=4660 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c803,c836 key=(null) Sep 10 00:52:35.480000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 00:52:35.511000 audit[4687]: NETFILTER_CFG table=filter:122 family=2 entries=11 op=nft_register_rule pid=4687 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:35.511000 audit[4687]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffe9e5121c0 a2=0 a3=7ffe9e5121ac items=0 ppid=2086 pid=4687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:35.511000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:35.517000 audit[4687]: NETFILTER_CFG table=nat:123 family=2 entries=29 op=nft_register_chain pid=4687 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:35.517000 audit[4687]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffe9e5121c0 a2=0 a3=7ffe9e5121ac items=0 ppid=2086 pid=4687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:35.517000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:35.555888 env[1206]: time="2025-09-10T00:52:35.555838162Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:35.557965 env[1206]: time="2025-09-10T00:52:35.557917884Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:666f4e02e75c30547109a06ed75b415a990a970811173aa741379cfaac4d9dd7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:35.559526 env[1206]: time="2025-09-10T00:52:35.559480070Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:35.564343 env[1206]: time="2025-09-10T00:52:35.564294314Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\" returns image reference \"sha256:666f4e02e75c30547109a06ed75b415a990a970811173aa741379cfaac4d9dd7\"" Sep 10 00:52:35.564781 env[1206]: time="2025-09-10T00:52:35.564741221Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:f22c88018d8b58c4ef0052f594b216a13bd6852166ac131a538c5ab2fba23bb2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:35.565353 env[1206]: time="2025-09-10T00:52:35.565322174Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\"" Sep 10 00:52:35.566723 env[1206]: time="2025-09-10T00:52:35.566692215Z" level=info msg="CreateContainer within sandbox \"ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Sep 10 00:52:35.582700 env[1206]: time="2025-09-10T00:52:35.582658303Z" level=info msg="CreateContainer within sandbox \"ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"9216f97f257e4de750ab2939b361aabdce57a69a39f913d4c8e71c81784c8c5d\"" Sep 10 00:52:35.584072 env[1206]: time="2025-09-10T00:52:35.584032503Z" level=info msg="StartContainer for \"9216f97f257e4de750ab2939b361aabdce57a69a39f913d4c8e71c81784c8c5d\"" Sep 10 00:52:35.605715 systemd[1]: Started cri-containerd-9216f97f257e4de750ab2939b361aabdce57a69a39f913d4c8e71c81784c8c5d.scope. Sep 10 00:52:35.616000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.616000 audit[4695]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7fa7bd92aa88 items=0 ppid=4365 pid=4695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:35.616000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932313666393766323537653464653735306162323933396233363161 Sep 10 00:52:35.616000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.616000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.616000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.616000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.616000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.616000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.616000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.616000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.616000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.616000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.616000 audit: BPF prog-id=224 op=LOAD Sep 10 00:52:35.616000 audit[4695]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c00022c918 items=0 ppid=4365 pid=4695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:35.616000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932313666393766323537653464653735306162323933396233363161 Sep 10 00:52:35.617000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.617000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.617000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.617000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.617000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.617000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.617000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.617000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.617000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.617000 audit: BPF prog-id=225 op=LOAD Sep 10 00:52:35.617000 audit[4695]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c00022c968 items=0 ppid=4365 pid=4695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:35.617000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932313666393766323537653464653735306162323933396233363161 Sep 10 00:52:35.617000 audit: BPF prog-id=225 op=UNLOAD Sep 10 00:52:35.617000 audit: BPF prog-id=224 op=UNLOAD Sep 10 00:52:35.617000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.617000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.617000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.617000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.617000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.617000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.617000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.617000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.617000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.617000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:35.617000 audit: BPF prog-id=226 op=LOAD Sep 10 00:52:35.617000 audit[4695]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c00022c9f8 items=0 ppid=4365 pid=4695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:35.617000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932313666393766323537653464653735306162323933396233363161 Sep 10 00:52:35.629772 env[1206]: time="2025-09-10T00:52:35.629729802Z" level=info msg="StartContainer for \"9216f97f257e4de750ab2939b361aabdce57a69a39f913d4c8e71c81784c8c5d\" returns successfully" Sep 10 00:52:38.002000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:52:38.005558 kernel: kauditd_printk_skb: 204 callbacks suppressed Sep 10 00:52:38.005625 kernel: audit: type=1400 audit(1757465558.002:1478): avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:52:38.002000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:52:38.013718 kernel: audit: type=1400 audit(1757465558.002:1477): avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:52:38.013759 kernel: audit: type=1300 audit(1757465558.002:1477): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0014eb4e0 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:52:38.002000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0014eb4e0 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:52:38.002000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0019d79b0 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:52:38.024765 kernel: audit: type=1300 audit(1757465558.002:1478): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0019d79b0 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:52:38.024799 kernel: audit: type=1327 audit(1757465558.002:1477): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:52:38.002000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:52:38.002000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:52:38.033871 kernel: audit: type=1327 audit(1757465558.002:1478): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:52:38.110000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:52:38.110000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:52:38.121246 kernel: audit: type=1400 audit(1757465558.110:1480): avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:52:38.121299 kernel: audit: type=1400 audit(1757465558.110:1479): avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:52:38.121320 kernel: audit: type=1300 audit(1757465558.110:1479): arch=c000003e syscall=254 success=no exit=-13 a0=7f a1=c003fe4ca0 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 key=(null) Sep 10 00:52:38.110000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7f a1=c003fe4ca0 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 key=(null) Sep 10 00:52:38.110000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7e a1=c00356a720 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 key=(null) Sep 10 00:52:38.132113 kernel: audit: type=1300 audit(1757465558.110:1480): arch=c000003e syscall=254 success=no exit=-13 a0=7e a1=c00356a720 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 key=(null) Sep 10 00:52:38.110000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 10 00:52:38.110000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 10 00:52:38.110000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:52:38.110000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7e a1=c00356a9c0 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 key=(null) Sep 10 00:52:38.110000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 10 00:52:38.111000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:52:38.111000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7e a1=c003fe4e60 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 key=(null) Sep 10 00:52:38.111000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 10 00:52:38.113000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:52:38.113000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7e a1=c0063db440 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 key=(null) Sep 10 00:52:38.113000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 10 00:52:38.120000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7306 scontext=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:52:38.120000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7f a1=c00460bb90 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c386,c790 key=(null) Sep 10 00:52:38.120000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Sep 10 00:52:38.908000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.141:22-10.0.0.1:44774 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:38.909630 systemd[1]: Started sshd@13-10.0.0.141:22-10.0.0.1:44774.service. Sep 10 00:52:39.050000 audit[4730]: USER_ACCT pid=4730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:39.052883 sshd[4730]: Accepted publickey for core from 10.0.0.1 port 44774 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:52:39.051000 audit[4730]: CRED_ACQ pid=4730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:39.052000 audit[4730]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8973ff50 a2=3 a3=0 items=0 ppid=1 pid=4730 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:39.052000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:52:39.054147 sshd[4730]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:52:39.059321 systemd-logind[1191]: New session 14 of user core. Sep 10 00:52:39.060509 systemd[1]: Started session-14.scope. Sep 10 00:52:39.066000 audit[4730]: USER_START pid=4730 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:39.068000 audit[4732]: CRED_ACQ pid=4732 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:39.330772 sshd[4730]: pam_unix(sshd:session): session closed for user core Sep 10 00:52:39.330000 audit[4730]: USER_END pid=4730 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:39.330000 audit[4730]: CRED_DISP pid=4730 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:39.333055 systemd[1]: sshd@13-10.0.0.141:22-10.0.0.1:44774.service: Deactivated successfully. Sep 10 00:52:39.331000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.141:22-10.0.0.1:44774 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:39.333829 systemd[1]: session-14.scope: Deactivated successfully. Sep 10 00:52:39.334368 systemd-logind[1191]: Session 14 logged out. Waiting for processes to exit. Sep 10 00:52:39.335042 systemd-logind[1191]: Removed session 14. Sep 10 00:52:39.708012 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1985755175.mount: Deactivated successfully. Sep 10 00:52:40.625026 env[1206]: time="2025-09-10T00:52:40.624985090Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:40.627236 env[1206]: time="2025-09-10T00:52:40.627201937Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a7d029fd8f6be94c26af980675c1650818e1e6e19dbd2f8c13e6e61963f021e8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:40.628968 env[1206]: time="2025-09-10T00:52:40.628930316Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:40.630637 env[1206]: time="2025-09-10T00:52:40.630618549Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:46297703ab3739331a00a58f0d6a5498c8d3b6523ad947eed68592ee0f3e79f0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:40.631095 env[1206]: time="2025-09-10T00:52:40.631064239Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\" returns image reference \"sha256:a7d029fd8f6be94c26af980675c1650818e1e6e19dbd2f8c13e6e61963f021e8\"" Sep 10 00:52:40.633979 env[1206]: time="2025-09-10T00:52:40.633958157Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\"" Sep 10 00:52:40.635285 env[1206]: time="2025-09-10T00:52:40.635260051Z" level=info msg="CreateContainer within sandbox \"44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Sep 10 00:52:40.650217 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1067066666.mount: Deactivated successfully. Sep 10 00:52:40.654502 env[1206]: time="2025-09-10T00:52:40.654459857Z" level=info msg="CreateContainer within sandbox \"44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"2320ce9800eb37557b4274400e05fefdcc6e7613653557ef3703e9a1e3b45887\"" Sep 10 00:52:40.654999 env[1206]: time="2025-09-10T00:52:40.654974816Z" level=info msg="StartContainer for \"2320ce9800eb37557b4274400e05fefdcc6e7613653557ef3703e9a1e3b45887\"" Sep 10 00:52:40.672224 systemd[1]: Started cri-containerd-2320ce9800eb37557b4274400e05fefdcc6e7613653557ef3703e9a1e3b45887.scope. Sep 10 00:52:40.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.681000 audit: BPF prog-id=227 op=LOAD Sep 10 00:52:40.681000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.681000 audit[4769]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4443 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:40.681000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233323063653938303065623337353537623432373434303065303566 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=4443 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:40.682000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233323063653938303065623337353537623432373434303065303566 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit: BPF prog-id=228 op=LOAD Sep 10 00:52:40.682000 audit[4769]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0000abbd0 items=0 ppid=4443 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:40.682000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233323063653938303065623337353537623432373434303065303566 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit: BPF prog-id=229 op=LOAD Sep 10 00:52:40.682000 audit[4769]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000abc18 items=0 ppid=4443 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:40.682000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233323063653938303065623337353537623432373434303065303566 Sep 10 00:52:40.682000 audit: BPF prog-id=229 op=UNLOAD Sep 10 00:52:40.682000 audit: BPF prog-id=228 op=UNLOAD Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:40.682000 audit: BPF prog-id=230 op=LOAD Sep 10 00:52:40.682000 audit[4769]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00040e028 items=0 ppid=4443 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:40.682000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233323063653938303065623337353537623432373434303065303566 Sep 10 00:52:40.707438 env[1206]: time="2025-09-10T00:52:40.707402820Z" level=info msg="StartContainer for \"2320ce9800eb37557b4274400e05fefdcc6e7613653557ef3703e9a1e3b45887\" returns successfully" Sep 10 00:52:40.786176 env[1206]: time="2025-09-10T00:52:40.786131591Z" level=info msg="StopPodSandbox for \"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\"" Sep 10 00:52:40.870582 env[1206]: 2025-09-10 00:52:40.842 [WARNING][4809] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0", GenerateName:"calico-apiserver-74fc88dd94-", Namespace:"calico-apiserver", SelfLink:"", UID:"0558f8f2-9880-494d-a747-c8d38d014ba2", ResourceVersion:"1115", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"74fc88dd94", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6", Pod:"calico-apiserver-74fc88dd94-cwd5j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie17548d4b90", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:40.870582 env[1206]: 2025-09-10 00:52:40.842 [INFO][4809] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Sep 10 00:52:40.870582 env[1206]: 2025-09-10 00:52:40.842 [INFO][4809] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" iface="eth0" netns="" Sep 10 00:52:40.870582 env[1206]: 2025-09-10 00:52:40.842 [INFO][4809] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Sep 10 00:52:40.870582 env[1206]: 2025-09-10 00:52:40.842 [INFO][4809] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Sep 10 00:52:40.870582 env[1206]: 2025-09-10 00:52:40.859 [INFO][4820] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" HandleID="k8s-pod-network.c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Workload="localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0" Sep 10 00:52:40.870582 env[1206]: 2025-09-10 00:52:40.859 [INFO][4820] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:40.870582 env[1206]: 2025-09-10 00:52:40.859 [INFO][4820] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:40.870582 env[1206]: 2025-09-10 00:52:40.864 [WARNING][4820] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" HandleID="k8s-pod-network.c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Workload="localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0" Sep 10 00:52:40.870582 env[1206]: 2025-09-10 00:52:40.865 [INFO][4820] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" HandleID="k8s-pod-network.c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Workload="localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0" Sep 10 00:52:40.870582 env[1206]: 2025-09-10 00:52:40.866 [INFO][4820] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:40.870582 env[1206]: 2025-09-10 00:52:40.868 [INFO][4809] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Sep 10 00:52:40.871134 env[1206]: time="2025-09-10T00:52:40.870619325Z" level=info msg="TearDown network for sandbox \"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\" successfully" Sep 10 00:52:40.871134 env[1206]: time="2025-09-10T00:52:40.870649722Z" level=info msg="StopPodSandbox for \"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\" returns successfully" Sep 10 00:52:40.873848 env[1206]: time="2025-09-10T00:52:40.873806199Z" level=info msg="RemovePodSandbox for \"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\"" Sep 10 00:52:40.873899 env[1206]: time="2025-09-10T00:52:40.873847376Z" level=info msg="Forcibly stopping sandbox \"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\"" Sep 10 00:52:40.937193 env[1206]: 2025-09-10 00:52:40.907 [WARNING][4838] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0", GenerateName:"calico-apiserver-74fc88dd94-", Namespace:"calico-apiserver", SelfLink:"", UID:"0558f8f2-9880-494d-a747-c8d38d014ba2", ResourceVersion:"1115", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"74fc88dd94", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ff375ec4ebbd3985a97a98b6b160f3a59770b036e16d01934b0945ad4e333cc6", Pod:"calico-apiserver-74fc88dd94-cwd5j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie17548d4b90", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:40.937193 env[1206]: 2025-09-10 00:52:40.907 [INFO][4838] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Sep 10 00:52:40.937193 env[1206]: 2025-09-10 00:52:40.907 [INFO][4838] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" iface="eth0" netns="" Sep 10 00:52:40.937193 env[1206]: 2025-09-10 00:52:40.907 [INFO][4838] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Sep 10 00:52:40.937193 env[1206]: 2025-09-10 00:52:40.907 [INFO][4838] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Sep 10 00:52:40.937193 env[1206]: 2025-09-10 00:52:40.925 [INFO][4847] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" HandleID="k8s-pod-network.c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Workload="localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0" Sep 10 00:52:40.937193 env[1206]: 2025-09-10 00:52:40.925 [INFO][4847] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:40.937193 env[1206]: 2025-09-10 00:52:40.925 [INFO][4847] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:40.937193 env[1206]: 2025-09-10 00:52:40.931 [WARNING][4847] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" HandleID="k8s-pod-network.c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Workload="localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0" Sep 10 00:52:40.937193 env[1206]: 2025-09-10 00:52:40.931 [INFO][4847] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" HandleID="k8s-pod-network.c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Workload="localhost-k8s-calico--apiserver--74fc88dd94--cwd5j-eth0" Sep 10 00:52:40.937193 env[1206]: 2025-09-10 00:52:40.932 [INFO][4847] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:40.937193 env[1206]: 2025-09-10 00:52:40.935 [INFO][4838] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c" Sep 10 00:52:40.937766 env[1206]: time="2025-09-10T00:52:40.937213373Z" level=info msg="TearDown network for sandbox \"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\" successfully" Sep 10 00:52:41.030418 env[1206]: time="2025-09-10T00:52:41.030347610Z" level=info msg="RemovePodSandbox \"c1bff4a7c7e7d014aa494335bb4b67523b078b03b526f3338f520eaa4fac239c\" returns successfully" Sep 10 00:52:41.039256 env[1206]: time="2025-09-10T00:52:41.039201106Z" level=info msg="StopPodSandbox for \"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\"" Sep 10 00:52:41.073000 audit[4891]: NETFILTER_CFG table=filter:124 family=2 entries=10 op=nft_register_rule pid=4891 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:41.073000 audit[4891]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff96d40f10 a2=0 a3=7fff96d40efc items=0 ppid=2086 pid=4891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:41.073000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:41.080000 audit[4891]: NETFILTER_CFG table=nat:125 family=2 entries=24 op=nft_register_rule pid=4891 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:41.080000 audit[4891]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7fff96d40f10 a2=0 a3=7fff96d40efc items=0 ppid=2086 pid=4891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:41.080000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:41.129048 env[1206]: 2025-09-10 00:52:41.099 [WARNING][4872] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"7462035c-d572-4145-a342-1748e1d5702b", ResourceVersion:"1010", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752", Pod:"coredns-7c65d6cfc9-7g8cw", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif4c95d67d70", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:41.129048 env[1206]: 2025-09-10 00:52:41.099 [INFO][4872] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Sep 10 00:52:41.129048 env[1206]: 2025-09-10 00:52:41.099 [INFO][4872] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" iface="eth0" netns="" Sep 10 00:52:41.129048 env[1206]: 2025-09-10 00:52:41.099 [INFO][4872] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Sep 10 00:52:41.129048 env[1206]: 2025-09-10 00:52:41.099 [INFO][4872] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Sep 10 00:52:41.129048 env[1206]: 2025-09-10 00:52:41.119 [INFO][4914] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" HandleID="k8s-pod-network.c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Workload="localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0" Sep 10 00:52:41.129048 env[1206]: 2025-09-10 00:52:41.119 [INFO][4914] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:41.129048 env[1206]: 2025-09-10 00:52:41.119 [INFO][4914] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:41.129048 env[1206]: 2025-09-10 00:52:41.124 [WARNING][4914] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" HandleID="k8s-pod-network.c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Workload="localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0" Sep 10 00:52:41.129048 env[1206]: 2025-09-10 00:52:41.124 [INFO][4914] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" HandleID="k8s-pod-network.c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Workload="localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0" Sep 10 00:52:41.129048 env[1206]: 2025-09-10 00:52:41.125 [INFO][4914] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:41.129048 env[1206]: 2025-09-10 00:52:41.127 [INFO][4872] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Sep 10 00:52:41.129587 env[1206]: time="2025-09-10T00:52:41.129558564Z" level=info msg="TearDown network for sandbox \"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\" successfully" Sep 10 00:52:41.129707 env[1206]: time="2025-09-10T00:52:41.129663159Z" level=info msg="StopPodSandbox for \"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\" returns successfully" Sep 10 00:52:41.131192 env[1206]: time="2025-09-10T00:52:41.131152625Z" level=info msg="RemovePodSandbox for \"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\"" Sep 10 00:52:41.131248 env[1206]: time="2025-09-10T00:52:41.131196728Z" level=info msg="Forcibly stopping sandbox \"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\"" Sep 10 00:52:41.193654 env[1206]: 2025-09-10 00:52:41.166 [WARNING][4936] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"7462035c-d572-4145-a342-1748e1d5702b", ResourceVersion:"1010", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b7311d2a1457057bad1d8b5820a68bd25c9846d8f7aaa0ba001cbcbc53ba0752", Pod:"coredns-7c65d6cfc9-7g8cw", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif4c95d67d70", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:41.193654 env[1206]: 2025-09-10 00:52:41.166 [INFO][4936] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Sep 10 00:52:41.193654 env[1206]: 2025-09-10 00:52:41.166 [INFO][4936] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" iface="eth0" netns="" Sep 10 00:52:41.193654 env[1206]: 2025-09-10 00:52:41.166 [INFO][4936] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Sep 10 00:52:41.193654 env[1206]: 2025-09-10 00:52:41.166 [INFO][4936] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Sep 10 00:52:41.193654 env[1206]: 2025-09-10 00:52:41.183 [INFO][4945] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" HandleID="k8s-pod-network.c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Workload="localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0" Sep 10 00:52:41.193654 env[1206]: 2025-09-10 00:52:41.183 [INFO][4945] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:41.193654 env[1206]: 2025-09-10 00:52:41.183 [INFO][4945] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:41.193654 env[1206]: 2025-09-10 00:52:41.189 [WARNING][4945] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" HandleID="k8s-pod-network.c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Workload="localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0" Sep 10 00:52:41.193654 env[1206]: 2025-09-10 00:52:41.189 [INFO][4945] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" HandleID="k8s-pod-network.c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Workload="localhost-k8s-coredns--7c65d6cfc9--7g8cw-eth0" Sep 10 00:52:41.193654 env[1206]: 2025-09-10 00:52:41.190 [INFO][4945] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:41.193654 env[1206]: 2025-09-10 00:52:41.191 [INFO][4936] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210" Sep 10 00:52:41.193654 env[1206]: time="2025-09-10T00:52:41.193613942Z" level=info msg="TearDown network for sandbox \"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\" successfully" Sep 10 00:52:41.208188 env[1206]: time="2025-09-10T00:52:41.208151787Z" level=info msg="RemovePodSandbox \"c84684e7ec3ad4a713ad11510e44d57e3289216d47b5a8f55f05bd2a528ad210\" returns successfully" Sep 10 00:52:41.208692 env[1206]: time="2025-09-10T00:52:41.208642511Z" level=info msg="StopPodSandbox for \"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\"" Sep 10 00:52:41.263356 env[1206]: 2025-09-10 00:52:41.237 [WARNING][4964] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0", GenerateName:"calico-apiserver-74fc88dd94-", Namespace:"calico-apiserver", SelfLink:"", UID:"6215ffc9-406c-45b6-858c-b40455eb62dc", ResourceVersion:"1129", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"74fc88dd94", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8", Pod:"calico-apiserver-74fc88dd94-pj9t2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibfff9df04be", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:41.263356 env[1206]: 2025-09-10 00:52:41.238 [INFO][4964] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Sep 10 00:52:41.263356 env[1206]: 2025-09-10 00:52:41.238 [INFO][4964] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" iface="eth0" netns="" Sep 10 00:52:41.263356 env[1206]: 2025-09-10 00:52:41.238 [INFO][4964] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Sep 10 00:52:41.263356 env[1206]: 2025-09-10 00:52:41.238 [INFO][4964] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Sep 10 00:52:41.263356 env[1206]: 2025-09-10 00:52:41.254 [INFO][4972] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" HandleID="k8s-pod-network.fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Workload="localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0" Sep 10 00:52:41.263356 env[1206]: 2025-09-10 00:52:41.254 [INFO][4972] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:41.263356 env[1206]: 2025-09-10 00:52:41.254 [INFO][4972] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:41.263356 env[1206]: 2025-09-10 00:52:41.259 [WARNING][4972] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" HandleID="k8s-pod-network.fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Workload="localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0" Sep 10 00:52:41.263356 env[1206]: 2025-09-10 00:52:41.259 [INFO][4972] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" HandleID="k8s-pod-network.fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Workload="localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0" Sep 10 00:52:41.263356 env[1206]: 2025-09-10 00:52:41.260 [INFO][4972] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:41.263356 env[1206]: 2025-09-10 00:52:41.261 [INFO][4964] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Sep 10 00:52:41.263914 env[1206]: time="2025-09-10T00:52:41.263857767Z" level=info msg="TearDown network for sandbox \"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\" successfully" Sep 10 00:52:41.263914 env[1206]: time="2025-09-10T00:52:41.263889146Z" level=info msg="StopPodSandbox for \"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\" returns successfully" Sep 10 00:52:41.264445 env[1206]: time="2025-09-10T00:52:41.264399086Z" level=info msg="RemovePodSandbox for \"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\"" Sep 10 00:52:41.264445 env[1206]: time="2025-09-10T00:52:41.264425516Z" level=info msg="Forcibly stopping sandbox \"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\"" Sep 10 00:52:41.322631 env[1206]: 2025-09-10 00:52:41.294 [WARNING][4990] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0", GenerateName:"calico-apiserver-74fc88dd94-", Namespace:"calico-apiserver", SelfLink:"", UID:"6215ffc9-406c-45b6-858c-b40455eb62dc", ResourceVersion:"1129", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"74fc88dd94", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"14718ed80655b8032dced6228dba7656dd540989d0ed2363cbc76ed0703dcea8", Pod:"calico-apiserver-74fc88dd94-pj9t2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibfff9df04be", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:41.322631 env[1206]: 2025-09-10 00:52:41.294 [INFO][4990] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Sep 10 00:52:41.322631 env[1206]: 2025-09-10 00:52:41.295 [INFO][4990] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" iface="eth0" netns="" Sep 10 00:52:41.322631 env[1206]: 2025-09-10 00:52:41.295 [INFO][4990] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Sep 10 00:52:41.322631 env[1206]: 2025-09-10 00:52:41.295 [INFO][4990] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Sep 10 00:52:41.322631 env[1206]: 2025-09-10 00:52:41.312 [INFO][4999] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" HandleID="k8s-pod-network.fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Workload="localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0" Sep 10 00:52:41.322631 env[1206]: 2025-09-10 00:52:41.312 [INFO][4999] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:41.322631 env[1206]: 2025-09-10 00:52:41.312 [INFO][4999] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:41.322631 env[1206]: 2025-09-10 00:52:41.318 [WARNING][4999] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" HandleID="k8s-pod-network.fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Workload="localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0" Sep 10 00:52:41.322631 env[1206]: 2025-09-10 00:52:41.318 [INFO][4999] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" HandleID="k8s-pod-network.fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Workload="localhost-k8s-calico--apiserver--74fc88dd94--pj9t2-eth0" Sep 10 00:52:41.322631 env[1206]: 2025-09-10 00:52:41.319 [INFO][4999] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:41.322631 env[1206]: 2025-09-10 00:52:41.320 [INFO][4990] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a" Sep 10 00:52:41.323081 env[1206]: time="2025-09-10T00:52:41.322647718Z" level=info msg="TearDown network for sandbox \"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\" successfully" Sep 10 00:52:41.332130 env[1206]: time="2025-09-10T00:52:41.332097537Z" level=info msg="RemovePodSandbox \"fb9ebbb3c6596dd05ac940836df4e6f6dc09ec7f3f609d202a1233dc2126964a\" returns successfully" Sep 10 00:52:41.332551 env[1206]: time="2025-09-10T00:52:41.332522378Z" level=info msg="StopPodSandbox for \"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\"" Sep 10 00:52:41.387895 env[1206]: 2025-09-10 00:52:41.360 [WARNING][5019] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" WorkloadEndpoint="localhost-k8s-whisker--7c5746f9ff--2hrxh-eth0" Sep 10 00:52:41.387895 env[1206]: 2025-09-10 00:52:41.360 [INFO][5019] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Sep 10 00:52:41.387895 env[1206]: 2025-09-10 00:52:41.360 [INFO][5019] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" iface="eth0" netns="" Sep 10 00:52:41.387895 env[1206]: 2025-09-10 00:52:41.360 [INFO][5019] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Sep 10 00:52:41.387895 env[1206]: 2025-09-10 00:52:41.360 [INFO][5019] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Sep 10 00:52:41.387895 env[1206]: 2025-09-10 00:52:41.377 [INFO][5028] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" HandleID="k8s-pod-network.502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Workload="localhost-k8s-whisker--7c5746f9ff--2hrxh-eth0" Sep 10 00:52:41.387895 env[1206]: 2025-09-10 00:52:41.377 [INFO][5028] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:41.387895 env[1206]: 2025-09-10 00:52:41.377 [INFO][5028] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:41.387895 env[1206]: 2025-09-10 00:52:41.383 [WARNING][5028] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" HandleID="k8s-pod-network.502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Workload="localhost-k8s-whisker--7c5746f9ff--2hrxh-eth0" Sep 10 00:52:41.387895 env[1206]: 2025-09-10 00:52:41.383 [INFO][5028] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" HandleID="k8s-pod-network.502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Workload="localhost-k8s-whisker--7c5746f9ff--2hrxh-eth0" Sep 10 00:52:41.387895 env[1206]: 2025-09-10 00:52:41.384 [INFO][5028] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:41.387895 env[1206]: 2025-09-10 00:52:41.386 [INFO][5019] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Sep 10 00:52:41.388614 env[1206]: time="2025-09-10T00:52:41.387922830Z" level=info msg="TearDown network for sandbox \"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\" successfully" Sep 10 00:52:41.388614 env[1206]: time="2025-09-10T00:52:41.387953247Z" level=info msg="StopPodSandbox for \"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\" returns successfully" Sep 10 00:52:41.388614 env[1206]: time="2025-09-10T00:52:41.388423403Z" level=info msg="RemovePodSandbox for \"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\"" Sep 10 00:52:41.388614 env[1206]: time="2025-09-10T00:52:41.388448229Z" level=info msg="Forcibly stopping sandbox \"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\"" Sep 10 00:52:41.444350 env[1206]: 2025-09-10 00:52:41.414 [WARNING][5045] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" WorkloadEndpoint="localhost-k8s-whisker--7c5746f9ff--2hrxh-eth0" Sep 10 00:52:41.444350 env[1206]: 2025-09-10 00:52:41.415 [INFO][5045] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Sep 10 00:52:41.444350 env[1206]: 2025-09-10 00:52:41.415 [INFO][5045] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" iface="eth0" netns="" Sep 10 00:52:41.444350 env[1206]: 2025-09-10 00:52:41.415 [INFO][5045] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Sep 10 00:52:41.444350 env[1206]: 2025-09-10 00:52:41.415 [INFO][5045] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Sep 10 00:52:41.444350 env[1206]: 2025-09-10 00:52:41.434 [INFO][5054] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" HandleID="k8s-pod-network.502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Workload="localhost-k8s-whisker--7c5746f9ff--2hrxh-eth0" Sep 10 00:52:41.444350 env[1206]: 2025-09-10 00:52:41.434 [INFO][5054] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:41.444350 env[1206]: 2025-09-10 00:52:41.434 [INFO][5054] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:41.444350 env[1206]: 2025-09-10 00:52:41.439 [WARNING][5054] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" HandleID="k8s-pod-network.502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Workload="localhost-k8s-whisker--7c5746f9ff--2hrxh-eth0" Sep 10 00:52:41.444350 env[1206]: 2025-09-10 00:52:41.439 [INFO][5054] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" HandleID="k8s-pod-network.502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Workload="localhost-k8s-whisker--7c5746f9ff--2hrxh-eth0" Sep 10 00:52:41.444350 env[1206]: 2025-09-10 00:52:41.440 [INFO][5054] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:41.444350 env[1206]: 2025-09-10 00:52:41.442 [INFO][5045] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc" Sep 10 00:52:41.444350 env[1206]: time="2025-09-10T00:52:41.444323295Z" level=info msg="TearDown network for sandbox \"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\" successfully" Sep 10 00:52:41.447873 env[1206]: time="2025-09-10T00:52:41.447848789Z" level=info msg="RemovePodSandbox \"502e1cf9ca75797a85b9dff067303446d6c3b6849d27820363e8af864edf11fc\" returns successfully" Sep 10 00:52:41.448265 env[1206]: time="2025-09-10T00:52:41.448243074Z" level=info msg="StopPodSandbox for \"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\"" Sep 10 00:52:41.508350 env[1206]: 2025-09-10 00:52:41.476 [WARNING][5071] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"7d47c772-cd04-4790-a262-3fd6b9aebfa7", ResourceVersion:"1069", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b", Pod:"coredns-7c65d6cfc9-8nj94", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali44ad042d96d", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:41.508350 env[1206]: 2025-09-10 00:52:41.476 [INFO][5071] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Sep 10 00:52:41.508350 env[1206]: 2025-09-10 00:52:41.476 [INFO][5071] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" iface="eth0" netns="" Sep 10 00:52:41.508350 env[1206]: 2025-09-10 00:52:41.476 [INFO][5071] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Sep 10 00:52:41.508350 env[1206]: 2025-09-10 00:52:41.476 [INFO][5071] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Sep 10 00:52:41.508350 env[1206]: 2025-09-10 00:52:41.499 [INFO][5080] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" HandleID="k8s-pod-network.65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Workload="localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0" Sep 10 00:52:41.508350 env[1206]: 2025-09-10 00:52:41.499 [INFO][5080] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:41.508350 env[1206]: 2025-09-10 00:52:41.499 [INFO][5080] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:41.508350 env[1206]: 2025-09-10 00:52:41.504 [WARNING][5080] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" HandleID="k8s-pod-network.65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Workload="localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0" Sep 10 00:52:41.508350 env[1206]: 2025-09-10 00:52:41.504 [INFO][5080] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" HandleID="k8s-pod-network.65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Workload="localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0" Sep 10 00:52:41.508350 env[1206]: 2025-09-10 00:52:41.505 [INFO][5080] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:41.508350 env[1206]: 2025-09-10 00:52:41.506 [INFO][5071] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Sep 10 00:52:41.508834 env[1206]: time="2025-09-10T00:52:41.508375297Z" level=info msg="TearDown network for sandbox \"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\" successfully" Sep 10 00:52:41.508834 env[1206]: time="2025-09-10T00:52:41.508406015Z" level=info msg="StopPodSandbox for \"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\" returns successfully" Sep 10 00:52:41.509044 env[1206]: time="2025-09-10T00:52:41.509014038Z" level=info msg="RemovePodSandbox for \"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\"" Sep 10 00:52:41.509088 env[1206]: time="2025-09-10T00:52:41.509049304Z" level=info msg="Forcibly stopping sandbox \"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\"" Sep 10 00:52:41.565720 env[1206]: 2025-09-10 00:52:41.536 [WARNING][5103] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"7d47c772-cd04-4790-a262-3fd6b9aebfa7", ResourceVersion:"1069", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0cc95dcb2b97c06f7aeaf1cb728c38ae5cd2b53150e979475edb1cfd1e537e5b", Pod:"coredns-7c65d6cfc9-8nj94", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali44ad042d96d", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:41.565720 env[1206]: 2025-09-10 00:52:41.537 [INFO][5103] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Sep 10 00:52:41.565720 env[1206]: 2025-09-10 00:52:41.537 [INFO][5103] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" iface="eth0" netns="" Sep 10 00:52:41.565720 env[1206]: 2025-09-10 00:52:41.537 [INFO][5103] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Sep 10 00:52:41.565720 env[1206]: 2025-09-10 00:52:41.537 [INFO][5103] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Sep 10 00:52:41.565720 env[1206]: 2025-09-10 00:52:41.554 [INFO][5112] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" HandleID="k8s-pod-network.65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Workload="localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0" Sep 10 00:52:41.565720 env[1206]: 2025-09-10 00:52:41.554 [INFO][5112] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:41.565720 env[1206]: 2025-09-10 00:52:41.554 [INFO][5112] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:41.565720 env[1206]: 2025-09-10 00:52:41.560 [WARNING][5112] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" HandleID="k8s-pod-network.65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Workload="localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0" Sep 10 00:52:41.565720 env[1206]: 2025-09-10 00:52:41.560 [INFO][5112] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" HandleID="k8s-pod-network.65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Workload="localhost-k8s-coredns--7c65d6cfc9--8nj94-eth0" Sep 10 00:52:41.565720 env[1206]: 2025-09-10 00:52:41.561 [INFO][5112] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:41.565720 env[1206]: 2025-09-10 00:52:41.564 [INFO][5103] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7" Sep 10 00:52:41.566274 env[1206]: time="2025-09-10T00:52:41.565776379Z" level=info msg="TearDown network for sandbox \"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\" successfully" Sep 10 00:52:41.570100 env[1206]: time="2025-09-10T00:52:41.570068261Z" level=info msg="RemovePodSandbox \"65f4864fa8b8382ddcce5b9d0c6fd564d4ac1f61541a6db9fd593946139770e7\" returns successfully" Sep 10 00:52:41.570616 env[1206]: time="2025-09-10T00:52:41.570565578Z" level=info msg="StopPodSandbox for \"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\"" Sep 10 00:52:41.642661 env[1206]: 2025-09-10 00:52:41.603 [WARNING][5131] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--7988f88666--xfp8d-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"20f43dfc-1b32-4cd7-a1c0-40453f8c3425", ResourceVersion:"1174", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e", Pod:"goldmane-7988f88666-xfp8d", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali57a657cc938", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:41.642661 env[1206]: 2025-09-10 00:52:41.603 [INFO][5131] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Sep 10 00:52:41.642661 env[1206]: 2025-09-10 00:52:41.603 [INFO][5131] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" iface="eth0" netns="" Sep 10 00:52:41.642661 env[1206]: 2025-09-10 00:52:41.603 [INFO][5131] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Sep 10 00:52:41.642661 env[1206]: 2025-09-10 00:52:41.603 [INFO][5131] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Sep 10 00:52:41.642661 env[1206]: 2025-09-10 00:52:41.622 [INFO][5140] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" HandleID="k8s-pod-network.ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Workload="localhost-k8s-goldmane--7988f88666--xfp8d-eth0" Sep 10 00:52:41.642661 env[1206]: 2025-09-10 00:52:41.622 [INFO][5140] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:41.642661 env[1206]: 2025-09-10 00:52:41.622 [INFO][5140] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:41.642661 env[1206]: 2025-09-10 00:52:41.633 [WARNING][5140] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" HandleID="k8s-pod-network.ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Workload="localhost-k8s-goldmane--7988f88666--xfp8d-eth0" Sep 10 00:52:41.642661 env[1206]: 2025-09-10 00:52:41.633 [INFO][5140] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" HandleID="k8s-pod-network.ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Workload="localhost-k8s-goldmane--7988f88666--xfp8d-eth0" Sep 10 00:52:41.642661 env[1206]: 2025-09-10 00:52:41.637 [INFO][5140] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:41.642661 env[1206]: 2025-09-10 00:52:41.641 [INFO][5131] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Sep 10 00:52:41.643583 env[1206]: time="2025-09-10T00:52:41.642689178Z" level=info msg="TearDown network for sandbox \"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\" successfully" Sep 10 00:52:41.643583 env[1206]: time="2025-09-10T00:52:41.642727801Z" level=info msg="StopPodSandbox for \"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\" returns successfully" Sep 10 00:52:41.643583 env[1206]: time="2025-09-10T00:52:41.643202897Z" level=info msg="RemovePodSandbox for \"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\"" Sep 10 00:52:41.643583 env[1206]: time="2025-09-10T00:52:41.643235887Z" level=info msg="Forcibly stopping sandbox \"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\"" Sep 10 00:52:41.702215 env[1206]: 2025-09-10 00:52:41.673 [WARNING][5159] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--7988f88666--xfp8d-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"20f43dfc-1b32-4cd7-a1c0-40453f8c3425", ResourceVersion:"1174", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"44c741250de626119452723bb8aeaaf4848a89b5fe0d3a6a118532f7a1aa159e", Pod:"goldmane-7988f88666-xfp8d", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali57a657cc938", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:41.702215 env[1206]: 2025-09-10 00:52:41.673 [INFO][5159] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Sep 10 00:52:41.702215 env[1206]: 2025-09-10 00:52:41.673 [INFO][5159] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" iface="eth0" netns="" Sep 10 00:52:41.702215 env[1206]: 2025-09-10 00:52:41.673 [INFO][5159] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Sep 10 00:52:41.702215 env[1206]: 2025-09-10 00:52:41.673 [INFO][5159] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Sep 10 00:52:41.702215 env[1206]: 2025-09-10 00:52:41.693 [INFO][5168] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" HandleID="k8s-pod-network.ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Workload="localhost-k8s-goldmane--7988f88666--xfp8d-eth0" Sep 10 00:52:41.702215 env[1206]: 2025-09-10 00:52:41.693 [INFO][5168] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:41.702215 env[1206]: 2025-09-10 00:52:41.693 [INFO][5168] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:41.702215 env[1206]: 2025-09-10 00:52:41.697 [WARNING][5168] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" HandleID="k8s-pod-network.ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Workload="localhost-k8s-goldmane--7988f88666--xfp8d-eth0" Sep 10 00:52:41.702215 env[1206]: 2025-09-10 00:52:41.697 [INFO][5168] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" HandleID="k8s-pod-network.ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Workload="localhost-k8s-goldmane--7988f88666--xfp8d-eth0" Sep 10 00:52:41.702215 env[1206]: 2025-09-10 00:52:41.699 [INFO][5168] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:41.702215 env[1206]: 2025-09-10 00:52:41.700 [INFO][5159] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526" Sep 10 00:52:41.702215 env[1206]: time="2025-09-10T00:52:41.702188532Z" level=info msg="TearDown network for sandbox \"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\" successfully" Sep 10 00:52:41.705880 env[1206]: time="2025-09-10T00:52:41.705855509Z" level=info msg="RemovePodSandbox \"ada31c1210c000e148e30fc16a36e571a73f67035237e5d341882b74b0ba4526\" returns successfully" Sep 10 00:52:41.706280 env[1206]: time="2025-09-10T00:52:41.706257509Z" level=info msg="StopPodSandbox for \"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\"" Sep 10 00:52:41.761951 env[1206]: 2025-09-10 00:52:41.734 [WARNING][5185] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0", GenerateName:"calico-kube-controllers-568989f48d-", Namespace:"calico-system", SelfLink:"", UID:"21daa049-0018-40da-91f6-73f54e919867", ResourceVersion:"1090", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"568989f48d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d", Pod:"calico-kube-controllers-568989f48d-8qw66", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calia525a5b798c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:41.761951 env[1206]: 2025-09-10 00:52:41.734 [INFO][5185] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Sep 10 00:52:41.761951 env[1206]: 2025-09-10 00:52:41.734 [INFO][5185] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" iface="eth0" netns="" Sep 10 00:52:41.761951 env[1206]: 2025-09-10 00:52:41.734 [INFO][5185] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Sep 10 00:52:41.761951 env[1206]: 2025-09-10 00:52:41.734 [INFO][5185] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Sep 10 00:52:41.761951 env[1206]: 2025-09-10 00:52:41.751 [INFO][5195] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" HandleID="k8s-pod-network.6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Workload="localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0" Sep 10 00:52:41.761951 env[1206]: 2025-09-10 00:52:41.751 [INFO][5195] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:41.761951 env[1206]: 2025-09-10 00:52:41.751 [INFO][5195] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:41.761951 env[1206]: 2025-09-10 00:52:41.757 [WARNING][5195] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" HandleID="k8s-pod-network.6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Workload="localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0" Sep 10 00:52:41.761951 env[1206]: 2025-09-10 00:52:41.757 [INFO][5195] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" HandleID="k8s-pod-network.6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Workload="localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0" Sep 10 00:52:41.761951 env[1206]: 2025-09-10 00:52:41.758 [INFO][5195] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:41.761951 env[1206]: 2025-09-10 00:52:41.760 [INFO][5185] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Sep 10 00:52:41.762592 env[1206]: time="2025-09-10T00:52:41.761967677Z" level=info msg="TearDown network for sandbox \"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\" successfully" Sep 10 00:52:41.762592 env[1206]: time="2025-09-10T00:52:41.762000438Z" level=info msg="StopPodSandbox for \"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\" returns successfully" Sep 10 00:52:41.762592 env[1206]: time="2025-09-10T00:52:41.762450066Z" level=info msg="RemovePodSandbox for \"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\"" Sep 10 00:52:41.762592 env[1206]: time="2025-09-10T00:52:41.762482747Z" level=info msg="Forcibly stopping sandbox \"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\"" Sep 10 00:52:41.819005 env[1206]: 2025-09-10 00:52:41.791 [WARNING][5213] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0", GenerateName:"calico-kube-controllers-568989f48d-", Namespace:"calico-system", SelfLink:"", UID:"21daa049-0018-40da-91f6-73f54e919867", ResourceVersion:"1090", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"568989f48d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ea56edccc0895077104248574b4866858a302f2d93029b0a2ef8dd78c3529d4d", Pod:"calico-kube-controllers-568989f48d-8qw66", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calia525a5b798c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:41.819005 env[1206]: 2025-09-10 00:52:41.791 [INFO][5213] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Sep 10 00:52:41.819005 env[1206]: 2025-09-10 00:52:41.791 [INFO][5213] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" iface="eth0" netns="" Sep 10 00:52:41.819005 env[1206]: 2025-09-10 00:52:41.791 [INFO][5213] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Sep 10 00:52:41.819005 env[1206]: 2025-09-10 00:52:41.791 [INFO][5213] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Sep 10 00:52:41.819005 env[1206]: 2025-09-10 00:52:41.809 [INFO][5222] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" HandleID="k8s-pod-network.6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Workload="localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0" Sep 10 00:52:41.819005 env[1206]: 2025-09-10 00:52:41.809 [INFO][5222] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:41.819005 env[1206]: 2025-09-10 00:52:41.809 [INFO][5222] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:41.819005 env[1206]: 2025-09-10 00:52:41.814 [WARNING][5222] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" HandleID="k8s-pod-network.6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Workload="localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0" Sep 10 00:52:41.819005 env[1206]: 2025-09-10 00:52:41.814 [INFO][5222] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" HandleID="k8s-pod-network.6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Workload="localhost-k8s-calico--kube--controllers--568989f48d--8qw66-eth0" Sep 10 00:52:41.819005 env[1206]: 2025-09-10 00:52:41.815 [INFO][5222] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:41.819005 env[1206]: 2025-09-10 00:52:41.817 [INFO][5213] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98" Sep 10 00:52:41.819567 env[1206]: time="2025-09-10T00:52:41.819030718Z" level=info msg="TearDown network for sandbox \"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\" successfully" Sep 10 00:52:41.822442 env[1206]: time="2025-09-10T00:52:41.822419136Z" level=info msg="RemovePodSandbox \"6d59778b4bf239fe458dbe32751348f2ecba7f0536a2a4405a417cd776b2bc98\" returns successfully" Sep 10 00:52:41.822961 env[1206]: time="2025-09-10T00:52:41.822922864Z" level=info msg="StopPodSandbox for \"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\"" Sep 10 00:52:41.879960 env[1206]: 2025-09-10 00:52:41.852 [WARNING][5240] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--zh8cr-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"dd1fed80-f428-462e-a294-863944798dcc", ResourceVersion:"1053", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e", Pod:"csi-node-driver-zh8cr", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calie1646eb29a4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:41.879960 env[1206]: 2025-09-10 00:52:41.852 [INFO][5240] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Sep 10 00:52:41.879960 env[1206]: 2025-09-10 00:52:41.852 [INFO][5240] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" iface="eth0" netns="" Sep 10 00:52:41.879960 env[1206]: 2025-09-10 00:52:41.852 [INFO][5240] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Sep 10 00:52:41.879960 env[1206]: 2025-09-10 00:52:41.852 [INFO][5240] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Sep 10 00:52:41.879960 env[1206]: 2025-09-10 00:52:41.870 [INFO][5250] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" HandleID="k8s-pod-network.fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Workload="localhost-k8s-csi--node--driver--zh8cr-eth0" Sep 10 00:52:41.879960 env[1206]: 2025-09-10 00:52:41.870 [INFO][5250] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:41.879960 env[1206]: 2025-09-10 00:52:41.870 [INFO][5250] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:41.879960 env[1206]: 2025-09-10 00:52:41.875 [WARNING][5250] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" HandleID="k8s-pod-network.fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Workload="localhost-k8s-csi--node--driver--zh8cr-eth0" Sep 10 00:52:41.879960 env[1206]: 2025-09-10 00:52:41.875 [INFO][5250] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" HandleID="k8s-pod-network.fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Workload="localhost-k8s-csi--node--driver--zh8cr-eth0" Sep 10 00:52:41.879960 env[1206]: 2025-09-10 00:52:41.876 [INFO][5250] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:41.879960 env[1206]: 2025-09-10 00:52:41.878 [INFO][5240] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Sep 10 00:52:41.880405 env[1206]: time="2025-09-10T00:52:41.879976939Z" level=info msg="TearDown network for sandbox \"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\" successfully" Sep 10 00:52:41.880405 env[1206]: time="2025-09-10T00:52:41.879999482Z" level=info msg="StopPodSandbox for \"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\" returns successfully" Sep 10 00:52:41.880453 env[1206]: time="2025-09-10T00:52:41.880419735Z" level=info msg="RemovePodSandbox for \"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\"" Sep 10 00:52:41.880489 env[1206]: time="2025-09-10T00:52:41.880454029Z" level=info msg="Forcibly stopping sandbox \"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\"" Sep 10 00:52:41.932966 env[1206]: 2025-09-10 00:52:41.907 [WARNING][5268] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--zh8cr-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"dd1fed80-f428-462e-a294-863944798dcc", ResourceVersion:"1053", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 51, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e", Pod:"csi-node-driver-zh8cr", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calie1646eb29a4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:52:41.932966 env[1206]: 2025-09-10 00:52:41.907 [INFO][5268] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Sep 10 00:52:41.932966 env[1206]: 2025-09-10 00:52:41.907 [INFO][5268] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" iface="eth0" netns="" Sep 10 00:52:41.932966 env[1206]: 2025-09-10 00:52:41.907 [INFO][5268] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Sep 10 00:52:41.932966 env[1206]: 2025-09-10 00:52:41.907 [INFO][5268] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Sep 10 00:52:41.932966 env[1206]: 2025-09-10 00:52:41.923 [INFO][5277] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" HandleID="k8s-pod-network.fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Workload="localhost-k8s-csi--node--driver--zh8cr-eth0" Sep 10 00:52:41.932966 env[1206]: 2025-09-10 00:52:41.923 [INFO][5277] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:52:41.932966 env[1206]: 2025-09-10 00:52:41.924 [INFO][5277] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:52:41.932966 env[1206]: 2025-09-10 00:52:41.928 [WARNING][5277] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" HandleID="k8s-pod-network.fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Workload="localhost-k8s-csi--node--driver--zh8cr-eth0" Sep 10 00:52:41.932966 env[1206]: 2025-09-10 00:52:41.928 [INFO][5277] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" HandleID="k8s-pod-network.fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Workload="localhost-k8s-csi--node--driver--zh8cr-eth0" Sep 10 00:52:41.932966 env[1206]: 2025-09-10 00:52:41.929 [INFO][5277] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:52:41.932966 env[1206]: 2025-09-10 00:52:41.931 [INFO][5268] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444" Sep 10 00:52:41.933401 env[1206]: time="2025-09-10T00:52:41.932976665Z" level=info msg="TearDown network for sandbox \"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\" successfully" Sep 10 00:52:41.936198 env[1206]: time="2025-09-10T00:52:41.936175138Z" level=info msg="RemovePodSandbox \"fc333e2c749ac8917f63e9602fe39e8946273af6ca71e9070ea28b800481d444\" returns successfully" Sep 10 00:52:42.352542 kubelet[1980]: I0910 00:52:42.352498 1980 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 10 00:52:42.362056 kubelet[1980]: I0910 00:52:42.362004 1980 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-7988f88666-xfp8d" podStartSLOduration=33.531209648 podStartE2EDuration="45.36125485s" podCreationTimestamp="2025-09-10 00:51:57 +0000 UTC" firstStartedPulling="2025-09-10 00:52:28.802979767 +0000 UTC m=+48.094143029" lastFinishedPulling="2025-09-10 00:52:40.633024969 +0000 UTC m=+59.924188231" observedRunningTime="2025-09-10 00:52:41.073076215 +0000 UTC m=+60.364239467" watchObservedRunningTime="2025-09-10 00:52:42.36125485 +0000 UTC m=+61.652418102" Sep 10 00:52:42.372000 audit[5311]: NETFILTER_CFG table=filter:126 family=2 entries=10 op=nft_register_rule pid=5311 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:42.372000 audit[5311]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd7f880a70 a2=0 a3=7ffd7f880a5c items=0 ppid=2086 pid=5311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:42.372000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:42.377000 audit[5311]: NETFILTER_CFG table=nat:127 family=2 entries=36 op=nft_register_chain pid=5311 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:42.377000 audit[5311]: SYSCALL arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7ffd7f880a70 a2=0 a3=7ffd7f880a5c items=0 ppid=2086 pid=5311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:42.377000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:42.470966 env[1206]: time="2025-09-10T00:52:42.470903319Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:42.472632 env[1206]: time="2025-09-10T00:52:42.472608283Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b8f31c4fdaed3fa08af64de3d37d65a4c2ea0d9f6f522cb60d2e0cb424f8dd8a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:42.474089 env[1206]: time="2025-09-10T00:52:42.474047309Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:42.475355 env[1206]: time="2025-09-10T00:52:42.475330264Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:731ab232ca708102ab332340b1274d5cd656aa896ecc5368ee95850b811df86f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:52:42.475767 env[1206]: time="2025-09-10T00:52:42.475741131Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\" returns image reference \"sha256:b8f31c4fdaed3fa08af64de3d37d65a4c2ea0d9f6f522cb60d2e0cb424f8dd8a\"" Sep 10 00:52:42.477461 env[1206]: time="2025-09-10T00:52:42.477429002Z" level=info msg="CreateContainer within sandbox \"ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Sep 10 00:52:42.487934 env[1206]: time="2025-09-10T00:52:42.487901173Z" level=info msg="CreateContainer within sandbox \"ec421e25ffab8ba632c2ecb1d621b6b118afa52bfcb6d8a7b43d5cfee22cac0e\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"4d281379608322df68636826c69a6712fed5a52261ceb3f7373b2f8a7ed5cfab\"" Sep 10 00:52:42.488330 env[1206]: time="2025-09-10T00:52:42.488306561Z" level=info msg="StartContainer for \"4d281379608322df68636826c69a6712fed5a52261ceb3f7373b2f8a7ed5cfab\"" Sep 10 00:52:42.506467 systemd[1]: Started cri-containerd-4d281379608322df68636826c69a6712fed5a52261ceb3f7373b2f8a7ed5cfab.scope. Sep 10 00:52:42.515000 audit[5319]: AVC avc: denied { perfmon } for pid=5319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.515000 audit[5319]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c56b0 a2=3c a3=7fd0233f0488 items=0 ppid=4365 pid=5319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:42.515000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464323831333739363038333232646636383633363832366336396136 Sep 10 00:52:42.515000 audit[5319]: AVC avc: denied { bpf } for pid=5319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.515000 audit[5319]: AVC avc: denied { bpf } for pid=5319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.515000 audit[5319]: AVC avc: denied { bpf } for pid=5319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.515000 audit[5319]: AVC avc: denied { perfmon } for pid=5319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.515000 audit[5319]: AVC avc: denied { perfmon } for pid=5319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.515000 audit[5319]: AVC avc: denied { perfmon } for pid=5319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.515000 audit[5319]: AVC avc: denied { perfmon } for pid=5319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.515000 audit[5319]: AVC avc: denied { perfmon } for pid=5319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.515000 audit[5319]: AVC avc: denied { bpf } for pid=5319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.515000 audit[5319]: AVC avc: denied { bpf } for pid=5319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.515000 audit: BPF prog-id=231 op=LOAD Sep 10 00:52:42.515000 audit[5319]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c59d8 a2=78 a3=c00027f198 items=0 ppid=4365 pid=5319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:42.515000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464323831333739363038333232646636383633363832366336396136 Sep 10 00:52:42.516000 audit[5319]: AVC avc: denied { bpf } for pid=5319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.516000 audit[5319]: AVC avc: denied { bpf } for pid=5319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.516000 audit[5319]: AVC avc: denied { perfmon } for pid=5319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.516000 audit[5319]: AVC avc: denied { perfmon } for pid=5319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.516000 audit[5319]: AVC avc: denied { perfmon } for pid=5319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.516000 audit[5319]: AVC avc: denied { perfmon } for pid=5319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.516000 audit[5319]: AVC avc: denied { perfmon } for pid=5319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.516000 audit[5319]: AVC avc: denied { bpf } for pid=5319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.516000 audit[5319]: AVC avc: denied { bpf } for pid=5319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.516000 audit: BPF prog-id=232 op=LOAD Sep 10 00:52:42.516000 audit[5319]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001c5770 a2=78 a3=c00027f1e8 items=0 ppid=4365 pid=5319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:42.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464323831333739363038333232646636383633363832366336396136 Sep 10 00:52:42.516000 audit: BPF prog-id=232 op=UNLOAD Sep 10 00:52:42.516000 audit: BPF prog-id=231 op=UNLOAD Sep 10 00:52:42.516000 audit[5319]: AVC avc: denied { bpf } for pid=5319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.516000 audit[5319]: AVC avc: denied { bpf } for pid=5319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.516000 audit[5319]: AVC avc: denied { bpf } for pid=5319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.516000 audit[5319]: AVC avc: denied { perfmon } for pid=5319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.516000 audit[5319]: AVC avc: denied { perfmon } for pid=5319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.516000 audit[5319]: AVC avc: denied { perfmon } for pid=5319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.516000 audit[5319]: AVC avc: denied { perfmon } for pid=5319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.516000 audit[5319]: AVC avc: denied { perfmon } for pid=5319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.516000 audit[5319]: AVC avc: denied { bpf } for pid=5319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.516000 audit[5319]: AVC avc: denied { bpf } for pid=5319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:52:42.516000 audit: BPF prog-id=233 op=LOAD Sep 10 00:52:42.516000 audit[5319]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c5c30 a2=78 a3=c00027f278 items=0 ppid=4365 pid=5319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:42.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464323831333739363038333232646636383633363832366336396136 Sep 10 00:52:42.529166 env[1206]: time="2025-09-10T00:52:42.529123804Z" level=info msg="StartContainer for \"4d281379608322df68636826c69a6712fed5a52261ceb3f7373b2f8a7ed5cfab\" returns successfully" Sep 10 00:52:42.857893 kubelet[1980]: I0910 00:52:42.857858 1980 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Sep 10 00:52:42.857893 kubelet[1980]: I0910 00:52:42.857889 1980 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Sep 10 00:52:43.067066 kubelet[1980]: I0910 00:52:43.067000 1980 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-zh8cr" podStartSLOduration=30.040434002 podStartE2EDuration="44.066979238s" podCreationTimestamp="2025-09-10 00:51:59 +0000 UTC" firstStartedPulling="2025-09-10 00:52:28.449832824 +0000 UTC m=+47.740996086" lastFinishedPulling="2025-09-10 00:52:42.47637806 +0000 UTC m=+61.767541322" observedRunningTime="2025-09-10 00:52:43.066369288 +0000 UTC m=+62.357532550" watchObservedRunningTime="2025-09-10 00:52:43.066979238 +0000 UTC m=+62.358142520" Sep 10 00:52:43.815000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:52:43.819172 kernel: kauditd_printk_skb: 137 callbacks suppressed Sep 10 00:52:43.819241 kernel: audit: type=1400 audit(1757465563.815:1522): avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:52:43.815000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0009721e0 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:52:43.829346 kernel: audit: type=1300 audit(1757465563.815:1522): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0009721e0 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:52:43.829418 kernel: audit: type=1327 audit(1757465563.815:1522): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:52:43.815000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:52:43.815000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:52:43.837760 kernel: audit: type=1400 audit(1757465563.815:1523): avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:52:43.837809 kernel: audit: type=1300 audit(1757465563.815:1523): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000972220 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:52:43.815000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000972220 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:52:43.842382 kernel: audit: type=1327 audit(1757465563.815:1523): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:52:43.815000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:52:43.817000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:52:43.850637 kernel: audit: type=1400 audit(1757465563.817:1524): avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:52:43.850707 kernel: audit: type=1300 audit(1757465563.817:1524): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000972260 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:52:43.817000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000972260 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:52:43.817000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:52:43.859049 kernel: audit: type=1327 audit(1757465563.817:1524): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:52:43.859098 kernel: audit: type=1400 audit(1757465563.817:1525): avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:52:43.817000 audit[1849]: AVC avc: denied { watch } for pid=1849 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:52:43.817000 audit[1849]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0016be880 a2=fc6 a3=0 items=0 ppid=1703 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c98,c708 key=(null) Sep 10 00:52:43.817000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:52:44.333445 systemd[1]: Started sshd@14-10.0.0.141:22-10.0.0.1:55746.service. Sep 10 00:52:44.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.141:22-10.0.0.1:55746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:44.366000 audit[5372]: USER_ACCT pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:44.368131 sshd[5372]: Accepted publickey for core from 10.0.0.1 port 55746 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:52:44.367000 audit[5372]: CRED_ACQ pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:44.367000 audit[5372]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc32f86b60 a2=3 a3=0 items=0 ppid=1 pid=5372 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:44.367000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:52:44.369396 sshd[5372]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:52:44.373068 systemd-logind[1191]: New session 15 of user core. Sep 10 00:52:44.373997 systemd[1]: Started session-15.scope. Sep 10 00:52:44.376000 audit[5372]: USER_START pid=5372 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:44.378000 audit[5374]: CRED_ACQ pid=5374 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:44.658268 sshd[5372]: pam_unix(sshd:session): session closed for user core Sep 10 00:52:44.657000 audit[5372]: USER_END pid=5372 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:44.658000 audit[5372]: CRED_DISP pid=5372 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:44.660679 systemd[1]: sshd@14-10.0.0.141:22-10.0.0.1:55746.service: Deactivated successfully. Sep 10 00:52:44.659000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.141:22-10.0.0.1:55746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:44.661365 systemd[1]: session-15.scope: Deactivated successfully. Sep 10 00:52:44.661867 systemd-logind[1191]: Session 15 logged out. Waiting for processes to exit. Sep 10 00:52:44.662506 systemd-logind[1191]: Removed session 15. Sep 10 00:52:49.662627 systemd[1]: Started sshd@15-10.0.0.141:22-10.0.0.1:55762.service. Sep 10 00:52:49.664867 kernel: kauditd_printk_skb: 13 callbacks suppressed Sep 10 00:52:49.665066 kernel: audit: type=1130 audit(1757465569.661:1535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.141:22-10.0.0.1:55762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:49.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.141:22-10.0.0.1:55762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:49.695000 audit[5410]: USER_ACCT pid=5410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:49.697408 sshd[5410]: Accepted publickey for core from 10.0.0.1 port 55762 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:52:49.698917 sshd[5410]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:52:49.696000 audit[5410]: CRED_ACQ pid=5410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:49.702478 systemd-logind[1191]: New session 16 of user core. Sep 10 00:52:49.703200 systemd[1]: Started session-16.scope. Sep 10 00:52:49.704448 kernel: audit: type=1101 audit(1757465569.695:1536): pid=5410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:49.704611 kernel: audit: type=1103 audit(1757465569.696:1537): pid=5410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:49.704646 kernel: audit: type=1006 audit(1757465569.696:1538): pid=5410 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Sep 10 00:52:49.696000 audit[5410]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff03627710 a2=3 a3=0 items=0 ppid=1 pid=5410 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:49.710364 kernel: audit: type=1300 audit(1757465569.696:1538): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff03627710 a2=3 a3=0 items=0 ppid=1 pid=5410 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:49.710411 kernel: audit: type=1327 audit(1757465569.696:1538): proctitle=737368643A20636F7265205B707269765D Sep 10 00:52:49.696000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:52:49.705000 audit[5410]: USER_START pid=5410 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:49.715676 kernel: audit: type=1105 audit(1757465569.705:1539): pid=5410 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:49.715717 kernel: audit: type=1103 audit(1757465569.706:1540): pid=5412 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:49.706000 audit[5412]: CRED_ACQ pid=5412 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:49.831474 sshd[5410]: pam_unix(sshd:session): session closed for user core Sep 10 00:52:49.830000 audit[5410]: USER_END pid=5410 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:49.833896 systemd[1]: sshd@15-10.0.0.141:22-10.0.0.1:55762.service: Deactivated successfully. Sep 10 00:52:49.834679 systemd[1]: session-16.scope: Deactivated successfully. Sep 10 00:52:49.835218 systemd-logind[1191]: Session 16 logged out. Waiting for processes to exit. Sep 10 00:52:49.835896 systemd-logind[1191]: Removed session 16. Sep 10 00:52:49.830000 audit[5410]: CRED_DISP pid=5410 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:49.839709 kernel: audit: type=1106 audit(1757465569.830:1541): pid=5410 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:49.839766 kernel: audit: type=1104 audit(1757465569.830:1542): pid=5410 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:49.832000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.141:22-10.0.0.1:55762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:54.835920 systemd[1]: Started sshd@16-10.0.0.141:22-10.0.0.1:41116.service. Sep 10 00:52:54.834000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.141:22-10.0.0.1:41116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:54.836935 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 10 00:52:54.836992 kernel: audit: type=1130 audit(1757465574.834:1544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.141:22-10.0.0.1:41116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:54.865000 audit[5425]: USER_ACCT pid=5425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:54.867512 sshd[5425]: Accepted publickey for core from 10.0.0.1 port 41116 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:52:54.869187 sshd[5425]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:52:54.867000 audit[5425]: CRED_ACQ pid=5425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:54.872383 systemd-logind[1191]: New session 17 of user core. Sep 10 00:52:54.873087 systemd[1]: Started session-17.scope. Sep 10 00:52:54.875382 kernel: audit: type=1101 audit(1757465574.865:1545): pid=5425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:54.875442 kernel: audit: type=1103 audit(1757465574.867:1546): pid=5425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:54.875468 kernel: audit: type=1006 audit(1757465574.867:1547): pid=5425 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Sep 10 00:52:54.877922 kernel: audit: type=1300 audit(1757465574.867:1547): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff603da450 a2=3 a3=0 items=0 ppid=1 pid=5425 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:54.867000 audit[5425]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff603da450 a2=3 a3=0 items=0 ppid=1 pid=5425 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:54.867000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:52:54.883656 kernel: audit: type=1327 audit(1757465574.867:1547): proctitle=737368643A20636F7265205B707269765D Sep 10 00:52:54.883711 kernel: audit: type=1105 audit(1757465574.875:1548): pid=5425 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:54.875000 audit[5425]: USER_START pid=5425 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:54.876000 audit[5427]: CRED_ACQ pid=5427 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:54.891060 kernel: audit: type=1103 audit(1757465574.876:1549): pid=5427 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:54.973405 sshd[5425]: pam_unix(sshd:session): session closed for user core Sep 10 00:52:54.973000 audit[5425]: USER_END pid=5425 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:54.977036 systemd[1]: Started sshd@17-10.0.0.141:22-10.0.0.1:41130.service. Sep 10 00:52:54.975000 audit[5425]: CRED_DISP pid=5425 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:54.979459 systemd[1]: sshd@16-10.0.0.141:22-10.0.0.1:41116.service: Deactivated successfully. Sep 10 00:52:54.980187 systemd[1]: session-17.scope: Deactivated successfully. Sep 10 00:52:54.980963 systemd-logind[1191]: Session 17 logged out. Waiting for processes to exit. Sep 10 00:52:54.981666 systemd-logind[1191]: Removed session 17. Sep 10 00:52:54.982250 kernel: audit: type=1106 audit(1757465574.973:1550): pid=5425 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:54.982290 kernel: audit: type=1104 audit(1757465574.975:1551): pid=5425 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:54.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.141:22-10.0.0.1:41130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:54.978000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.141:22-10.0.0.1:41116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:55.008000 audit[5437]: USER_ACCT pid=5437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:55.009836 sshd[5437]: Accepted publickey for core from 10.0.0.1 port 41130 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:52:55.009000 audit[5437]: CRED_ACQ pid=5437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:55.009000 audit[5437]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff04c65eb0 a2=3 a3=0 items=0 ppid=1 pid=5437 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:55.009000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:52:55.011015 sshd[5437]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:52:55.014002 systemd-logind[1191]: New session 18 of user core. Sep 10 00:52:55.014767 systemd[1]: Started session-18.scope. Sep 10 00:52:55.016000 audit[5437]: USER_START pid=5437 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:55.017000 audit[5440]: CRED_ACQ pid=5440 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:55.188302 sshd[5437]: pam_unix(sshd:session): session closed for user core Sep 10 00:52:55.188000 audit[5437]: USER_END pid=5437 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:55.188000 audit[5437]: CRED_DISP pid=5437 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:55.191179 systemd[1]: sshd@17-10.0.0.141:22-10.0.0.1:41130.service: Deactivated successfully. Sep 10 00:52:55.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.141:22-10.0.0.1:41130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:55.191714 systemd[1]: session-18.scope: Deactivated successfully. Sep 10 00:52:55.192186 systemd-logind[1191]: Session 18 logged out. Waiting for processes to exit. Sep 10 00:52:55.193146 systemd[1]: Started sshd@18-10.0.0.141:22-10.0.0.1:41144.service. Sep 10 00:52:55.191000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.141:22-10.0.0.1:41144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:55.193826 systemd-logind[1191]: Removed session 18. Sep 10 00:52:55.226000 audit[5449]: USER_ACCT pid=5449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:55.227819 sshd[5449]: Accepted publickey for core from 10.0.0.1 port 41144 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:52:55.227000 audit[5449]: CRED_ACQ pid=5449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:55.227000 audit[5449]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd2a9d41a0 a2=3 a3=0 items=0 ppid=1 pid=5449 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:55.227000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:52:55.228926 sshd[5449]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:52:55.231758 systemd-logind[1191]: New session 19 of user core. Sep 10 00:52:55.232455 systemd[1]: Started session-19.scope. Sep 10 00:52:55.234000 audit[5449]: USER_START pid=5449 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:55.235000 audit[5451]: CRED_ACQ pid=5451 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:56.727230 sshd[5449]: pam_unix(sshd:session): session closed for user core Sep 10 00:52:56.729000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.141:22-10.0.0.1:41150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:56.730566 systemd[1]: Started sshd@19-10.0.0.141:22-10.0.0.1:41150.service. Sep 10 00:52:56.731000 audit[5449]: USER_END pid=5449 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:56.731000 audit[5449]: CRED_DISP pid=5449 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:56.733000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.141:22-10.0.0.1:41144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:56.734666 systemd[1]: sshd@18-10.0.0.141:22-10.0.0.1:41144.service: Deactivated successfully. Sep 10 00:52:56.735264 systemd[1]: session-19.scope: Deactivated successfully. Sep 10 00:52:56.736507 systemd-logind[1191]: Session 19 logged out. Waiting for processes to exit. Sep 10 00:52:56.737590 systemd-logind[1191]: Removed session 19. Sep 10 00:52:56.736000 audit[5467]: NETFILTER_CFG table=filter:128 family=2 entries=10 op=nft_register_rule pid=5467 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:56.736000 audit[5467]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffc1357a400 a2=0 a3=7ffc1357a3ec items=0 ppid=2086 pid=5467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:56.736000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:56.742000 audit[5467]: NETFILTER_CFG table=nat:129 family=2 entries=24 op=nft_register_rule pid=5467 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:56.742000 audit[5467]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffc1357a400 a2=0 a3=7ffc1357a3ec items=0 ppid=2086 pid=5467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:56.742000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:56.756000 audit[5470]: NETFILTER_CFG table=filter:130 family=2 entries=22 op=nft_register_rule pid=5470 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:56.756000 audit[5470]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7fff24f518e0 a2=0 a3=7fff24f518cc items=0 ppid=2086 pid=5470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:56.756000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:56.760000 audit[5470]: NETFILTER_CFG table=nat:131 family=2 entries=24 op=nft_register_rule pid=5470 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:52:56.760000 audit[5470]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7fff24f518e0 a2=0 a3=0 items=0 ppid=2086 pid=5470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:56.760000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:52:56.762000 audit[5464]: USER_ACCT pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:56.764857 sshd[5464]: Accepted publickey for core from 10.0.0.1 port 41150 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:52:56.763000 audit[5464]: CRED_ACQ pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:56.765186 sshd[5464]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:52:56.763000 audit[5464]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffddea64f40 a2=3 a3=0 items=0 ppid=1 pid=5464 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:56.763000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:52:56.769705 systemd[1]: Started session-20.scope. Sep 10 00:52:56.769808 systemd-logind[1191]: New session 20 of user core. Sep 10 00:52:56.773000 audit[5464]: USER_START pid=5464 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:56.774000 audit[5471]: CRED_ACQ pid=5471 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:57.143094 sshd[5464]: pam_unix(sshd:session): session closed for user core Sep 10 00:52:57.142000 audit[5464]: USER_END pid=5464 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:57.142000 audit[5464]: CRED_DISP pid=5464 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:57.145631 systemd[1]: sshd@19-10.0.0.141:22-10.0.0.1:41150.service: Deactivated successfully. Sep 10 00:52:57.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.141:22-10.0.0.1:41150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:57.146181 systemd[1]: session-20.scope: Deactivated successfully. Sep 10 00:52:57.146917 systemd-logind[1191]: Session 20 logged out. Waiting for processes to exit. Sep 10 00:52:57.147885 systemd[1]: Started sshd@20-10.0.0.141:22-10.0.0.1:41160.service. Sep 10 00:52:57.146000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.141:22-10.0.0.1:41160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:57.149250 systemd-logind[1191]: Removed session 20. Sep 10 00:52:57.185000 audit[5480]: USER_ACCT pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:57.187317 sshd[5480]: Accepted publickey for core from 10.0.0.1 port 41160 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:52:57.186000 audit[5480]: CRED_ACQ pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:57.186000 audit[5480]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdc09b4ea0 a2=3 a3=0 items=0 ppid=1 pid=5480 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:52:57.186000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:52:57.188301 sshd[5480]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:52:57.191519 systemd-logind[1191]: New session 21 of user core. Sep 10 00:52:57.192287 systemd[1]: Started session-21.scope. Sep 10 00:52:57.194000 audit[5480]: USER_START pid=5480 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:57.195000 audit[5482]: CRED_ACQ pid=5482 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:57.311189 sshd[5480]: pam_unix(sshd:session): session closed for user core Sep 10 00:52:57.310000 audit[5480]: USER_END pid=5480 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:57.310000 audit[5480]: CRED_DISP pid=5480 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:52:57.313640 systemd[1]: sshd@20-10.0.0.141:22-10.0.0.1:41160.service: Deactivated successfully. Sep 10 00:52:57.312000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.141:22-10.0.0.1:41160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:52:57.314368 systemd[1]: session-21.scope: Deactivated successfully. Sep 10 00:52:57.314925 systemd-logind[1191]: Session 21 logged out. Waiting for processes to exit. Sep 10 00:52:57.315550 systemd-logind[1191]: Removed session 21. Sep 10 00:53:01.791505 kubelet[1980]: E0910 00:53:01.791465 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:53:02.315376 systemd[1]: Started sshd@21-10.0.0.141:22-10.0.0.1:38354.service. Sep 10 00:53:02.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.141:22-10.0.0.1:38354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:53:02.316748 kernel: kauditd_printk_skb: 57 callbacks suppressed Sep 10 00:53:02.316814 kernel: audit: type=1130 audit(1757465582.313:1593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.141:22-10.0.0.1:38354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:53:02.348000 audit[5499]: USER_ACCT pid=5499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:02.350721 sshd[5499]: Accepted publickey for core from 10.0.0.1 port 38354 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:53:02.352703 sshd[5499]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:53:02.350000 audit[5499]: CRED_ACQ pid=5499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:02.355888 systemd-logind[1191]: New session 22 of user core. Sep 10 00:53:02.356654 systemd[1]: Started session-22.scope. Sep 10 00:53:02.357706 kernel: audit: type=1101 audit(1757465582.348:1594): pid=5499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:02.357749 kernel: audit: type=1103 audit(1757465582.350:1595): pid=5499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:02.357771 kernel: audit: type=1006 audit(1757465582.350:1596): pid=5499 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Sep 10 00:53:02.350000 audit[5499]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1fd325c0 a2=3 a3=0 items=0 ppid=1 pid=5499 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:53:02.363629 kernel: audit: type=1300 audit(1757465582.350:1596): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1fd325c0 a2=3 a3=0 items=0 ppid=1 pid=5499 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:53:02.363682 kernel: audit: type=1327 audit(1757465582.350:1596): proctitle=737368643A20636F7265205B707269765D Sep 10 00:53:02.350000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:53:02.359000 audit[5499]: USER_START pid=5499 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:02.368831 kernel: audit: type=1105 audit(1757465582.359:1597): pid=5499 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:02.369074 kernel: audit: type=1103 audit(1757465582.360:1598): pid=5501 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:02.360000 audit[5501]: CRED_ACQ pid=5501 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:02.497443 sshd[5499]: pam_unix(sshd:session): session closed for user core Sep 10 00:53:02.496000 audit[5499]: USER_END pid=5499 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:02.499547 systemd[1]: sshd@21-10.0.0.141:22-10.0.0.1:38354.service: Deactivated successfully. Sep 10 00:53:02.500269 systemd[1]: session-22.scope: Deactivated successfully. Sep 10 00:53:02.500794 systemd-logind[1191]: Session 22 logged out. Waiting for processes to exit. Sep 10 00:53:02.496000 audit[5499]: CRED_DISP pid=5499 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:02.502668 systemd-logind[1191]: Removed session 22. Sep 10 00:53:02.505894 kernel: audit: type=1106 audit(1757465582.496:1599): pid=5499 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:02.505958 kernel: audit: type=1104 audit(1757465582.496:1600): pid=5499 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:02.498000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.141:22-10.0.0.1:38354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:53:03.791000 audit[5512]: NETFILTER_CFG table=filter:132 family=2 entries=22 op=nft_register_rule pid=5512 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:53:03.791000 audit[5512]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffe098aa660 a2=0 a3=7ffe098aa64c items=0 ppid=2086 pid=5512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:53:03.791000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:53:03.797000 audit[5512]: NETFILTER_CFG table=nat:133 family=2 entries=108 op=nft_register_chain pid=5512 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:53:03.797000 audit[5512]: SYSCALL arch=c000003e syscall=46 success=yes exit=50220 a0=3 a1=7ffe098aa660 a2=0 a3=7ffe098aa64c items=0 ppid=2086 pid=5512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:53:03.797000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:53:07.501872 systemd[1]: Started sshd@22-10.0.0.141:22-10.0.0.1:38364.service. Sep 10 00:53:07.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.141:22-10.0.0.1:38364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:53:07.502917 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 10 00:53:07.502964 kernel: audit: type=1130 audit(1757465587.501:1604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.141:22-10.0.0.1:38364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:53:07.532000 audit[5515]: USER_ACCT pid=5515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:07.533246 sshd[5515]: Accepted publickey for core from 10.0.0.1 port 38364 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:53:07.536000 audit[5515]: CRED_ACQ pid=5515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:07.537086 sshd[5515]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:53:07.540829 kernel: audit: type=1101 audit(1757465587.532:1605): pid=5515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:07.540936 kernel: audit: type=1103 audit(1757465587.536:1606): pid=5515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:07.541085 kernel: audit: type=1006 audit(1757465587.536:1607): pid=5515 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Sep 10 00:53:07.536000 audit[5515]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe828813e0 a2=3 a3=0 items=0 ppid=1 pid=5515 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:53:07.544162 systemd[1]: Started session-23.scope. Sep 10 00:53:07.545018 systemd-logind[1191]: New session 23 of user core. Sep 10 00:53:07.546264 kernel: audit: type=1300 audit(1757465587.536:1607): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe828813e0 a2=3 a3=0 items=0 ppid=1 pid=5515 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:53:07.536000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:53:07.547642 kernel: audit: type=1327 audit(1757465587.536:1607): proctitle=737368643A20636F7265205B707269765D Sep 10 00:53:07.549000 audit[5515]: USER_START pid=5515 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:07.554805 kernel: audit: type=1105 audit(1757465587.549:1608): pid=5515 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:07.550000 audit[5532]: CRED_ACQ pid=5532 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:07.558629 kernel: audit: type=1103 audit(1757465587.550:1609): pid=5532 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:07.666026 sshd[5515]: pam_unix(sshd:session): session closed for user core Sep 10 00:53:07.666000 audit[5515]: USER_END pid=5515 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:07.668490 systemd[1]: sshd@22-10.0.0.141:22-10.0.0.1:38364.service: Deactivated successfully. Sep 10 00:53:07.669199 systemd[1]: session-23.scope: Deactivated successfully. Sep 10 00:53:07.669723 systemd-logind[1191]: Session 23 logged out. Waiting for processes to exit. Sep 10 00:53:07.670447 systemd-logind[1191]: Removed session 23. Sep 10 00:53:07.666000 audit[5515]: CRED_DISP pid=5515 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:07.674571 kernel: audit: type=1106 audit(1757465587.666:1610): pid=5515 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:07.674629 kernel: audit: type=1104 audit(1757465587.666:1611): pid=5515 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:07.668000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.141:22-10.0.0.1:38364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:53:08.787210 kubelet[1980]: E0910 00:53:08.787179 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:53:11.026570 systemd[1]: run-containerd-runc-k8s.io-7360bf363999d5f3a9b8efabe796e59720f9a90a0ea80b6aa8797cd691420c89-runc.bTQUzl.mount: Deactivated successfully. Sep 10 00:53:11.120000 audit[5612]: NETFILTER_CFG table=filter:134 family=2 entries=9 op=nft_register_rule pid=5612 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:53:11.120000 audit[5612]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffde2cf6bd0 a2=0 a3=7ffde2cf6bbc items=0 ppid=2086 pid=5612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:53:11.120000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:53:11.128000 audit[5612]: NETFILTER_CFG table=nat:135 family=2 entries=55 op=nft_register_chain pid=5612 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:53:11.128000 audit[5612]: SYSCALL arch=c000003e syscall=46 success=yes exit=20100 a0=3 a1=7ffde2cf6bd0 a2=0 a3=7ffde2cf6bbc items=0 ppid=2086 pid=5612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:53:11.128000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:53:11.214526 systemd[1]: run-containerd-runc-k8s.io-2320ce9800eb37557b4274400e05fefdcc6e7613653557ef3703e9a1e3b45887-runc.gaIGxx.mount: Deactivated successfully. Sep 10 00:53:11.786458 kubelet[1980]: E0910 00:53:11.786409 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:53:12.670896 systemd[1]: Started sshd@23-10.0.0.141:22-10.0.0.1:60472.service. Sep 10 00:53:12.670000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.141:22-10.0.0.1:60472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:53:12.671906 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 10 00:53:12.671992 kernel: audit: type=1130 audit(1757465592.670:1615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.141:22-10.0.0.1:60472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:53:12.705000 audit[5614]: USER_ACCT pid=5614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:12.705948 sshd[5614]: Accepted publickey for core from 10.0.0.1 port 60472 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:53:12.706730 sshd[5614]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:53:12.705000 audit[5614]: CRED_ACQ pid=5614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:12.712197 systemd-logind[1191]: New session 24 of user core. Sep 10 00:53:12.712933 kernel: audit: type=1101 audit(1757465592.705:1616): pid=5614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:12.712981 kernel: audit: type=1103 audit(1757465592.705:1617): pid=5614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:12.713000 kernel: audit: type=1006 audit(1757465592.705:1618): pid=5614 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Sep 10 00:53:12.712978 systemd[1]: Started session-24.scope. Sep 10 00:53:12.715102 kernel: audit: type=1300 audit(1757465592.705:1618): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7d816770 a2=3 a3=0 items=0 ppid=1 pid=5614 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:53:12.705000 audit[5614]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7d816770 a2=3 a3=0 items=0 ppid=1 pid=5614 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:53:12.705000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:53:12.720156 kernel: audit: type=1327 audit(1757465592.705:1618): proctitle=737368643A20636F7265205B707269765D Sep 10 00:53:12.720205 kernel: audit: type=1105 audit(1757465592.714:1619): pid=5614 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:12.714000 audit[5614]: USER_START pid=5614 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:12.724124 kernel: audit: type=1103 audit(1757465592.714:1620): pid=5616 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:12.714000 audit[5616]: CRED_ACQ pid=5616 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:12.866938 sshd[5614]: pam_unix(sshd:session): session closed for user core Sep 10 00:53:12.867000 audit[5614]: USER_END pid=5614 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:12.869337 systemd[1]: sshd@23-10.0.0.141:22-10.0.0.1:60472.service: Deactivated successfully. Sep 10 00:53:12.870088 systemd[1]: session-24.scope: Deactivated successfully. Sep 10 00:53:12.870651 systemd-logind[1191]: Session 24 logged out. Waiting for processes to exit. Sep 10 00:53:12.871294 systemd-logind[1191]: Removed session 24. Sep 10 00:53:12.867000 audit[5614]: CRED_DISP pid=5614 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:12.875166 kernel: audit: type=1106 audit(1757465592.867:1621): pid=5614 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:12.875216 kernel: audit: type=1104 audit(1757465592.867:1622): pid=5614 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:12.867000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.141:22-10.0.0.1:60472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:53:14.786766 kubelet[1980]: E0910 00:53:14.786728 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:53:15.786816 kubelet[1980]: E0910 00:53:15.786774 1980 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:53:17.871323 systemd[1]: Started sshd@24-10.0.0.141:22-10.0.0.1:60488.service. Sep 10 00:53:17.870000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.141:22-10.0.0.1:60488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:53:17.876683 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 10 00:53:17.876790 kernel: audit: type=1130 audit(1757465597.870:1624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.141:22-10.0.0.1:60488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:53:17.904000 audit[5629]: USER_ACCT pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:17.905533 sshd[5629]: Accepted publickey for core from 10.0.0.1 port 60488 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:53:17.908000 audit[5629]: CRED_ACQ pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:17.909744 sshd[5629]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:53:17.913896 kernel: audit: type=1101 audit(1757465597.904:1625): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:17.913968 kernel: audit: type=1103 audit(1757465597.908:1626): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:17.913990 kernel: audit: type=1006 audit(1757465597.908:1627): pid=5629 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Sep 10 00:53:17.913632 systemd-logind[1191]: New session 25 of user core. Sep 10 00:53:17.913773 systemd[1]: Started session-25.scope. Sep 10 00:53:17.908000 audit[5629]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5be09680 a2=3 a3=0 items=0 ppid=1 pid=5629 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:53:17.908000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:53:17.920894 kernel: audit: type=1300 audit(1757465597.908:1627): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5be09680 a2=3 a3=0 items=0 ppid=1 pid=5629 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:53:17.920930 kernel: audit: type=1327 audit(1757465597.908:1627): proctitle=737368643A20636F7265205B707269765D Sep 10 00:53:17.920947 kernel: audit: type=1105 audit(1757465597.917:1628): pid=5629 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:17.917000 audit[5629]: USER_START pid=5629 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:17.925139 kernel: audit: type=1103 audit(1757465597.918:1629): pid=5631 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:17.918000 audit[5631]: CRED_ACQ pid=5631 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:18.037634 sshd[5629]: pam_unix(sshd:session): session closed for user core Sep 10 00:53:18.037000 audit[5629]: USER_END pid=5629 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:18.039813 systemd[1]: sshd@24-10.0.0.141:22-10.0.0.1:60488.service: Deactivated successfully. Sep 10 00:53:18.040536 systemd[1]: session-25.scope: Deactivated successfully. Sep 10 00:53:18.041252 systemd-logind[1191]: Session 25 logged out. Waiting for processes to exit. Sep 10 00:53:18.041861 systemd-logind[1191]: Removed session 25. Sep 10 00:53:18.037000 audit[5629]: CRED_DISP pid=5629 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:18.046279 kernel: audit: type=1106 audit(1757465598.037:1630): pid=5629 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:18.046379 kernel: audit: type=1104 audit(1757465598.037:1631): pid=5629 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:53:18.039000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.141:22-10.0.0.1:60488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'