Sep 10 00:39:05.032172 kernel: Linux version 5.15.191-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Tue Sep 9 23:10:34 -00 2025 Sep 10 00:39:05.032197 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=ebdf135b7dd8c9596dea7f2ca48bf31be0143f7cba32a9cc0282a66ca6db3272 Sep 10 00:39:05.032209 kernel: BIOS-provided physical RAM map: Sep 10 00:39:05.032216 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Sep 10 00:39:05.032222 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000007fffff] usable Sep 10 00:39:05.032240 kernel: BIOS-e820: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Sep 10 00:39:05.032249 kernel: BIOS-e820: [mem 0x0000000000808000-0x000000000080afff] usable Sep 10 00:39:05.032264 kernel: BIOS-e820: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Sep 10 00:39:05.032271 kernel: BIOS-e820: [mem 0x000000000080c000-0x000000000080ffff] usable Sep 10 00:39:05.032281 kernel: BIOS-e820: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Sep 10 00:39:05.032287 kernel: BIOS-e820: [mem 0x0000000000900000-0x000000009c8eefff] usable Sep 10 00:39:05.032294 kernel: BIOS-e820: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Sep 10 00:39:05.032301 kernel: BIOS-e820: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Sep 10 00:39:05.032308 kernel: BIOS-e820: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Sep 10 00:39:05.032317 kernel: BIOS-e820: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Sep 10 00:39:05.032326 kernel: BIOS-e820: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Sep 10 00:39:05.032333 kernel: BIOS-e820: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Sep 10 00:39:05.032340 kernel: BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Sep 10 00:39:05.032351 kernel: NX (Execute Disable) protection: active Sep 10 00:39:05.032358 kernel: e820: update [mem 0x9b475018-0x9b47ec57] usable ==> usable Sep 10 00:39:05.032366 kernel: e820: update [mem 0x9b475018-0x9b47ec57] usable ==> usable Sep 10 00:39:05.032373 kernel: e820: update [mem 0x9b438018-0x9b474e57] usable ==> usable Sep 10 00:39:05.032380 kernel: e820: update [mem 0x9b438018-0x9b474e57] usable ==> usable Sep 10 00:39:05.032387 kernel: extended physical RAM map: Sep 10 00:39:05.032394 kernel: reserve setup_data: [mem 0x0000000000000000-0x000000000009ffff] usable Sep 10 00:39:05.032403 kernel: reserve setup_data: [mem 0x0000000000100000-0x00000000007fffff] usable Sep 10 00:39:05.032410 kernel: reserve setup_data: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Sep 10 00:39:05.032418 kernel: reserve setup_data: [mem 0x0000000000808000-0x000000000080afff] usable Sep 10 00:39:05.032425 kernel: reserve setup_data: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Sep 10 00:39:05.032432 kernel: reserve setup_data: [mem 0x000000000080c000-0x000000000080ffff] usable Sep 10 00:39:05.032439 kernel: reserve setup_data: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Sep 10 00:39:05.032446 kernel: reserve setup_data: [mem 0x0000000000900000-0x000000009b438017] usable Sep 10 00:39:05.032454 kernel: reserve setup_data: [mem 0x000000009b438018-0x000000009b474e57] usable Sep 10 00:39:05.032461 kernel: reserve setup_data: [mem 0x000000009b474e58-0x000000009b475017] usable Sep 10 00:39:05.032468 kernel: reserve setup_data: [mem 0x000000009b475018-0x000000009b47ec57] usable Sep 10 00:39:05.032475 kernel: reserve setup_data: [mem 0x000000009b47ec58-0x000000009c8eefff] usable Sep 10 00:39:05.032484 kernel: reserve setup_data: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Sep 10 00:39:05.032491 kernel: reserve setup_data: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Sep 10 00:39:05.032498 kernel: reserve setup_data: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Sep 10 00:39:05.032506 kernel: reserve setup_data: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Sep 10 00:39:05.032516 kernel: reserve setup_data: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Sep 10 00:39:05.032524 kernel: reserve setup_data: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Sep 10 00:39:05.032532 kernel: reserve setup_data: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Sep 10 00:39:05.032541 kernel: efi: EFI v2.70 by EDK II Sep 10 00:39:05.032548 kernel: efi: SMBIOS=0x9c9ab000 ACPI=0x9cb7e000 ACPI 2.0=0x9cb7e014 MEMATTR=0x9b673018 RNG=0x9cb73018 Sep 10 00:39:05.032556 kernel: random: crng init done Sep 10 00:39:05.032564 kernel: SMBIOS 2.8 present. Sep 10 00:39:05.032572 kernel: DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 Sep 10 00:39:05.032579 kernel: Hypervisor detected: KVM Sep 10 00:39:05.032587 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Sep 10 00:39:05.032595 kernel: kvm-clock: cpu 0, msr 1619f001, primary cpu clock Sep 10 00:39:05.032603 kernel: kvm-clock: using sched offset of 6991030210 cycles Sep 10 00:39:05.032616 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Sep 10 00:39:05.032624 kernel: tsc: Detected 2794.748 MHz processor Sep 10 00:39:05.032634 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Sep 10 00:39:05.032643 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Sep 10 00:39:05.032651 kernel: last_pfn = 0x9cf40 max_arch_pfn = 0x400000000 Sep 10 00:39:05.032659 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Sep 10 00:39:05.032667 kernel: Using GB pages for direct mapping Sep 10 00:39:05.032674 kernel: Secure boot disabled Sep 10 00:39:05.032682 kernel: ACPI: Early table checksum verification disabled Sep 10 00:39:05.032692 kernel: ACPI: RSDP 0x000000009CB7E014 000024 (v02 BOCHS ) Sep 10 00:39:05.032699 kernel: ACPI: XSDT 0x000000009CB7D0E8 000054 (v01 BOCHS BXPC 00000001 01000013) Sep 10 00:39:05.032707 kernel: ACPI: FACP 0x000000009CB79000 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Sep 10 00:39:05.032715 kernel: ACPI: DSDT 0x000000009CB7A000 0021BA (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 10 00:39:05.032726 kernel: ACPI: FACS 0x000000009CBDD000 000040 Sep 10 00:39:05.032734 kernel: ACPI: APIC 0x000000009CB78000 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 10 00:39:05.032742 kernel: ACPI: HPET 0x000000009CB77000 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 10 00:39:05.032752 kernel: ACPI: MCFG 0x000000009CB76000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 10 00:39:05.032760 kernel: ACPI: WAET 0x000000009CB75000 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Sep 10 00:39:05.032770 kernel: ACPI: BGRT 0x000000009CB74000 000038 (v01 INTEL EDK2 00000002 01000013) Sep 10 00:39:05.032777 kernel: ACPI: Reserving FACP table memory at [mem 0x9cb79000-0x9cb790f3] Sep 10 00:39:05.032785 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cb7a000-0x9cb7c1b9] Sep 10 00:39:05.032793 kernel: ACPI: Reserving FACS table memory at [mem 0x9cbdd000-0x9cbdd03f] Sep 10 00:39:05.032801 kernel: ACPI: Reserving APIC table memory at [mem 0x9cb78000-0x9cb7808f] Sep 10 00:39:05.032809 kernel: ACPI: Reserving HPET table memory at [mem 0x9cb77000-0x9cb77037] Sep 10 00:39:05.032817 kernel: ACPI: Reserving MCFG table memory at [mem 0x9cb76000-0x9cb7603b] Sep 10 00:39:05.032825 kernel: ACPI: Reserving WAET table memory at [mem 0x9cb75000-0x9cb75027] Sep 10 00:39:05.032833 kernel: ACPI: Reserving BGRT table memory at [mem 0x9cb74000-0x9cb74037] Sep 10 00:39:05.032843 kernel: No NUMA configuration found Sep 10 00:39:05.032851 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cf3ffff] Sep 10 00:39:05.032859 kernel: NODE_DATA(0) allocated [mem 0x9cea6000-0x9ceabfff] Sep 10 00:39:05.032867 kernel: Zone ranges: Sep 10 00:39:05.032875 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Sep 10 00:39:05.032883 kernel: DMA32 [mem 0x0000000001000000-0x000000009cf3ffff] Sep 10 00:39:05.032891 kernel: Normal empty Sep 10 00:39:05.032899 kernel: Movable zone start for each node Sep 10 00:39:05.032907 kernel: Early memory node ranges Sep 10 00:39:05.032916 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Sep 10 00:39:05.032924 kernel: node 0: [mem 0x0000000000100000-0x00000000007fffff] Sep 10 00:39:05.032932 kernel: node 0: [mem 0x0000000000808000-0x000000000080afff] Sep 10 00:39:05.032940 kernel: node 0: [mem 0x000000000080c000-0x000000000080ffff] Sep 10 00:39:05.032948 kernel: node 0: [mem 0x0000000000900000-0x000000009c8eefff] Sep 10 00:39:05.032956 kernel: node 0: [mem 0x000000009cbff000-0x000000009cf3ffff] Sep 10 00:39:05.032963 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cf3ffff] Sep 10 00:39:05.032971 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Sep 10 00:39:05.032979 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Sep 10 00:39:05.032987 kernel: On node 0, zone DMA: 8 pages in unavailable ranges Sep 10 00:39:05.032997 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Sep 10 00:39:05.033004 kernel: On node 0, zone DMA: 240 pages in unavailable ranges Sep 10 00:39:05.033012 kernel: On node 0, zone DMA32: 784 pages in unavailable ranges Sep 10 00:39:05.033020 kernel: On node 0, zone DMA32: 12480 pages in unavailable ranges Sep 10 00:39:05.033028 kernel: ACPI: PM-Timer IO Port: 0x608 Sep 10 00:39:05.033036 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Sep 10 00:39:05.033045 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Sep 10 00:39:05.033052 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Sep 10 00:39:05.033060 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Sep 10 00:39:05.033070 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Sep 10 00:39:05.033078 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Sep 10 00:39:05.033086 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Sep 10 00:39:05.033096 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Sep 10 00:39:05.033119 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Sep 10 00:39:05.033127 kernel: TSC deadline timer available Sep 10 00:39:05.033135 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Sep 10 00:39:05.033143 kernel: kvm-guest: KVM setup pv remote TLB flush Sep 10 00:39:05.033150 kernel: kvm-guest: setup PV sched yield Sep 10 00:39:05.033160 kernel: [mem 0xc0000000-0xffffffff] available for PCI devices Sep 10 00:39:05.033168 kernel: Booting paravirtualized kernel on KVM Sep 10 00:39:05.033182 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Sep 10 00:39:05.033192 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Sep 10 00:39:05.033200 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Sep 10 00:39:05.033208 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Sep 10 00:39:05.033216 kernel: pcpu-alloc: [0] 0 1 2 3 Sep 10 00:39:05.033224 kernel: kvm-guest: setup async PF for cpu 0 Sep 10 00:39:05.033233 kernel: kvm-guest: stealtime: cpu 0, msr 9b21c0c0 Sep 10 00:39:05.033241 kernel: kvm-guest: PV spinlocks enabled Sep 10 00:39:05.033256 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Sep 10 00:39:05.033265 kernel: Built 1 zonelists, mobility grouping on. Total pages: 629759 Sep 10 00:39:05.033275 kernel: Policy zone: DMA32 Sep 10 00:39:05.033285 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=ebdf135b7dd8c9596dea7f2ca48bf31be0143f7cba32a9cc0282a66ca6db3272 Sep 10 00:39:05.033293 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Sep 10 00:39:05.033302 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Sep 10 00:39:05.033311 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Sep 10 00:39:05.033320 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Sep 10 00:39:05.033329 kernel: Memory: 2397432K/2567000K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47492K init, 4088K bss, 169308K reserved, 0K cma-reserved) Sep 10 00:39:05.033337 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Sep 10 00:39:05.033345 kernel: ftrace: allocating 34612 entries in 136 pages Sep 10 00:39:05.033353 kernel: ftrace: allocated 136 pages with 2 groups Sep 10 00:39:05.033362 kernel: rcu: Hierarchical RCU implementation. Sep 10 00:39:05.033371 kernel: rcu: RCU event tracing is enabled. Sep 10 00:39:05.033379 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Sep 10 00:39:05.033389 kernel: Rude variant of Tasks RCU enabled. Sep 10 00:39:05.033397 kernel: Tracing variant of Tasks RCU enabled. Sep 10 00:39:05.033406 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Sep 10 00:39:05.033414 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Sep 10 00:39:05.033422 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Sep 10 00:39:05.033431 kernel: Console: colour dummy device 80x25 Sep 10 00:39:05.033439 kernel: printk: console [ttyS0] enabled Sep 10 00:39:05.033447 kernel: ACPI: Core revision 20210730 Sep 10 00:39:05.033456 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Sep 10 00:39:05.033466 kernel: APIC: Switch to symmetric I/O mode setup Sep 10 00:39:05.033474 kernel: x2apic enabled Sep 10 00:39:05.033482 kernel: Switched APIC routing to physical x2apic. Sep 10 00:39:05.033491 kernel: kvm-guest: setup PV IPIs Sep 10 00:39:05.033499 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Sep 10 00:39:05.033507 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Sep 10 00:39:05.033515 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794748) Sep 10 00:39:05.033524 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Sep 10 00:39:05.033535 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Sep 10 00:39:05.033545 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Sep 10 00:39:05.033553 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Sep 10 00:39:05.033562 kernel: Spectre V2 : Mitigation: Retpolines Sep 10 00:39:05.033570 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Sep 10 00:39:05.033578 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Sep 10 00:39:05.033587 kernel: active return thunk: retbleed_return_thunk Sep 10 00:39:05.033595 kernel: RETBleed: Mitigation: untrained return thunk Sep 10 00:39:05.033606 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Sep 10 00:39:05.033614 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Sep 10 00:39:05.033624 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Sep 10 00:39:05.033633 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Sep 10 00:39:05.033641 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Sep 10 00:39:05.033667 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Sep 10 00:39:05.033678 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Sep 10 00:39:05.033703 kernel: Freeing SMP alternatives memory: 32K Sep 10 00:39:05.033736 kernel: pid_max: default: 32768 minimum: 301 Sep 10 00:39:05.033750 kernel: LSM: Security Framework initializing Sep 10 00:39:05.033758 kernel: SELinux: Initializing. Sep 10 00:39:05.033770 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 10 00:39:05.033778 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 10 00:39:05.033787 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Sep 10 00:39:05.033795 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Sep 10 00:39:05.033804 kernel: ... version: 0 Sep 10 00:39:05.033812 kernel: ... bit width: 48 Sep 10 00:39:05.033820 kernel: ... generic registers: 6 Sep 10 00:39:05.033829 kernel: ... value mask: 0000ffffffffffff Sep 10 00:39:05.033837 kernel: ... max period: 00007fffffffffff Sep 10 00:39:05.033847 kernel: ... fixed-purpose events: 0 Sep 10 00:39:05.033855 kernel: ... event mask: 000000000000003f Sep 10 00:39:05.033863 kernel: signal: max sigframe size: 1776 Sep 10 00:39:05.033872 kernel: rcu: Hierarchical SRCU implementation. Sep 10 00:39:05.033880 kernel: smp: Bringing up secondary CPUs ... Sep 10 00:39:05.033888 kernel: x86: Booting SMP configuration: Sep 10 00:39:05.033896 kernel: .... node #0, CPUs: #1 Sep 10 00:39:05.033905 kernel: kvm-clock: cpu 1, msr 1619f041, secondary cpu clock Sep 10 00:39:05.033923 kernel: kvm-guest: setup async PF for cpu 1 Sep 10 00:39:05.033942 kernel: kvm-guest: stealtime: cpu 1, msr 9b29c0c0 Sep 10 00:39:05.033951 kernel: #2 Sep 10 00:39:05.033959 kernel: kvm-clock: cpu 2, msr 1619f081, secondary cpu clock Sep 10 00:39:05.033968 kernel: kvm-guest: setup async PF for cpu 2 Sep 10 00:39:05.033976 kernel: kvm-guest: stealtime: cpu 2, msr 9b31c0c0 Sep 10 00:39:05.033984 kernel: #3 Sep 10 00:39:05.033993 kernel: kvm-clock: cpu 3, msr 1619f0c1, secondary cpu clock Sep 10 00:39:05.034001 kernel: kvm-guest: setup async PF for cpu 3 Sep 10 00:39:05.034009 kernel: kvm-guest: stealtime: cpu 3, msr 9b39c0c0 Sep 10 00:39:05.034033 kernel: smp: Brought up 1 node, 4 CPUs Sep 10 00:39:05.034041 kernel: smpboot: Max logical packages: 1 Sep 10 00:39:05.034050 kernel: smpboot: Total of 4 processors activated (22357.98 BogoMIPS) Sep 10 00:39:05.034058 kernel: devtmpfs: initialized Sep 10 00:39:05.034066 kernel: x86/mm: Memory block size: 128MB Sep 10 00:39:05.034075 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00800000-0x00807fff] (32768 bytes) Sep 10 00:39:05.034083 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x0080b000-0x0080bfff] (4096 bytes) Sep 10 00:39:05.034092 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00810000-0x008fffff] (983040 bytes) Sep 10 00:39:05.034100 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cb7f000-0x9cbfefff] (524288 bytes) Sep 10 00:39:05.034121 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cf60000-0x9cffffff] (655360 bytes) Sep 10 00:39:05.034130 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Sep 10 00:39:05.034138 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Sep 10 00:39:05.034146 kernel: pinctrl core: initialized pinctrl subsystem Sep 10 00:39:05.034155 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Sep 10 00:39:05.034163 kernel: audit: initializing netlink subsys (disabled) Sep 10 00:39:05.034172 kernel: audit: type=2000 audit(1757464744.858:1): state=initialized audit_enabled=0 res=1 Sep 10 00:39:05.034180 kernel: thermal_sys: Registered thermal governor 'step_wise' Sep 10 00:39:05.034188 kernel: thermal_sys: Registered thermal governor 'user_space' Sep 10 00:39:05.034198 kernel: cpuidle: using governor menu Sep 10 00:39:05.034206 kernel: ACPI: bus type PCI registered Sep 10 00:39:05.034215 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Sep 10 00:39:05.034223 kernel: dca service started, version 1.12.1 Sep 10 00:39:05.034232 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) Sep 10 00:39:05.034240 kernel: PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 Sep 10 00:39:05.034248 kernel: PCI: Using configuration type 1 for base access Sep 10 00:39:05.034265 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Sep 10 00:39:05.034274 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Sep 10 00:39:05.034285 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Sep 10 00:39:05.034294 kernel: ACPI: Added _OSI(Module Device) Sep 10 00:39:05.034302 kernel: ACPI: Added _OSI(Processor Device) Sep 10 00:39:05.034310 kernel: ACPI: Added _OSI(Processor Aggregator Device) Sep 10 00:39:05.034319 kernel: ACPI: Added _OSI(Linux-Dell-Video) Sep 10 00:39:05.034327 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Sep 10 00:39:05.034336 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Sep 10 00:39:05.034344 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Sep 10 00:39:05.034352 kernel: ACPI: Interpreter enabled Sep 10 00:39:05.034362 kernel: ACPI: PM: (supports S0 S3 S5) Sep 10 00:39:05.034370 kernel: ACPI: Using IOAPIC for interrupt routing Sep 10 00:39:05.034379 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Sep 10 00:39:05.034387 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Sep 10 00:39:05.034396 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Sep 10 00:39:05.034566 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Sep 10 00:39:05.034656 kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] Sep 10 00:39:05.034739 kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Sep 10 00:39:05.034752 kernel: PCI host bridge to bus 0000:00 Sep 10 00:39:05.034852 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Sep 10 00:39:05.034930 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Sep 10 00:39:05.035005 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Sep 10 00:39:05.035079 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xafffffff window] Sep 10 00:39:05.035179 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Sep 10 00:39:05.035264 kernel: pci_bus 0000:00: root bus resource [mem 0x800000000-0xfffffffff window] Sep 10 00:39:05.035344 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Sep 10 00:39:05.035454 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 Sep 10 00:39:05.035556 kernel: pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 Sep 10 00:39:05.035642 kernel: pci 0000:00:01.0: reg 0x10: [mem 0xc0000000-0xc0ffffff pref] Sep 10 00:39:05.035724 kernel: pci 0000:00:01.0: reg 0x18: [mem 0xc1044000-0xc1044fff] Sep 10 00:39:05.035807 kernel: pci 0000:00:01.0: reg 0x30: [mem 0xffff0000-0xffffffff pref] Sep 10 00:39:05.035893 kernel: pci 0000:00:01.0: BAR 0: assigned to efifb Sep 10 00:39:05.035977 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Sep 10 00:39:05.036079 kernel: pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 Sep 10 00:39:05.036838 kernel: pci 0000:00:02.0: reg 0x10: [io 0x6100-0x611f] Sep 10 00:39:05.036937 kernel: pci 0000:00:02.0: reg 0x14: [mem 0xc1043000-0xc1043fff] Sep 10 00:39:05.037022 kernel: pci 0000:00:02.0: reg 0x20: [mem 0x800000000-0x800003fff 64bit pref] Sep 10 00:39:05.037137 kernel: pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 Sep 10 00:39:05.037230 kernel: pci 0000:00:03.0: reg 0x10: [io 0x6000-0x607f] Sep 10 00:39:05.037324 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xc1042000-0xc1042fff] Sep 10 00:39:05.037408 kernel: pci 0000:00:03.0: reg 0x20: [mem 0x800004000-0x800007fff 64bit pref] Sep 10 00:39:05.037526 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 Sep 10 00:39:05.037611 kernel: pci 0000:00:04.0: reg 0x10: [io 0x60e0-0x60ff] Sep 10 00:39:05.037694 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xc1041000-0xc1041fff] Sep 10 00:39:05.037777 kernel: pci 0000:00:04.0: reg 0x20: [mem 0x800008000-0x80000bfff 64bit pref] Sep 10 00:39:05.037862 kernel: pci 0000:00:04.0: reg 0x30: [mem 0xfffc0000-0xffffffff pref] Sep 10 00:39:05.037957 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 Sep 10 00:39:05.038039 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Sep 10 00:39:05.038190 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 Sep 10 00:39:05.038300 kernel: pci 0000:00:1f.2: reg 0x20: [io 0x60c0-0x60df] Sep 10 00:39:05.038382 kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xc1040000-0xc1040fff] Sep 10 00:39:05.038482 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 Sep 10 00:39:05.038565 kernel: pci 0000:00:1f.3: reg 0x20: [io 0x6080-0x60bf] Sep 10 00:39:05.038576 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Sep 10 00:39:05.038585 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Sep 10 00:39:05.038593 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Sep 10 00:39:05.038602 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Sep 10 00:39:05.038610 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Sep 10 00:39:05.038619 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Sep 10 00:39:05.038630 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Sep 10 00:39:05.038638 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Sep 10 00:39:05.038649 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Sep 10 00:39:05.038658 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Sep 10 00:39:05.038666 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Sep 10 00:39:05.038674 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Sep 10 00:39:05.038683 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Sep 10 00:39:05.038691 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Sep 10 00:39:05.038699 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Sep 10 00:39:05.038709 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Sep 10 00:39:05.038717 kernel: iommu: Default domain type: Translated Sep 10 00:39:05.038726 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Sep 10 00:39:05.038806 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Sep 10 00:39:05.038888 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Sep 10 00:39:05.038970 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Sep 10 00:39:05.038981 kernel: vgaarb: loaded Sep 10 00:39:05.038989 kernel: pps_core: LinuxPPS API ver. 1 registered Sep 10 00:39:05.038998 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Sep 10 00:39:05.039008 kernel: PTP clock support registered Sep 10 00:39:05.039017 kernel: Registered efivars operations Sep 10 00:39:05.039025 kernel: PCI: Using ACPI for IRQ routing Sep 10 00:39:05.039033 kernel: PCI: pci_cache_line_size set to 64 bytes Sep 10 00:39:05.039042 kernel: e820: reserve RAM buffer [mem 0x0080b000-0x008fffff] Sep 10 00:39:05.039050 kernel: e820: reserve RAM buffer [mem 0x00810000-0x008fffff] Sep 10 00:39:05.039058 kernel: e820: reserve RAM buffer [mem 0x9b438018-0x9bffffff] Sep 10 00:39:05.039066 kernel: e820: reserve RAM buffer [mem 0x9b475018-0x9bffffff] Sep 10 00:39:05.039074 kernel: e820: reserve RAM buffer [mem 0x9c8ef000-0x9fffffff] Sep 10 00:39:05.039084 kernel: e820: reserve RAM buffer [mem 0x9cf40000-0x9fffffff] Sep 10 00:39:05.039092 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Sep 10 00:39:05.039113 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Sep 10 00:39:05.039122 kernel: clocksource: Switched to clocksource kvm-clock Sep 10 00:39:05.039131 kernel: VFS: Disk quotas dquot_6.6.0 Sep 10 00:39:05.039139 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Sep 10 00:39:05.039148 kernel: pnp: PnP ACPI init Sep 10 00:39:05.039263 kernel: system 00:05: [mem 0xb0000000-0xbfffffff window] has been reserved Sep 10 00:39:05.039280 kernel: pnp: PnP ACPI: found 6 devices Sep 10 00:39:05.039288 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Sep 10 00:39:05.039297 kernel: NET: Registered PF_INET protocol family Sep 10 00:39:05.039305 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Sep 10 00:39:05.039314 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Sep 10 00:39:05.039322 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Sep 10 00:39:05.039331 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Sep 10 00:39:05.039339 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Sep 10 00:39:05.039348 kernel: TCP: Hash tables configured (established 32768 bind 32768) Sep 10 00:39:05.039358 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 10 00:39:05.039366 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 10 00:39:05.039374 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Sep 10 00:39:05.039382 kernel: NET: Registered PF_XDP protocol family Sep 10 00:39:05.039468 kernel: pci 0000:00:04.0: can't claim BAR 6 [mem 0xfffc0000-0xffffffff pref]: no compatible bridge window Sep 10 00:39:05.039551 kernel: pci 0000:00:04.0: BAR 6: assigned [mem 0x9d000000-0x9d03ffff pref] Sep 10 00:39:05.039626 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Sep 10 00:39:05.039703 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Sep 10 00:39:05.039785 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Sep 10 00:39:05.039859 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xafffffff window] Sep 10 00:39:05.039931 kernel: pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] Sep 10 00:39:05.040003 kernel: pci_bus 0000:00: resource 9 [mem 0x800000000-0xfffffffff window] Sep 10 00:39:05.040014 kernel: PCI: CLS 0 bytes, default 64 Sep 10 00:39:05.040022 kernel: Initialise system trusted keyrings Sep 10 00:39:05.040031 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Sep 10 00:39:05.040039 kernel: Key type asymmetric registered Sep 10 00:39:05.040050 kernel: Asymmetric key parser 'x509' registered Sep 10 00:39:05.040058 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Sep 10 00:39:05.040067 kernel: io scheduler mq-deadline registered Sep 10 00:39:05.040085 kernel: io scheduler kyber registered Sep 10 00:39:05.040095 kernel: io scheduler bfq registered Sep 10 00:39:05.040116 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Sep 10 00:39:05.040126 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Sep 10 00:39:05.040135 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Sep 10 00:39:05.040143 kernel: ACPI: \_SB_.GSIE: Enabled at IRQ 20 Sep 10 00:39:05.040152 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Sep 10 00:39:05.040162 kernel: 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Sep 10 00:39:05.040173 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Sep 10 00:39:05.040182 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Sep 10 00:39:05.040191 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Sep 10 00:39:05.040200 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Sep 10 00:39:05.040309 kernel: rtc_cmos 00:04: RTC can wake from S4 Sep 10 00:39:05.040389 kernel: rtc_cmos 00:04: registered as rtc0 Sep 10 00:39:05.040473 kernel: rtc_cmos 00:04: setting system clock to 2025-09-10T00:39:04 UTC (1757464744) Sep 10 00:39:05.040556 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Sep 10 00:39:05.040567 kernel: efifb: probing for efifb Sep 10 00:39:05.040576 kernel: efifb: framebuffer at 0xc0000000, using 4000k, total 4000k Sep 10 00:39:05.040585 kernel: efifb: mode is 1280x800x32, linelength=5120, pages=1 Sep 10 00:39:05.040594 kernel: efifb: scrolling: redraw Sep 10 00:39:05.040603 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Sep 10 00:39:05.040611 kernel: Console: switching to colour frame buffer device 160x50 Sep 10 00:39:05.040620 kernel: fb0: EFI VGA frame buffer device Sep 10 00:39:05.040631 kernel: pstore: Registered efi as persistent store backend Sep 10 00:39:05.040640 kernel: NET: Registered PF_INET6 protocol family Sep 10 00:39:05.040648 kernel: Segment Routing with IPv6 Sep 10 00:39:05.040657 kernel: In-situ OAM (IOAM) with IPv6 Sep 10 00:39:05.040668 kernel: NET: Registered PF_PACKET protocol family Sep 10 00:39:05.040677 kernel: Key type dns_resolver registered Sep 10 00:39:05.040687 kernel: IPI shorthand broadcast: enabled Sep 10 00:39:05.040696 kernel: sched_clock: Marking stable (490060941, 157477297)->(723526561, -75988323) Sep 10 00:39:05.040705 kernel: registered taskstats version 1 Sep 10 00:39:05.040714 kernel: Loading compiled-in X.509 certificates Sep 10 00:39:05.040723 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.191-flatcar: 3af57cd809cc9e43d7af9f276bb20b532a4147af' Sep 10 00:39:05.040731 kernel: Key type .fscrypt registered Sep 10 00:39:05.040740 kernel: Key type fscrypt-provisioning registered Sep 10 00:39:05.040749 kernel: pstore: Using crash dump compression: deflate Sep 10 00:39:05.040758 kernel: ima: No TPM chip found, activating TPM-bypass! Sep 10 00:39:05.040768 kernel: ima: Allocated hash algorithm: sha1 Sep 10 00:39:05.040777 kernel: ima: No architecture policies found Sep 10 00:39:05.040786 kernel: clk: Disabling unused clocks Sep 10 00:39:05.040794 kernel: Freeing unused kernel image (initmem) memory: 47492K Sep 10 00:39:05.040803 kernel: Write protecting the kernel read-only data: 28672k Sep 10 00:39:05.040812 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Sep 10 00:39:05.040821 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Sep 10 00:39:05.040830 kernel: Run /init as init process Sep 10 00:39:05.040839 kernel: with arguments: Sep 10 00:39:05.040849 kernel: /init Sep 10 00:39:05.040858 kernel: with environment: Sep 10 00:39:05.040867 kernel: HOME=/ Sep 10 00:39:05.040875 kernel: TERM=linux Sep 10 00:39:05.040884 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Sep 10 00:39:05.040895 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 10 00:39:05.040906 systemd[1]: Detected virtualization kvm. Sep 10 00:39:05.040916 systemd[1]: Detected architecture x86-64. Sep 10 00:39:05.040926 systemd[1]: Running in initrd. Sep 10 00:39:05.040935 systemd[1]: No hostname configured, using default hostname. Sep 10 00:39:05.040944 systemd[1]: Hostname set to . Sep 10 00:39:05.040954 systemd[1]: Initializing machine ID from VM UUID. Sep 10 00:39:05.040963 systemd[1]: Queued start job for default target initrd.target. Sep 10 00:39:05.040973 systemd[1]: Started systemd-ask-password-console.path. Sep 10 00:39:05.040982 systemd[1]: Reached target cryptsetup.target. Sep 10 00:39:05.040991 systemd[1]: Reached target paths.target. Sep 10 00:39:05.041001 systemd[1]: Reached target slices.target. Sep 10 00:39:05.041010 systemd[1]: Reached target swap.target. Sep 10 00:39:05.041019 systemd[1]: Reached target timers.target. Sep 10 00:39:05.041029 systemd[1]: Listening on iscsid.socket. Sep 10 00:39:05.041039 systemd[1]: Listening on iscsiuio.socket. Sep 10 00:39:05.041048 systemd[1]: Listening on systemd-journald-audit.socket. Sep 10 00:39:05.041058 systemd[1]: Listening on systemd-journald-dev-log.socket. Sep 10 00:39:05.041067 systemd[1]: Listening on systemd-journald.socket. Sep 10 00:39:05.041078 systemd[1]: Listening on systemd-networkd.socket. Sep 10 00:39:05.041087 systemd[1]: Listening on systemd-udevd-control.socket. Sep 10 00:39:05.041097 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 10 00:39:05.041117 systemd[1]: Reached target sockets.target. Sep 10 00:39:05.041129 systemd[1]: Starting kmod-static-nodes.service... Sep 10 00:39:05.041138 systemd[1]: Finished network-cleanup.service. Sep 10 00:39:05.041147 systemd[1]: Starting systemd-fsck-usr.service... Sep 10 00:39:05.041156 systemd[1]: Starting systemd-journald.service... Sep 10 00:39:05.041165 systemd[1]: Starting systemd-modules-load.service... Sep 10 00:39:05.041176 systemd[1]: Starting systemd-resolved.service... Sep 10 00:39:05.041185 systemd[1]: Starting systemd-vconsole-setup.service... Sep 10 00:39:05.041195 systemd[1]: Finished kmod-static-nodes.service. Sep 10 00:39:05.041204 systemd[1]: Finished systemd-fsck-usr.service. Sep 10 00:39:05.041213 kernel: audit: type=1130 audit(1757464745.030:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.041223 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 10 00:39:05.041232 systemd[1]: Finished systemd-vconsole-setup.service. Sep 10 00:39:05.041242 kernel: audit: type=1130 audit(1757464745.040:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.041264 systemd-journald[199]: Journal started Sep 10 00:39:05.041309 systemd-journald[199]: Runtime Journal (/run/log/journal/578098d1f965474b89cbddc8208f609c) is 6.0M, max 48.4M, 42.4M free. Sep 10 00:39:05.030000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.040000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.033948 systemd-modules-load[200]: Inserted module 'overlay' Sep 10 00:39:05.045203 systemd[1]: Started systemd-journald.service. Sep 10 00:39:05.047647 systemd[1]: Starting dracut-cmdline-ask.service... Sep 10 00:39:05.052176 kernel: audit: type=1130 audit(1757464745.046:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.046000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.052425 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 10 00:39:05.052000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.055286 systemd-resolved[201]: Positive Trust Anchors: Sep 10 00:39:05.055304 systemd-resolved[201]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 10 00:39:05.056409 kernel: audit: type=1130 audit(1757464745.052:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.055331 systemd-resolved[201]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 10 00:39:05.057600 systemd-resolved[201]: Defaulting to hostname 'linux'. Sep 10 00:39:05.058389 systemd[1]: Started systemd-resolved.service. Sep 10 00:39:05.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.058537 systemd[1]: Reached target nss-lookup.target. Sep 10 00:39:05.062112 kernel: audit: type=1130 audit(1757464745.058:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.070131 systemd[1]: Finished dracut-cmdline-ask.service. Sep 10 00:39:05.074415 kernel: audit: type=1130 audit(1757464745.070:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.070000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.070890 systemd[1]: Starting dracut-cmdline.service... Sep 10 00:39:05.079239 dracut-cmdline[218]: dracut-dracut-053 Sep 10 00:39:05.081072 dracut-cmdline[218]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=ebdf135b7dd8c9596dea7f2ca48bf31be0143f7cba32a9cc0282a66ca6db3272 Sep 10 00:39:05.107138 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Sep 10 00:39:05.111594 systemd-modules-load[200]: Inserted module 'br_netfilter' Sep 10 00:39:05.112564 kernel: Bridge firewalling registered Sep 10 00:39:05.130169 kernel: SCSI subsystem initialized Sep 10 00:39:05.143206 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Sep 10 00:39:05.143292 kernel: device-mapper: uevent: version 1.0.3 Sep 10 00:39:05.143304 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Sep 10 00:39:05.146017 systemd-modules-load[200]: Inserted module 'dm_multipath' Sep 10 00:39:05.147573 systemd[1]: Finished systemd-modules-load.service. Sep 10 00:39:05.153567 kernel: audit: type=1130 audit(1757464745.148:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.148000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.149275 systemd[1]: Starting systemd-sysctl.service... Sep 10 00:39:05.155340 kernel: Loading iSCSI transport class v2.0-870. Sep 10 00:39:05.159176 systemd[1]: Finished systemd-sysctl.service. Sep 10 00:39:05.164486 kernel: audit: type=1130 audit(1757464745.160:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.180150 kernel: iscsi: registered transport (tcp) Sep 10 00:39:05.203164 kernel: iscsi: registered transport (qla4xxx) Sep 10 00:39:05.203266 kernel: QLogic iSCSI HBA Driver Sep 10 00:39:05.236533 systemd[1]: Finished dracut-cmdline.service. Sep 10 00:39:05.242404 kernel: audit: type=1130 audit(1757464745.237:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.237000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.238683 systemd[1]: Starting dracut-pre-udev.service... Sep 10 00:39:05.288178 kernel: raid6: avx2x4 gen() 16836 MB/s Sep 10 00:39:05.305164 kernel: raid6: avx2x4 xor() 6328 MB/s Sep 10 00:39:05.322160 kernel: raid6: avx2x2 gen() 25630 MB/s Sep 10 00:39:05.339147 kernel: raid6: avx2x2 xor() 18804 MB/s Sep 10 00:39:05.356148 kernel: raid6: avx2x1 gen() 25832 MB/s Sep 10 00:39:05.373138 kernel: raid6: avx2x1 xor() 14886 MB/s Sep 10 00:39:05.390146 kernel: raid6: sse2x4 gen() 13965 MB/s Sep 10 00:39:05.407144 kernel: raid6: sse2x4 xor() 6416 MB/s Sep 10 00:39:05.424142 kernel: raid6: sse2x2 gen() 15634 MB/s Sep 10 00:39:05.441144 kernel: raid6: sse2x2 xor() 7083 MB/s Sep 10 00:39:05.458142 kernel: raid6: sse2x1 gen() 11667 MB/s Sep 10 00:39:05.475530 kernel: raid6: sse2x1 xor() 7433 MB/s Sep 10 00:39:05.475554 kernel: raid6: using algorithm avx2x1 gen() 25832 MB/s Sep 10 00:39:05.475565 kernel: raid6: .... xor() 14886 MB/s, rmw enabled Sep 10 00:39:05.476250 kernel: raid6: using avx2x2 recovery algorithm Sep 10 00:39:05.489137 kernel: xor: automatically using best checksumming function avx Sep 10 00:39:05.584137 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Sep 10 00:39:05.594763 systemd[1]: Finished dracut-pre-udev.service. Sep 10 00:39:05.595000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.596000 audit: BPF prog-id=7 op=LOAD Sep 10 00:39:05.596000 audit: BPF prog-id=8 op=LOAD Sep 10 00:39:05.596945 systemd[1]: Starting systemd-udevd.service... Sep 10 00:39:05.610374 systemd-udevd[401]: Using default interface naming scheme 'v252'. Sep 10 00:39:05.615651 systemd[1]: Started systemd-udevd.service. Sep 10 00:39:05.616000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.618225 systemd[1]: Starting dracut-pre-trigger.service... Sep 10 00:39:05.629797 dracut-pre-trigger[412]: rd.md=0: removing MD RAID activation Sep 10 00:39:05.655977 systemd[1]: Finished dracut-pre-trigger.service. Sep 10 00:39:05.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.658485 systemd[1]: Starting systemd-udev-trigger.service... Sep 10 00:39:05.697365 systemd[1]: Finished systemd-udev-trigger.service. Sep 10 00:39:05.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:05.732442 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Sep 10 00:39:05.739391 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Sep 10 00:39:05.739408 kernel: GPT:9289727 != 19775487 Sep 10 00:39:05.739425 kernel: GPT:Alternate GPT header not at the end of the disk. Sep 10 00:39:05.739466 kernel: GPT:9289727 != 19775487 Sep 10 00:39:05.739485 kernel: GPT: Use GNU Parted to correct GPT errors. Sep 10 00:39:05.739497 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Sep 10 00:39:05.746626 kernel: cryptd: max_cpu_qlen set to 1000 Sep 10 00:39:05.750137 kernel: libata version 3.00 loaded. Sep 10 00:39:05.758809 kernel: AVX2 version of gcm_enc/dec engaged. Sep 10 00:39:05.758842 kernel: AES CTR mode by8 optimization enabled Sep 10 00:39:05.767147 kernel: ahci 0000:00:1f.2: version 3.0 Sep 10 00:39:05.796732 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Sep 10 00:39:05.796750 kernel: ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode Sep 10 00:39:05.796848 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Sep 10 00:39:05.796927 kernel: scsi host0: ahci Sep 10 00:39:05.797020 kernel: scsi host1: ahci Sep 10 00:39:05.797145 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (449) Sep 10 00:39:05.797155 kernel: scsi host2: ahci Sep 10 00:39:05.797265 kernel: scsi host3: ahci Sep 10 00:39:05.797359 kernel: scsi host4: ahci Sep 10 00:39:05.797450 kernel: scsi host5: ahci Sep 10 00:39:05.797547 kernel: ata1: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040100 irq 34 Sep 10 00:39:05.797557 kernel: ata2: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040180 irq 34 Sep 10 00:39:05.797566 kernel: ata3: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040200 irq 34 Sep 10 00:39:05.797574 kernel: ata4: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040280 irq 34 Sep 10 00:39:05.797586 kernel: ata5: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040300 irq 34 Sep 10 00:39:05.797594 kernel: ata6: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040380 irq 34 Sep 10 00:39:05.789059 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Sep 10 00:39:05.800938 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Sep 10 00:39:05.808208 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Sep 10 00:39:05.818588 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Sep 10 00:39:05.824367 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 10 00:39:05.826483 systemd[1]: Starting disk-uuid.service... Sep 10 00:39:05.835365 disk-uuid[529]: Primary Header is updated. Sep 10 00:39:05.835365 disk-uuid[529]: Secondary Entries is updated. Sep 10 00:39:05.835365 disk-uuid[529]: Secondary Header is updated. Sep 10 00:39:05.839849 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Sep 10 00:39:05.843149 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Sep 10 00:39:06.146141 kernel: ata2: SATA link down (SStatus 0 SControl 300) Sep 10 00:39:06.146236 kernel: ata5: SATA link down (SStatus 0 SControl 300) Sep 10 00:39:06.147137 kernel: ata4: SATA link down (SStatus 0 SControl 300) Sep 10 00:39:06.148141 kernel: ata6: SATA link down (SStatus 0 SControl 300) Sep 10 00:39:06.149133 kernel: ata1: SATA link down (SStatus 0 SControl 300) Sep 10 00:39:06.150140 kernel: ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Sep 10 00:39:06.151700 kernel: ata3.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Sep 10 00:39:06.151723 kernel: ata3.00: applying bridge limits Sep 10 00:39:06.153129 kernel: ata3.00: configured for UDMA/100 Sep 10 00:39:06.157136 kernel: scsi 2:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Sep 10 00:39:06.187395 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Sep 10 00:39:06.205011 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Sep 10 00:39:06.205024 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Sep 10 00:39:06.847144 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Sep 10 00:39:06.847222 disk-uuid[530]: The operation has completed successfully. Sep 10 00:39:06.875333 systemd[1]: disk-uuid.service: Deactivated successfully. Sep 10 00:39:06.875431 systemd[1]: Finished disk-uuid.service. Sep 10 00:39:06.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:06.877000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:06.885653 systemd[1]: Starting verity-setup.service... Sep 10 00:39:06.900149 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Sep 10 00:39:06.923910 systemd[1]: Found device dev-mapper-usr.device. Sep 10 00:39:06.926551 systemd[1]: Mounting sysusr-usr.mount... Sep 10 00:39:06.930784 systemd[1]: Finished verity-setup.service. Sep 10 00:39:06.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:07.019227 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Sep 10 00:39:07.019818 systemd[1]: Mounted sysusr-usr.mount. Sep 10 00:39:07.021475 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Sep 10 00:39:07.023911 systemd[1]: Starting ignition-setup.service... Sep 10 00:39:07.026190 systemd[1]: Starting parse-ip-for-networkd.service... Sep 10 00:39:07.037224 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Sep 10 00:39:07.037302 kernel: BTRFS info (device vda6): using free space tree Sep 10 00:39:07.037317 kernel: BTRFS info (device vda6): has skinny extents Sep 10 00:39:07.049052 systemd[1]: mnt-oem.mount: Deactivated successfully. Sep 10 00:39:07.060547 systemd[1]: Finished ignition-setup.service. Sep 10 00:39:07.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:07.063485 systemd[1]: Starting ignition-fetch-offline.service... Sep 10 00:39:07.123375 systemd[1]: Finished parse-ip-for-networkd.service. Sep 10 00:39:07.125000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:07.126000 audit: BPF prog-id=9 op=LOAD Sep 10 00:39:07.126850 systemd[1]: Starting systemd-networkd.service... Sep 10 00:39:07.144993 ignition[644]: Ignition 2.14.0 Sep 10 00:39:07.145008 ignition[644]: Stage: fetch-offline Sep 10 00:39:07.145083 ignition[644]: no configs at "/usr/lib/ignition/base.d" Sep 10 00:39:07.145096 ignition[644]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 10 00:39:07.145288 ignition[644]: parsed url from cmdline: "" Sep 10 00:39:07.145293 ignition[644]: no config URL provided Sep 10 00:39:07.145302 ignition[644]: reading system config file "/usr/lib/ignition/user.ign" Sep 10 00:39:07.145313 ignition[644]: no config at "/usr/lib/ignition/user.ign" Sep 10 00:39:07.145342 ignition[644]: op(1): [started] loading QEMU firmware config module Sep 10 00:39:07.145348 ignition[644]: op(1): executing: "modprobe" "qemu_fw_cfg" Sep 10 00:39:07.165436 ignition[644]: op(1): [finished] loading QEMU firmware config module Sep 10 00:39:07.165581 systemd-networkd[721]: lo: Link UP Sep 10 00:39:07.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:07.165585 systemd-networkd[721]: lo: Gained carrier Sep 10 00:39:07.166021 systemd-networkd[721]: Enumeration completed Sep 10 00:39:07.166167 systemd[1]: Started systemd-networkd.service. Sep 10 00:39:07.166447 systemd-networkd[721]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 10 00:39:07.168456 systemd-networkd[721]: eth0: Link UP Sep 10 00:39:07.168590 systemd-networkd[721]: eth0: Gained carrier Sep 10 00:39:07.169150 systemd[1]: Reached target network.target. Sep 10 00:39:07.171701 systemd[1]: Starting iscsiuio.service... Sep 10 00:39:07.215400 ignition[644]: parsing config with SHA512: 596d19436c95100cf55e8568f642ff8acc6e88ef8a0e656a26f968f25a8dbc6c70d07f52c3d3a0af221d0bc7b03aacb49f351cd6295e56f99ebda7bd55f06682 Sep 10 00:39:07.231573 unknown[644]: fetched base config from "system" Sep 10 00:39:07.231847 unknown[644]: fetched user config from "qemu" Sep 10 00:39:07.232433 ignition[644]: fetch-offline: fetch-offline passed Sep 10 00:39:07.232503 ignition[644]: Ignition finished successfully Sep 10 00:39:07.235000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:07.237000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:07.234123 systemd[1]: Started iscsiuio.service. Sep 10 00:39:07.235823 systemd[1]: Finished ignition-fetch-offline.service. Sep 10 00:39:07.237395 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Sep 10 00:39:07.238296 systemd-networkd[721]: eth0: DHCPv4 address 10.0.0.37/16, gateway 10.0.0.1 acquired from 10.0.0.1 Sep 10 00:39:07.238302 systemd[1]: Starting ignition-kargs.service... Sep 10 00:39:07.241054 systemd[1]: Starting iscsid.service... Sep 10 00:39:07.246282 iscsid[729]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Sep 10 00:39:07.246282 iscsid[729]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Sep 10 00:39:07.246282 iscsid[729]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Sep 10 00:39:07.246282 iscsid[729]: If using hardware iscsi like qla4xxx this message can be ignored. Sep 10 00:39:07.246282 iscsid[729]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Sep 10 00:39:07.246282 iscsid[729]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Sep 10 00:39:07.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:07.248891 systemd[1]: Started iscsid.service. Sep 10 00:39:07.251077 ignition[728]: Ignition 2.14.0 Sep 10 00:39:07.251084 ignition[728]: Stage: kargs Sep 10 00:39:07.251292 ignition[728]: no configs at "/usr/lib/ignition/base.d" Sep 10 00:39:07.251302 ignition[728]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 10 00:39:07.252696 ignition[728]: kargs: kargs passed Sep 10 00:39:07.252736 ignition[728]: Ignition finished successfully Sep 10 00:39:07.265049 systemd[1]: Starting dracut-initqueue.service... Sep 10 00:39:07.267240 systemd[1]: Finished ignition-kargs.service. Sep 10 00:39:07.269000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:07.270810 systemd[1]: Starting ignition-disks.service... Sep 10 00:39:07.276547 systemd[1]: Finished dracut-initqueue.service. Sep 10 00:39:07.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:07.277613 systemd[1]: Reached target remote-fs-pre.target. Sep 10 00:39:07.278489 systemd[1]: Reached target remote-cryptsetup.target. Sep 10 00:39:07.278552 systemd[1]: Reached target remote-fs.target. Sep 10 00:39:07.323713 systemd[1]: Starting dracut-pre-mount.service... Sep 10 00:39:07.328501 ignition[738]: Ignition 2.14.0 Sep 10 00:39:07.328899 ignition[738]: Stage: disks Sep 10 00:39:07.329047 ignition[738]: no configs at "/usr/lib/ignition/base.d" Sep 10 00:39:07.329059 ignition[738]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 10 00:39:07.332326 ignition[738]: disks: disks passed Sep 10 00:39:07.332383 ignition[738]: Ignition finished successfully Sep 10 00:39:07.333000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:07.333316 systemd[1]: Finished ignition-disks.service. Sep 10 00:39:07.333651 systemd[1]: Reached target initrd-root-device.target. Sep 10 00:39:07.336258 systemd[1]: Reached target local-fs-pre.target. Sep 10 00:39:07.337997 systemd[1]: Reached target local-fs.target. Sep 10 00:39:07.339792 systemd[1]: Reached target sysinit.target. Sep 10 00:39:07.341512 systemd[1]: Reached target basic.target. Sep 10 00:39:07.347755 systemd[1]: Finished dracut-pre-mount.service. Sep 10 00:39:07.347000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:07.349628 systemd[1]: Starting systemd-fsck-root.service... Sep 10 00:39:07.394021 systemd-fsck[755]: ROOT: clean, 629/553520 files, 56028/553472 blocks Sep 10 00:39:07.585028 systemd[1]: Finished systemd-fsck-root.service. Sep 10 00:39:07.586000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:07.587545 systemd[1]: Mounting sysroot.mount... Sep 10 00:39:07.611152 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Sep 10 00:39:07.611851 systemd[1]: Mounted sysroot.mount. Sep 10 00:39:07.612742 systemd[1]: Reached target initrd-root-fs.target. Sep 10 00:39:07.615268 systemd[1]: Mounting sysroot-usr.mount... Sep 10 00:39:07.616942 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Sep 10 00:39:07.616982 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Sep 10 00:39:07.617003 systemd[1]: Reached target ignition-diskful.target. Sep 10 00:39:07.620025 systemd[1]: Mounted sysroot-usr.mount. Sep 10 00:39:07.622470 systemd[1]: Starting initrd-setup-root.service... Sep 10 00:39:07.627722 initrd-setup-root[765]: cut: /sysroot/etc/passwd: No such file or directory Sep 10 00:39:07.631436 initrd-setup-root[773]: cut: /sysroot/etc/group: No such file or directory Sep 10 00:39:07.635631 initrd-setup-root[781]: cut: /sysroot/etc/shadow: No such file or directory Sep 10 00:39:07.639687 initrd-setup-root[789]: cut: /sysroot/etc/gshadow: No such file or directory Sep 10 00:39:07.667540 systemd[1]: Finished initrd-setup-root.service. Sep 10 00:39:07.669000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:07.670914 systemd[1]: Starting ignition-mount.service... Sep 10 00:39:07.672924 systemd[1]: Starting sysroot-boot.service... Sep 10 00:39:07.675981 bash[806]: umount: /sysroot/usr/share/oem: not mounted. Sep 10 00:39:07.683809 ignition[807]: INFO : Ignition 2.14.0 Sep 10 00:39:07.683809 ignition[807]: INFO : Stage: mount Sep 10 00:39:07.685442 ignition[807]: INFO : no configs at "/usr/lib/ignition/base.d" Sep 10 00:39:07.685442 ignition[807]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 10 00:39:07.688102 ignition[807]: INFO : mount: mount passed Sep 10 00:39:07.688891 ignition[807]: INFO : Ignition finished successfully Sep 10 00:39:07.690410 systemd[1]: Finished ignition-mount.service. Sep 10 00:39:07.691000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:07.694093 systemd[1]: Finished sysroot-boot.service. Sep 10 00:39:07.694000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:07.953659 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 10 00:39:07.959127 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (816) Sep 10 00:39:07.961336 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Sep 10 00:39:07.961358 kernel: BTRFS info (device vda6): using free space tree Sep 10 00:39:07.961367 kernel: BTRFS info (device vda6): has skinny extents Sep 10 00:39:07.965949 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 10 00:39:07.967542 systemd[1]: Starting ignition-files.service... Sep 10 00:39:07.982940 ignition[836]: INFO : Ignition 2.14.0 Sep 10 00:39:07.982940 ignition[836]: INFO : Stage: files Sep 10 00:39:08.036777 ignition[836]: INFO : no configs at "/usr/lib/ignition/base.d" Sep 10 00:39:08.036777 ignition[836]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 10 00:39:08.036777 ignition[836]: DEBUG : files: compiled without relabeling support, skipping Sep 10 00:39:08.040659 ignition[836]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Sep 10 00:39:08.040659 ignition[836]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Sep 10 00:39:08.040659 ignition[836]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Sep 10 00:39:08.040659 ignition[836]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Sep 10 00:39:08.040659 ignition[836]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Sep 10 00:39:08.040659 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Sep 10 00:39:08.040659 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-amd64.tar.gz: attempt #1 Sep 10 00:39:08.039750 unknown[836]: wrote ssh authorized keys file for user: core Sep 10 00:39:08.083462 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Sep 10 00:39:08.277682 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Sep 10 00:39:08.277682 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Sep 10 00:39:08.281640 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Sep 10 00:39:08.281640 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Sep 10 00:39:08.285057 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Sep 10 00:39:08.285057 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 10 00:39:08.290413 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 10 00:39:08.290413 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 10 00:39:08.290413 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 10 00:39:08.290413 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Sep 10 00:39:08.290413 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Sep 10 00:39:08.290413 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Sep 10 00:39:08.290413 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Sep 10 00:39:08.290413 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Sep 10 00:39:08.290413 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-x86-64.raw: attempt #1 Sep 10 00:39:08.870150 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Sep 10 00:39:08.996242 systemd-networkd[721]: eth0: Gained IPv6LL Sep 10 00:39:09.400274 ignition[836]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Sep 10 00:39:09.400274 ignition[836]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Sep 10 00:39:09.405141 ignition[836]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 10 00:39:09.405141 ignition[836]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 10 00:39:09.405141 ignition[836]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Sep 10 00:39:09.405141 ignition[836]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Sep 10 00:39:09.405141 ignition[836]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Sep 10 00:39:09.405141 ignition[836]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Sep 10 00:39:09.405141 ignition[836]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Sep 10 00:39:09.405141 ignition[836]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Sep 10 00:39:09.405141 ignition[836]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Sep 10 00:39:09.405141 ignition[836]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Sep 10 00:39:09.405141 ignition[836]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Sep 10 00:39:09.447877 ignition[836]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Sep 10 00:39:09.449582 ignition[836]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Sep 10 00:39:09.449582 ignition[836]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Sep 10 00:39:09.452584 ignition[836]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Sep 10 00:39:09.454198 ignition[836]: INFO : files: files passed Sep 10 00:39:09.454198 ignition[836]: INFO : Ignition finished successfully Sep 10 00:39:09.456854 systemd[1]: Finished ignition-files.service. Sep 10 00:39:09.463318 kernel: kauditd_printk_skb: 24 callbacks suppressed Sep 10 00:39:09.463352 kernel: audit: type=1130 audit(1757464749.457:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.457000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.458715 systemd[1]: Starting initrd-setup-root-after-ignition.service... Sep 10 00:39:09.463323 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Sep 10 00:39:09.471451 initrd-setup-root-after-ignition[859]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Sep 10 00:39:09.471000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.464039 systemd[1]: Starting ignition-quench.service... Sep 10 00:39:09.483014 kernel: audit: type=1130 audit(1757464749.471:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.483040 kernel: audit: type=1130 audit(1757464749.476:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.483050 kernel: audit: type=1131 audit(1757464749.476:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.476000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.483199 initrd-setup-root-after-ignition[861]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Sep 10 00:39:09.465446 systemd[1]: Finished initrd-setup-root-after-ignition.service. Sep 10 00:39:09.471620 systemd[1]: ignition-quench.service: Deactivated successfully. Sep 10 00:39:09.471696 systemd[1]: Finished ignition-quench.service. Sep 10 00:39:09.476686 systemd[1]: Reached target ignition-complete.target. Sep 10 00:39:09.485392 systemd[1]: Starting initrd-parse-etc.service... Sep 10 00:39:09.502581 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Sep 10 00:39:09.502683 systemd[1]: Finished initrd-parse-etc.service. Sep 10 00:39:09.511170 kernel: audit: type=1130 audit(1757464749.503:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.511203 kernel: audit: type=1131 audit(1757464749.503:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.503000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.503978 systemd[1]: Reached target initrd-fs.target. Sep 10 00:39:09.512200 systemd[1]: Reached target initrd.target. Sep 10 00:39:09.513051 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Sep 10 00:39:09.514547 systemd[1]: Starting dracut-pre-pivot.service... Sep 10 00:39:09.528544 systemd[1]: Finished dracut-pre-pivot.service. Sep 10 00:39:09.534086 kernel: audit: type=1130 audit(1757464749.529:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.529000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.530492 systemd[1]: Starting initrd-cleanup.service... Sep 10 00:39:09.540466 systemd[1]: Stopped target nss-lookup.target. Sep 10 00:39:09.541386 systemd[1]: Stopped target remote-cryptsetup.target. Sep 10 00:39:09.542939 systemd[1]: Stopped target timers.target. Sep 10 00:39:09.544540 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Sep 10 00:39:09.556384 kernel: audit: type=1131 audit(1757464749.546:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.546000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.544640 systemd[1]: Stopped dracut-pre-pivot.service. Sep 10 00:39:09.546336 systemd[1]: Stopped target initrd.target. Sep 10 00:39:09.556527 systemd[1]: Stopped target basic.target. Sep 10 00:39:09.558165 systemd[1]: Stopped target ignition-complete.target. Sep 10 00:39:09.559776 systemd[1]: Stopped target ignition-diskful.target. Sep 10 00:39:09.561344 systemd[1]: Stopped target initrd-root-device.target. Sep 10 00:39:09.563013 systemd[1]: Stopped target remote-fs.target. Sep 10 00:39:09.564642 systemd[1]: Stopped target remote-fs-pre.target. Sep 10 00:39:09.566365 systemd[1]: Stopped target sysinit.target. Sep 10 00:39:09.567870 systemd[1]: Stopped target local-fs.target. Sep 10 00:39:09.569396 systemd[1]: Stopped target local-fs-pre.target. Sep 10 00:39:09.570886 systemd[1]: Stopped target swap.target. Sep 10 00:39:09.578027 kernel: audit: type=1131 audit(1757464749.573:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.573000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.572299 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Sep 10 00:39:09.572449 systemd[1]: Stopped dracut-pre-mount.service. Sep 10 00:39:09.584324 kernel: audit: type=1131 audit(1757464749.579:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.579000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.573938 systemd[1]: Stopped target cryptsetup.target. Sep 10 00:39:09.584000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.578096 systemd[1]: dracut-initqueue.service: Deactivated successfully. Sep 10 00:39:09.578235 systemd[1]: Stopped dracut-initqueue.service. Sep 10 00:39:09.579980 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Sep 10 00:39:09.580087 systemd[1]: Stopped ignition-fetch-offline.service. Sep 10 00:39:09.584505 systemd[1]: Stopped target paths.target. Sep 10 00:39:09.585919 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Sep 10 00:39:09.589178 systemd[1]: Stopped systemd-ask-password-console.path. Sep 10 00:39:09.590657 systemd[1]: Stopped target slices.target. Sep 10 00:39:09.592208 systemd[1]: Stopped target sockets.target. Sep 10 00:39:09.602000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.594031 systemd[1]: iscsid.socket: Deactivated successfully. Sep 10 00:39:09.603000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.594099 systemd[1]: Closed iscsid.socket. Sep 10 00:39:09.595643 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Sep 10 00:39:09.595739 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Sep 10 00:39:09.602214 systemd[1]: ignition-files.service: Deactivated successfully. Sep 10 00:39:09.610000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.602324 systemd[1]: Stopped ignition-files.service. Sep 10 00:39:09.604557 systemd[1]: Stopping ignition-mount.service... Sep 10 00:39:09.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.605515 systemd[1]: Stopping iscsiuio.service... Sep 10 00:39:09.615583 ignition[876]: INFO : Ignition 2.14.0 Sep 10 00:39:09.615583 ignition[876]: INFO : Stage: umount Sep 10 00:39:09.615583 ignition[876]: INFO : no configs at "/usr/lib/ignition/base.d" Sep 10 00:39:09.615583 ignition[876]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Sep 10 00:39:09.617000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.618000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.607447 systemd[1]: Stopping sysroot-boot.service... Sep 10 00:39:09.629000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.629846 ignition[876]: INFO : umount: umount passed Sep 10 00:39:09.629846 ignition[876]: INFO : Ignition finished successfully Sep 10 00:39:09.631000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.633000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.608537 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Sep 10 00:39:09.608739 systemd[1]: Stopped systemd-udev-trigger.service. Sep 10 00:39:09.610659 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Sep 10 00:39:09.610839 systemd[1]: Stopped dracut-pre-trigger.service. Sep 10 00:39:09.615765 systemd[1]: iscsiuio.service: Deactivated successfully. Sep 10 00:39:09.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.640000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.615891 systemd[1]: Stopped iscsiuio.service. Sep 10 00:39:09.617836 systemd[1]: ignition-mount.service: Deactivated successfully. Sep 10 00:39:09.643000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.617912 systemd[1]: Stopped ignition-mount.service. Sep 10 00:39:09.619326 systemd[1]: Stopped target network.target. Sep 10 00:39:09.647000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.647000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.625914 systemd[1]: iscsiuio.socket: Deactivated successfully. Sep 10 00:39:09.625953 systemd[1]: Closed iscsiuio.socket. Sep 10 00:39:09.627862 systemd[1]: ignition-disks.service: Deactivated successfully. Sep 10 00:39:09.627910 systemd[1]: Stopped ignition-disks.service. Sep 10 00:39:09.629836 systemd[1]: ignition-kargs.service: Deactivated successfully. Sep 10 00:39:09.629892 systemd[1]: Stopped ignition-kargs.service. Sep 10 00:39:09.631869 systemd[1]: ignition-setup.service: Deactivated successfully. Sep 10 00:39:09.631907 systemd[1]: Stopped ignition-setup.service. Sep 10 00:39:09.633931 systemd[1]: Stopping systemd-networkd.service... Sep 10 00:39:09.636271 systemd[1]: Stopping systemd-resolved.service... Sep 10 00:39:09.638889 systemd[1]: sysroot-boot.mount: Deactivated successfully. Sep 10 00:39:09.639453 systemd[1]: initrd-cleanup.service: Deactivated successfully. Sep 10 00:39:09.639551 systemd[1]: Finished initrd-cleanup.service. Sep 10 00:39:09.640176 systemd-networkd[721]: eth0: DHCPv6 lease lost Sep 10 00:39:09.663000 audit: BPF prog-id=9 op=UNLOAD Sep 10 00:39:09.641903 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 10 00:39:09.641982 systemd[1]: Stopped systemd-networkd.service. Sep 10 00:39:09.643660 systemd[1]: systemd-networkd.socket: Deactivated successfully. Sep 10 00:39:09.643698 systemd[1]: Closed systemd-networkd.socket. Sep 10 00:39:09.646585 systemd[1]: Stopping network-cleanup.service... Sep 10 00:39:09.647563 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Sep 10 00:39:09.647605 systemd[1]: Stopped parse-ip-for-networkd.service. Sep 10 00:39:09.647711 systemd[1]: systemd-sysctl.service: Deactivated successfully. Sep 10 00:39:09.647742 systemd[1]: Stopped systemd-sysctl.service. Sep 10 00:39:09.649288 systemd[1]: systemd-modules-load.service: Deactivated successfully. Sep 10 00:39:09.673000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.649322 systemd[1]: Stopped systemd-modules-load.service. Sep 10 00:39:09.650888 systemd[1]: Stopping systemd-udevd.service... Sep 10 00:39:09.662412 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Sep 10 00:39:09.669869 systemd[1]: systemd-resolved.service: Deactivated successfully. Sep 10 00:39:09.671623 systemd[1]: Stopped systemd-resolved.service. Sep 10 00:39:09.678000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.677180 systemd[1]: systemd-udevd.service: Deactivated successfully. Sep 10 00:39:09.677343 systemd[1]: Stopped systemd-udevd.service. Sep 10 00:39:09.680000 audit: BPF prog-id=6 op=UNLOAD Sep 10 00:39:09.681128 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Sep 10 00:39:09.681188 systemd[1]: Closed systemd-udevd-control.socket. Sep 10 00:39:09.684572 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Sep 10 00:39:09.684652 systemd[1]: Closed systemd-udevd-kernel.socket. Sep 10 00:39:09.691000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.689518 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Sep 10 00:39:09.693000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.689568 systemd[1]: Stopped dracut-pre-udev.service. Sep 10 00:39:09.694000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.691659 systemd[1]: dracut-cmdline.service: Deactivated successfully. Sep 10 00:39:09.691700 systemd[1]: Stopped dracut-cmdline.service. Sep 10 00:39:09.693314 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Sep 10 00:39:09.693360 systemd[1]: Stopped dracut-cmdline-ask.service. Sep 10 00:39:09.699000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.696789 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Sep 10 00:39:09.697494 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Sep 10 00:39:09.697545 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Sep 10 00:39:09.703000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.700910 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Sep 10 00:39:09.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.700973 systemd[1]: Stopped kmod-static-nodes.service. Sep 10 00:39:09.703719 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Sep 10 00:39:09.703779 systemd[1]: Stopped systemd-vconsole-setup.service. Sep 10 00:39:09.709000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.706994 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Sep 10 00:39:09.707649 systemd[1]: network-cleanup.service: Deactivated successfully. Sep 10 00:39:09.707779 systemd[1]: Stopped network-cleanup.service. Sep 10 00:39:09.734822 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Sep 10 00:39:09.734956 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Sep 10 00:39:09.736000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.736000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.824380 systemd[1]: sysroot-boot.service: Deactivated successfully. Sep 10 00:39:09.824494 systemd[1]: Stopped sysroot-boot.service. Sep 10 00:39:09.826000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.826359 systemd[1]: Reached target initrd-switch-root.target. Sep 10 00:39:09.827767 systemd[1]: initrd-setup-root.service: Deactivated successfully. Sep 10 00:39:09.829000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:09.827807 systemd[1]: Stopped initrd-setup-root.service. Sep 10 00:39:09.830158 systemd[1]: Starting initrd-switch-root.service... Sep 10 00:39:09.845424 systemd[1]: Switching root. Sep 10 00:39:09.877780 iscsid[729]: iscsid shutting down. Sep 10 00:39:09.877982 systemd-journald[199]: Journal stopped Sep 10 00:39:14.471990 systemd-journald[199]: Received SIGTERM from PID 1 (n/a). Sep 10 00:39:14.472053 kernel: SELinux: Class mctp_socket not defined in policy. Sep 10 00:39:14.472069 kernel: SELinux: Class anon_inode not defined in policy. Sep 10 00:39:14.472079 kernel: SELinux: the above unknown classes and permissions will be allowed Sep 10 00:39:14.472089 kernel: SELinux: policy capability network_peer_controls=1 Sep 10 00:39:14.472098 kernel: SELinux: policy capability open_perms=1 Sep 10 00:39:14.472158 kernel: SELinux: policy capability extended_socket_class=1 Sep 10 00:39:14.472169 kernel: SELinux: policy capability always_check_network=0 Sep 10 00:39:14.472179 kernel: SELinux: policy capability cgroup_seclabel=1 Sep 10 00:39:14.472189 kernel: SELinux: policy capability nnp_nosuid_transition=1 Sep 10 00:39:14.472201 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Sep 10 00:39:14.472211 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Sep 10 00:39:14.472221 systemd[1]: Successfully loaded SELinux policy in 42.330ms. Sep 10 00:39:14.472234 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 8.391ms. Sep 10 00:39:14.472246 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 10 00:39:14.472264 systemd[1]: Detected virtualization kvm. Sep 10 00:39:14.472275 systemd[1]: Detected architecture x86-64. Sep 10 00:39:14.472285 systemd[1]: Detected first boot. Sep 10 00:39:14.472296 systemd[1]: Initializing machine ID from VM UUID. Sep 10 00:39:14.472306 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Sep 10 00:39:14.472320 systemd[1]: Populated /etc with preset unit settings. Sep 10 00:39:14.472331 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 10 00:39:14.472351 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 10 00:39:14.472363 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 10 00:39:14.472375 systemd[1]: iscsid.service: Deactivated successfully. Sep 10 00:39:14.472393 systemd[1]: Stopped iscsid.service. Sep 10 00:39:14.472403 systemd[1]: initrd-switch-root.service: Deactivated successfully. Sep 10 00:39:14.472419 systemd[1]: Stopped initrd-switch-root.service. Sep 10 00:39:14.472430 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Sep 10 00:39:14.472441 systemd[1]: Created slice system-addon\x2dconfig.slice. Sep 10 00:39:14.472451 systemd[1]: Created slice system-addon\x2drun.slice. Sep 10 00:39:14.472462 systemd[1]: Created slice system-getty.slice. Sep 10 00:39:14.472472 systemd[1]: Created slice system-modprobe.slice. Sep 10 00:39:14.472483 systemd[1]: Created slice system-serial\x2dgetty.slice. Sep 10 00:39:14.472494 systemd[1]: Created slice system-system\x2dcloudinit.slice. Sep 10 00:39:14.472504 systemd[1]: Created slice system-systemd\x2dfsck.slice. Sep 10 00:39:14.472521 systemd[1]: Created slice user.slice. Sep 10 00:39:14.472532 systemd[1]: Started systemd-ask-password-console.path. Sep 10 00:39:14.472545 systemd[1]: Started systemd-ask-password-wall.path. Sep 10 00:39:14.472562 systemd[1]: Set up automount boot.automount. Sep 10 00:39:14.472575 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Sep 10 00:39:14.472590 systemd[1]: Stopped target initrd-switch-root.target. Sep 10 00:39:14.472724 systemd[1]: Stopped target initrd-fs.target. Sep 10 00:39:14.472737 systemd[1]: Stopped target initrd-root-fs.target. Sep 10 00:39:14.472761 systemd[1]: Reached target integritysetup.target. Sep 10 00:39:14.472774 systemd[1]: Reached target remote-cryptsetup.target. Sep 10 00:39:14.472787 systemd[1]: Reached target remote-fs.target. Sep 10 00:39:14.472801 systemd[1]: Reached target slices.target. Sep 10 00:39:14.472814 systemd[1]: Reached target swap.target. Sep 10 00:39:14.472829 systemd[1]: Reached target torcx.target. Sep 10 00:39:14.472846 systemd[1]: Reached target veritysetup.target. Sep 10 00:39:14.472859 systemd[1]: Listening on systemd-coredump.socket. Sep 10 00:39:14.472872 systemd[1]: Listening on systemd-initctl.socket. Sep 10 00:39:14.472896 systemd[1]: Listening on systemd-networkd.socket. Sep 10 00:39:14.472909 systemd[1]: Listening on systemd-udevd-control.socket. Sep 10 00:39:14.472923 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 10 00:39:14.472936 systemd[1]: Listening on systemd-userdbd.socket. Sep 10 00:39:14.472949 systemd[1]: Mounting dev-hugepages.mount... Sep 10 00:39:14.472963 systemd[1]: Mounting dev-mqueue.mount... Sep 10 00:39:14.472986 systemd[1]: Mounting media.mount... Sep 10 00:39:14.473000 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 00:39:14.473014 systemd[1]: Mounting sys-kernel-debug.mount... Sep 10 00:39:14.473029 systemd[1]: Mounting sys-kernel-tracing.mount... Sep 10 00:39:14.473068 systemd[1]: Mounting tmp.mount... Sep 10 00:39:14.473084 systemd[1]: Starting flatcar-tmpfiles.service... Sep 10 00:39:14.473154 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 10 00:39:14.473172 systemd[1]: Starting kmod-static-nodes.service... Sep 10 00:39:14.473185 systemd[1]: Starting modprobe@configfs.service... Sep 10 00:39:14.473198 systemd[1]: Starting modprobe@dm_mod.service... Sep 10 00:39:14.473212 systemd[1]: Starting modprobe@drm.service... Sep 10 00:39:14.473225 systemd[1]: Starting modprobe@efi_pstore.service... Sep 10 00:39:14.473238 systemd[1]: Starting modprobe@fuse.service... Sep 10 00:39:14.473264 systemd[1]: Starting modprobe@loop.service... Sep 10 00:39:14.473279 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Sep 10 00:39:14.473293 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Sep 10 00:39:14.473306 systemd[1]: Stopped systemd-fsck-root.service. Sep 10 00:39:14.473320 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Sep 10 00:39:14.473337 systemd[1]: Stopped systemd-fsck-usr.service. Sep 10 00:39:14.473350 systemd[1]: Stopped systemd-journald.service. Sep 10 00:39:14.473363 kernel: fuse: init (API version 7.34) Sep 10 00:39:14.473385 kernel: loop: module loaded Sep 10 00:39:14.473399 systemd[1]: Starting systemd-journald.service... Sep 10 00:39:14.473412 systemd[1]: Starting systemd-modules-load.service... Sep 10 00:39:14.473431 systemd[1]: Starting systemd-network-generator.service... Sep 10 00:39:14.473445 systemd[1]: Starting systemd-remount-fs.service... Sep 10 00:39:14.473458 systemd[1]: Starting systemd-udev-trigger.service... Sep 10 00:39:14.473473 systemd[1]: verity-setup.service: Deactivated successfully. Sep 10 00:39:14.473486 systemd[1]: Stopped verity-setup.service. Sep 10 00:39:14.473499 kernel: kauditd_printk_skb: 79 callbacks suppressed Sep 10 00:39:14.473510 kernel: audit: type=1305 audit(1757464754.470:117): op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Sep 10 00:39:14.473535 systemd-journald[986]: Journal started Sep 10 00:39:14.473582 systemd-journald[986]: Runtime Journal (/run/log/journal/578098d1f965474b89cbddc8208f609c) is 6.0M, max 48.4M, 42.4M free. Sep 10 00:39:09.930000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Sep 10 00:39:10.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 10 00:39:10.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 10 00:39:10.229000 audit: BPF prog-id=10 op=LOAD Sep 10 00:39:10.229000 audit: BPF prog-id=10 op=UNLOAD Sep 10 00:39:10.229000 audit: BPF prog-id=11 op=LOAD Sep 10 00:39:10.229000 audit: BPF prog-id=11 op=UNLOAD Sep 10 00:39:10.264000 audit[909]: AVC avc: denied { associate } for pid=909 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 10 00:39:10.264000 audit[909]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001878d2 a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=892 pid=909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:10.264000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 10 00:39:10.265000 audit[909]: AVC avc: denied { associate } for pid=909 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Sep 10 00:39:10.265000 audit[909]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001879a9 a2=1ed a3=0 items=2 ppid=892 pid=909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:10.265000 audit: CWD cwd="/" Sep 10 00:39:10.265000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:10.265000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:10.265000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 10 00:39:14.296000 audit: BPF prog-id=12 op=LOAD Sep 10 00:39:14.296000 audit: BPF prog-id=3 op=UNLOAD Sep 10 00:39:14.296000 audit: BPF prog-id=13 op=LOAD Sep 10 00:39:14.296000 audit: BPF prog-id=14 op=LOAD Sep 10 00:39:14.296000 audit: BPF prog-id=4 op=UNLOAD Sep 10 00:39:14.296000 audit: BPF prog-id=5 op=UNLOAD Sep 10 00:39:14.298000 audit: BPF prog-id=15 op=LOAD Sep 10 00:39:14.298000 audit: BPF prog-id=12 op=UNLOAD Sep 10 00:39:14.298000 audit: BPF prog-id=16 op=LOAD Sep 10 00:39:14.298000 audit: BPF prog-id=17 op=LOAD Sep 10 00:39:14.298000 audit: BPF prog-id=13 op=UNLOAD Sep 10 00:39:14.298000 audit: BPF prog-id=14 op=UNLOAD Sep 10 00:39:14.298000 audit: BPF prog-id=18 op=LOAD Sep 10 00:39:14.299000 audit: BPF prog-id=15 op=UNLOAD Sep 10 00:39:14.299000 audit: BPF prog-id=19 op=LOAD Sep 10 00:39:14.299000 audit: BPF prog-id=20 op=LOAD Sep 10 00:39:14.299000 audit: BPF prog-id=16 op=UNLOAD Sep 10 00:39:14.299000 audit: BPF prog-id=17 op=UNLOAD Sep 10 00:39:14.299000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.306000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.306000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.311000 audit: BPF prog-id=18 op=UNLOAD Sep 10 00:39:14.442000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.444000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.446000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.446000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.448000 audit: BPF prog-id=21 op=LOAD Sep 10 00:39:14.449000 audit: BPF prog-id=22 op=LOAD Sep 10 00:39:14.449000 audit: BPF prog-id=23 op=LOAD Sep 10 00:39:14.449000 audit: BPF prog-id=19 op=UNLOAD Sep 10 00:39:14.449000 audit: BPF prog-id=20 op=UNLOAD Sep 10 00:39:14.470000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Sep 10 00:39:14.470000 audit[986]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=4 a1=7ffcbcc42040 a2=4000 a3=7ffcbcc420dc items=0 ppid=1 pid=986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:14.470000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Sep 10 00:39:14.294826 systemd[1]: Queued start job for default target multi-user.target. Sep 10 00:39:14.475187 kernel: audit: type=1300 audit(1757464754.470:117): arch=c000003e syscall=46 success=yes exit=60 a0=4 a1=7ffcbcc42040 a2=4000 a3=7ffcbcc420dc items=0 ppid=1 pid=986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:14.475228 kernel: audit: type=1327 audit(1757464754.470:117): proctitle="/usr/lib/systemd/systemd-journald" Sep 10 00:39:10.262810 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:10Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 10 00:39:14.294841 systemd[1]: Unnecessary job was removed for dev-vda6.device. Sep 10 00:39:10.263157 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:10Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 10 00:39:14.299728 systemd[1]: systemd-journald.service: Deactivated successfully. Sep 10 00:39:10.263178 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:10Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 10 00:39:10.263207 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:10Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Sep 10 00:39:10.263216 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:10Z" level=debug msg="skipped missing lower profile" missing profile=oem Sep 10 00:39:10.263248 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:10Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Sep 10 00:39:10.263261 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:10Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Sep 10 00:39:10.263456 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:10Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Sep 10 00:39:10.263492 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:10Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 10 00:39:10.263503 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:10Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 10 00:39:10.263852 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:10Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Sep 10 00:39:10.263884 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:10Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Sep 10 00:39:10.263901 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:10Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Sep 10 00:39:10.263914 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:10Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Sep 10 00:39:10.263930 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:10Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Sep 10 00:39:10.263942 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:10Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Sep 10 00:39:13.995332 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:13Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 10 00:39:13.995795 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:13Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 10 00:39:13.995984 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:13Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 10 00:39:13.996287 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:13Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 10 00:39:13.996359 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:13Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Sep 10 00:39:13.996462 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-09-10T00:39:13Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Sep 10 00:39:14.481000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.486141 kernel: audit: type=1131 audit(1757464754.481:118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.486176 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 00:39:14.490197 systemd[1]: Started systemd-journald.service. Sep 10 00:39:14.490000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.491171 systemd[1]: Mounted dev-hugepages.mount. Sep 10 00:39:14.495233 kernel: audit: type=1130 audit(1757464754.490:119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.495377 systemd[1]: Mounted dev-mqueue.mount. Sep 10 00:39:14.496332 systemd[1]: Mounted media.mount. Sep 10 00:39:14.497250 systemd[1]: Mounted sys-kernel-debug.mount. Sep 10 00:39:14.498303 systemd[1]: Mounted sys-kernel-tracing.mount. Sep 10 00:39:14.499407 systemd[1]: Mounted tmp.mount. Sep 10 00:39:14.500471 systemd[1]: Finished flatcar-tmpfiles.service. Sep 10 00:39:14.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.501774 systemd[1]: Finished kmod-static-nodes.service. Sep 10 00:39:14.507051 kernel: audit: type=1130 audit(1757464754.501:120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.506000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.507326 systemd[1]: modprobe@configfs.service: Deactivated successfully. Sep 10 00:39:14.507476 systemd[1]: Finished modprobe@configfs.service. Sep 10 00:39:14.511767 kernel: audit: type=1130 audit(1757464754.506:121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.511000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.512348 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 10 00:39:14.512612 systemd[1]: Finished modprobe@dm_mod.service. Sep 10 00:39:14.511000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.519794 kernel: audit: type=1130 audit(1757464754.511:122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.519840 kernel: audit: type=1131 audit(1757464754.511:123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.521077 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 10 00:39:14.521291 systemd[1]: Finished modprobe@drm.service. Sep 10 00:39:14.520000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.525440 kernel: audit: type=1130 audit(1757464754.520:124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.525000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.525000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.525765 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 10 00:39:14.525950 systemd[1]: Finished modprobe@efi_pstore.service. Sep 10 00:39:14.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.526000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.527292 systemd[1]: modprobe@fuse.service: Deactivated successfully. Sep 10 00:39:14.527471 systemd[1]: Finished modprobe@fuse.service. Sep 10 00:39:14.528000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.528000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.528710 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 10 00:39:14.528865 systemd[1]: Finished modprobe@loop.service. Sep 10 00:39:14.529000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.529000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.530402 systemd[1]: Finished systemd-modules-load.service. Sep 10 00:39:14.531000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.531802 systemd[1]: Finished systemd-network-generator.service. Sep 10 00:39:14.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.533438 systemd[1]: Finished systemd-remount-fs.service. Sep 10 00:39:14.534000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.534991 systemd[1]: Reached target network-pre.target. Sep 10 00:39:14.537445 systemd[1]: Mounting sys-fs-fuse-connections.mount... Sep 10 00:39:14.539563 systemd[1]: Mounting sys-kernel-config.mount... Sep 10 00:39:14.540493 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Sep 10 00:39:14.543742 systemd[1]: Starting systemd-hwdb-update.service... Sep 10 00:39:14.545672 systemd[1]: Starting systemd-journal-flush.service... Sep 10 00:39:14.547017 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 10 00:39:14.548306 systemd[1]: Starting systemd-random-seed.service... Sep 10 00:39:14.549247 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 10 00:39:14.558000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.560268 systemd-journald[986]: Time spent on flushing to /var/log/journal/578098d1f965474b89cbddc8208f609c is 19.388ms for 1180 entries. Sep 10 00:39:14.560268 systemd-journald[986]: System Journal (/var/log/journal/578098d1f965474b89cbddc8208f609c) is 8.0M, max 195.6M, 187.6M free. Sep 10 00:39:14.931242 systemd-journald[986]: Received client request to flush runtime journal. Sep 10 00:39:14.672000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.550567 systemd[1]: Starting systemd-sysctl.service... Sep 10 00:39:14.553034 systemd[1]: Starting systemd-sysusers.service... Sep 10 00:39:14.557295 systemd[1]: Finished systemd-udev-trigger.service. Sep 10 00:39:14.558947 systemd[1]: Mounted sys-fs-fuse-connections.mount. Sep 10 00:39:14.932978 udevadm[1012]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Sep 10 00:39:14.560243 systemd[1]: Mounted sys-kernel-config.mount. Sep 10 00:39:14.563026 systemd[1]: Starting systemd-udev-settle.service... Sep 10 00:39:14.671640 systemd[1]: Finished systemd-sysctl.service. Sep 10 00:39:14.673870 systemd[1]: Finished systemd-sysusers.service. Sep 10 00:39:14.704256 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 10 00:39:14.813472 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 10 00:39:14.884973 systemd[1]: Finished systemd-random-seed.service. Sep 10 00:39:14.886088 systemd[1]: Reached target first-boot-complete.target. Sep 10 00:39:14.933000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:14.932406 systemd[1]: Finished systemd-journal-flush.service. Sep 10 00:39:15.752648 systemd[1]: Finished systemd-hwdb-update.service. Sep 10 00:39:15.753000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:15.754000 audit: BPF prog-id=24 op=LOAD Sep 10 00:39:15.754000 audit: BPF prog-id=25 op=LOAD Sep 10 00:39:15.754000 audit: BPF prog-id=7 op=UNLOAD Sep 10 00:39:15.754000 audit: BPF prog-id=8 op=UNLOAD Sep 10 00:39:15.755076 systemd[1]: Starting systemd-udevd.service... Sep 10 00:39:15.771536 systemd-udevd[1017]: Using default interface naming scheme 'v252'. Sep 10 00:39:15.940816 systemd[1]: Started systemd-udevd.service. Sep 10 00:39:15.944000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:15.947000 audit: BPF prog-id=26 op=LOAD Sep 10 00:39:15.948478 systemd[1]: Starting systemd-networkd.service... Sep 10 00:39:15.961000 audit: BPF prog-id=27 op=LOAD Sep 10 00:39:15.961000 audit: BPF prog-id=28 op=LOAD Sep 10 00:39:15.961000 audit: BPF prog-id=29 op=LOAD Sep 10 00:39:15.962819 systemd[1]: Starting systemd-userdbd.service... Sep 10 00:39:15.972165 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Sep 10 00:39:15.992828 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 10 00:39:16.007000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:16.006209 systemd[1]: Started systemd-userdbd.service. Sep 10 00:39:16.029135 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Sep 10 00:39:16.033128 kernel: ACPI: button: Power Button [PWRF] Sep 10 00:39:16.042000 audit[1019]: AVC avc: denied { confidentiality } for pid=1019 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Sep 10 00:39:16.042000 audit[1019]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55b52d0780d0 a1=338ec a2=7f6fc4212bc5 a3=5 items=110 ppid=1017 pid=1019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:16.042000 audit: CWD cwd="/" Sep 10 00:39:16.042000 audit: PATH item=0 name=(null) inode=50 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=1 name=(null) inode=16385 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=2 name=(null) inode=16385 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=3 name=(null) inode=16386 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=4 name=(null) inode=16385 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=5 name=(null) inode=16387 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=6 name=(null) inode=16385 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=7 name=(null) inode=16388 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=8 name=(null) inode=16388 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=9 name=(null) inode=16389 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=10 name=(null) inode=16388 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=11 name=(null) inode=16390 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=12 name=(null) inode=16388 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=13 name=(null) inode=16391 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=14 name=(null) inode=16388 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=15 name=(null) inode=16392 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=16 name=(null) inode=16388 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=17 name=(null) inode=16393 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=18 name=(null) inode=16385 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=19 name=(null) inode=16394 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=20 name=(null) inode=16394 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=21 name=(null) inode=16395 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=22 name=(null) inode=16394 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=23 name=(null) inode=16396 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=24 name=(null) inode=16394 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=25 name=(null) inode=16397 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=26 name=(null) inode=16394 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=27 name=(null) inode=16398 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=28 name=(null) inode=16394 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=29 name=(null) inode=16399 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=30 name=(null) inode=16385 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=31 name=(null) inode=16400 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=32 name=(null) inode=16400 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=33 name=(null) inode=16401 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=34 name=(null) inode=16400 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=35 name=(null) inode=16402 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=36 name=(null) inode=16400 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=37 name=(null) inode=16403 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=38 name=(null) inode=16400 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=39 name=(null) inode=16404 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=40 name=(null) inode=16400 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=41 name=(null) inode=16405 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=42 name=(null) inode=16385 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=43 name=(null) inode=16406 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=44 name=(null) inode=16406 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=45 name=(null) inode=16407 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=46 name=(null) inode=16406 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=47 name=(null) inode=16408 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=48 name=(null) inode=16406 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=49 name=(null) inode=16409 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=50 name=(null) inode=16406 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=51 name=(null) inode=16410 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=52 name=(null) inode=16406 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=53 name=(null) inode=16411 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=54 name=(null) inode=50 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=55 name=(null) inode=16412 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=56 name=(null) inode=16412 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=57 name=(null) inode=16413 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=58 name=(null) inode=16412 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=59 name=(null) inode=16414 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=60 name=(null) inode=16412 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=61 name=(null) inode=16415 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=62 name=(null) inode=16415 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=63 name=(null) inode=16416 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=64 name=(null) inode=16415 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=65 name=(null) inode=16417 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=66 name=(null) inode=16415 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=67 name=(null) inode=16418 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=68 name=(null) inode=16415 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=69 name=(null) inode=16419 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=70 name=(null) inode=16415 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=71 name=(null) inode=16420 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=72 name=(null) inode=16412 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=73 name=(null) inode=16421 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=74 name=(null) inode=16421 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=75 name=(null) inode=16422 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=76 name=(null) inode=16421 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=77 name=(null) inode=16423 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=78 name=(null) inode=16421 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=79 name=(null) inode=16424 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=80 name=(null) inode=16421 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=81 name=(null) inode=16425 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=82 name=(null) inode=16421 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=83 name=(null) inode=16426 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=84 name=(null) inode=16412 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=85 name=(null) inode=16427 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=86 name=(null) inode=16427 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=87 name=(null) inode=16428 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=88 name=(null) inode=16427 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=89 name=(null) inode=16429 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=90 name=(null) inode=16427 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=91 name=(null) inode=16430 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=92 name=(null) inode=16427 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=93 name=(null) inode=16431 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=94 name=(null) inode=16427 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=95 name=(null) inode=16432 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=96 name=(null) inode=16412 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=97 name=(null) inode=16433 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=98 name=(null) inode=16433 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=99 name=(null) inode=16434 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=100 name=(null) inode=16433 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=101 name=(null) inode=16435 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=102 name=(null) inode=16433 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=103 name=(null) inode=16436 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=104 name=(null) inode=16433 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=105 name=(null) inode=16437 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=106 name=(null) inode=16433 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=107 name=(null) inode=16438 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PATH item=109 name=(null) inode=16439 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:39:16.042000 audit: PROCTITLE proctitle="(udev-worker)" Sep 10 00:39:16.078286 kernel: i801_smbus 0000:00:1f.3: Enabling SMBus device Sep 10 00:39:16.080620 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Sep 10 00:39:16.080748 kernel: i2c i2c-0: 1/1 memory slots populated (from DMI) Sep 10 00:39:16.080869 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Sep 10 00:39:16.087145 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Sep 10 00:39:16.105651 systemd-networkd[1026]: lo: Link UP Sep 10 00:39:16.105697 systemd-networkd[1026]: lo: Gained carrier Sep 10 00:39:16.106522 systemd-networkd[1026]: Enumeration completed Sep 10 00:39:16.106639 systemd[1]: Started systemd-networkd.service. Sep 10 00:39:16.106655 systemd-networkd[1026]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 10 00:39:16.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:16.111081 systemd-networkd[1026]: eth0: Link UP Sep 10 00:39:16.111099 systemd-networkd[1026]: eth0: Gained carrier Sep 10 00:39:16.120154 kernel: mousedev: PS/2 mouse device common for all mice Sep 10 00:39:16.131255 systemd-networkd[1026]: eth0: DHCPv4 address 10.0.0.37/16, gateway 10.0.0.1 acquired from 10.0.0.1 Sep 10 00:39:16.135592 kernel: kvm: Nested Virtualization enabled Sep 10 00:39:16.135648 kernel: SVM: kvm: Nested Paging enabled Sep 10 00:39:16.135664 kernel: SVM: Virtual VMLOAD VMSAVE supported Sep 10 00:39:16.136252 kernel: SVM: Virtual GIF supported Sep 10 00:39:16.156163 kernel: EDAC MC: Ver: 3.0.0 Sep 10 00:39:16.183685 systemd[1]: Finished systemd-udev-settle.service. Sep 10 00:39:16.184000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:16.186291 systemd[1]: Starting lvm2-activation-early.service... Sep 10 00:39:16.225094 lvm[1052]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 10 00:39:16.257361 systemd[1]: Finished lvm2-activation-early.service. Sep 10 00:39:16.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:16.258476 systemd[1]: Reached target cryptsetup.target. Sep 10 00:39:16.260603 systemd[1]: Starting lvm2-activation.service... Sep 10 00:39:16.265156 lvm[1053]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 10 00:39:16.291136 systemd[1]: Finished lvm2-activation.service. Sep 10 00:39:16.324000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:16.324551 systemd[1]: Reached target local-fs-pre.target. Sep 10 00:39:16.325536 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Sep 10 00:39:16.325575 systemd[1]: Reached target local-fs.target. Sep 10 00:39:16.326344 systemd[1]: Reached target machines.target. Sep 10 00:39:16.328345 systemd[1]: Starting ldconfig.service... Sep 10 00:39:16.329260 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 10 00:39:16.329322 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 10 00:39:16.330220 systemd[1]: Starting systemd-boot-update.service... Sep 10 00:39:16.332390 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Sep 10 00:39:16.334627 systemd[1]: Starting systemd-machine-id-commit.service... Sep 10 00:39:16.336572 systemd[1]: Starting systemd-sysext.service... Sep 10 00:39:16.337604 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1055 (bootctl) Sep 10 00:39:16.338458 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Sep 10 00:39:16.343386 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Sep 10 00:39:16.343000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:16.345742 systemd[1]: Unmounting usr-share-oem.mount... Sep 10 00:39:16.349133 systemd[1]: usr-share-oem.mount: Deactivated successfully. Sep 10 00:39:16.349321 systemd[1]: Unmounted usr-share-oem.mount. Sep 10 00:39:16.360149 kernel: loop0: detected capacity change from 0 to 229808 Sep 10 00:39:16.380606 systemd-fsck[1063]: fsck.fat 4.2 (2021-01-31) Sep 10 00:39:16.380606 systemd-fsck[1063]: /dev/vda1: 791 files, 120785/258078 clusters Sep 10 00:39:16.382257 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Sep 10 00:39:16.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:16.406802 systemd[1]: Mounting boot.mount... Sep 10 00:39:16.734760 systemd[1]: Mounted boot.mount. Sep 10 00:39:16.750144 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Sep 10 00:39:16.755331 systemd[1]: Finished systemd-boot-update.service. Sep 10 00:39:16.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:16.769137 kernel: loop1: detected capacity change from 0 to 229808 Sep 10 00:39:16.771355 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Sep 10 00:39:16.771991 systemd[1]: Finished systemd-machine-id-commit.service. Sep 10 00:39:16.773000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:16.775606 (sd-sysext)[1068]: Using extensions 'kubernetes'. Sep 10 00:39:16.775971 (sd-sysext)[1068]: Merged extensions into '/usr'. Sep 10 00:39:16.794035 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 00:39:16.795591 systemd[1]: Mounting usr-share-oem.mount... Sep 10 00:39:16.796770 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 10 00:39:16.798365 systemd[1]: Starting modprobe@dm_mod.service... Sep 10 00:39:16.800599 systemd[1]: Starting modprobe@efi_pstore.service... Sep 10 00:39:16.803091 systemd[1]: Starting modprobe@loop.service... Sep 10 00:39:16.804048 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 10 00:39:16.804231 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 10 00:39:16.804367 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 00:39:16.807626 systemd[1]: Mounted usr-share-oem.mount. Sep 10 00:39:16.808928 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 10 00:39:16.809095 systemd[1]: Finished modprobe@dm_mod.service. Sep 10 00:39:16.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:16.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:16.810598 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 10 00:39:16.810708 systemd[1]: Finished modprobe@efi_pstore.service. Sep 10 00:39:16.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:16.811000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:16.812303 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 10 00:39:16.812452 systemd[1]: Finished modprobe@loop.service. Sep 10 00:39:16.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:16.813000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:16.814200 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 10 00:39:16.814341 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 10 00:39:16.816058 systemd[1]: Finished systemd-sysext.service. Sep 10 00:39:16.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:16.818490 systemd[1]: Starting ensure-sysext.service... Sep 10 00:39:16.820315 systemd[1]: Starting systemd-tmpfiles-setup.service... Sep 10 00:39:16.825507 systemd[1]: Reloading. Sep 10 00:39:16.835176 systemd-tmpfiles[1075]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Sep 10 00:39:16.837090 systemd-tmpfiles[1075]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Sep 10 00:39:16.839642 systemd-tmpfiles[1075]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Sep 10 00:39:16.923971 /usr/lib/systemd/system-generators/torcx-generator[1094]: time="2025-09-10T00:39:16Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 10 00:39:16.924456 /usr/lib/systemd/system-generators/torcx-generator[1094]: time="2025-09-10T00:39:16Z" level=info msg="torcx already run" Sep 10 00:39:16.957646 ldconfig[1054]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Sep 10 00:39:16.995375 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 10 00:39:16.995394 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 10 00:39:17.015365 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 10 00:39:17.070000 audit: BPF prog-id=30 op=LOAD Sep 10 00:39:17.070000 audit: BPF prog-id=26 op=UNLOAD Sep 10 00:39:17.071000 audit: BPF prog-id=31 op=LOAD Sep 10 00:39:17.071000 audit: BPF prog-id=21 op=UNLOAD Sep 10 00:39:17.071000 audit: BPF prog-id=32 op=LOAD Sep 10 00:39:17.072000 audit: BPF prog-id=33 op=LOAD Sep 10 00:39:17.072000 audit: BPF prog-id=22 op=UNLOAD Sep 10 00:39:17.072000 audit: BPF prog-id=23 op=UNLOAD Sep 10 00:39:17.072000 audit: BPF prog-id=34 op=LOAD Sep 10 00:39:17.072000 audit: BPF prog-id=35 op=LOAD Sep 10 00:39:17.072000 audit: BPF prog-id=24 op=UNLOAD Sep 10 00:39:17.072000 audit: BPF prog-id=25 op=UNLOAD Sep 10 00:39:17.073000 audit: BPF prog-id=36 op=LOAD Sep 10 00:39:17.073000 audit: BPF prog-id=27 op=UNLOAD Sep 10 00:39:17.073000 audit: BPF prog-id=37 op=LOAD Sep 10 00:39:17.073000 audit: BPF prog-id=38 op=LOAD Sep 10 00:39:17.073000 audit: BPF prog-id=28 op=UNLOAD Sep 10 00:39:17.073000 audit: BPF prog-id=29 op=UNLOAD Sep 10 00:39:17.074957 systemd[1]: Finished ldconfig.service. Sep 10 00:39:17.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:17.076832 systemd[1]: Finished systemd-tmpfiles-setup.service. Sep 10 00:39:17.077000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:17.080855 systemd[1]: Starting audit-rules.service... Sep 10 00:39:17.082570 systemd[1]: Starting clean-ca-certificates.service... Sep 10 00:39:17.084837 systemd[1]: Starting systemd-journal-catalog-update.service... Sep 10 00:39:17.086000 audit: BPF prog-id=39 op=LOAD Sep 10 00:39:17.087913 systemd[1]: Starting systemd-resolved.service... Sep 10 00:39:17.089000 audit: BPF prog-id=40 op=LOAD Sep 10 00:39:17.090935 systemd[1]: Starting systemd-timesyncd.service... Sep 10 00:39:17.093099 systemd[1]: Starting systemd-update-utmp.service... Sep 10 00:39:17.094637 systemd[1]: Finished clean-ca-certificates.service. Sep 10 00:39:17.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:17.098000 audit[1148]: SYSTEM_BOOT pid=1148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Sep 10 00:39:17.098029 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 10 00:39:17.105437 systemd[1]: Finished systemd-update-utmp.service. Sep 10 00:39:17.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:17.107255 systemd[1]: Finished systemd-journal-catalog-update.service. Sep 10 00:39:17.108000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:17.109809 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 10 00:39:17.111923 systemd[1]: Starting modprobe@dm_mod.service... Sep 10 00:39:17.114247 systemd[1]: Starting modprobe@efi_pstore.service... Sep 10 00:39:17.116516 systemd[1]: Starting modprobe@loop.service... Sep 10 00:39:17.117703 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 10 00:39:17.117851 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 10 00:39:17.119307 systemd[1]: Starting systemd-update-done.service... Sep 10 00:39:17.120418 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 10 00:39:17.121552 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 10 00:39:17.121714 systemd[1]: Finished modprobe@dm_mod.service. Sep 10 00:39:17.122000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:17.122000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:17.123459 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 10 00:39:17.123603 systemd[1]: Finished modprobe@efi_pstore.service. Sep 10 00:39:17.125000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Sep 10 00:39:17.125000 audit[1161]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffde6b391b0 a2=420 a3=0 items=0 ppid=1137 pid=1161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:17.125000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Sep 10 00:39:17.125476 augenrules[1161]: No rules Sep 10 00:39:17.126698 systemd[1]: Finished audit-rules.service. Sep 10 00:39:17.127888 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 10 00:39:17.128054 systemd[1]: Finished modprobe@loop.service. Sep 10 00:39:17.129367 systemd[1]: Finished systemd-update-done.service. Sep 10 00:39:17.130673 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 10 00:39:17.130884 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 10 00:39:17.134491 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 10 00:39:17.136637 systemd[1]: Starting modprobe@dm_mod.service... Sep 10 00:39:17.139032 systemd[1]: Starting modprobe@drm.service... Sep 10 00:39:17.141722 systemd[1]: Starting modprobe@efi_pstore.service... Sep 10 00:39:17.144116 systemd[1]: Starting modprobe@loop.service... Sep 10 00:39:17.145068 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 10 00:39:17.145229 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 10 00:39:17.147030 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 10 00:39:17.148182 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 10 00:39:17.149950 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 10 00:39:17.150123 systemd[1]: Finished modprobe@dm_mod.service. Sep 10 00:39:17.151649 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 10 00:39:17.151794 systemd[1]: Finished modprobe@drm.service. Sep 10 00:39:17.153583 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 10 00:39:17.153797 systemd[1]: Finished modprobe@efi_pstore.service. Sep 10 00:39:17.155410 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 10 00:39:17.155694 systemd[1]: Finished modprobe@loop.service. Sep 10 00:39:17.158769 systemd[1]: Finished ensure-sysext.service. Sep 10 00:39:17.160701 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 10 00:39:17.160747 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 10 00:39:17.169062 systemd[1]: Started systemd-timesyncd.service. Sep 10 00:39:17.170436 systemd[1]: Reached target time-set.target. Sep 10 00:39:17.170981 systemd-resolved[1141]: Positive Trust Anchors: Sep 10 00:39:17.170994 systemd-resolved[1141]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 10 00:39:17.171030 systemd-resolved[1141]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 10 00:39:18.094560 systemd-timesyncd[1145]: Contacted time server 10.0.0.1:123 (10.0.0.1). Sep 10 00:39:18.094618 systemd-timesyncd[1145]: Initial clock synchronization to Wed 2025-09-10 00:39:18.094452 UTC. Sep 10 00:39:18.127676 systemd-resolved[1141]: Defaulting to hostname 'linux'. Sep 10 00:39:18.129519 systemd[1]: Started systemd-resolved.service. Sep 10 00:39:18.130617 systemd[1]: Reached target network.target. Sep 10 00:39:18.131466 systemd[1]: Reached target nss-lookup.target. Sep 10 00:39:18.132461 systemd[1]: Reached target sysinit.target. Sep 10 00:39:18.133447 systemd[1]: Started motdgen.path. Sep 10 00:39:18.134248 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Sep 10 00:39:18.135578 systemd[1]: Started logrotate.timer. Sep 10 00:39:18.136504 systemd[1]: Started mdadm.timer. Sep 10 00:39:18.137294 systemd[1]: Started systemd-tmpfiles-clean.timer. Sep 10 00:39:18.138238 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Sep 10 00:39:18.138266 systemd[1]: Reached target paths.target. Sep 10 00:39:18.139084 systemd[1]: Reached target timers.target. Sep 10 00:39:18.140364 systemd[1]: Listening on dbus.socket. Sep 10 00:39:18.142216 systemd[1]: Starting docker.socket... Sep 10 00:39:18.145191 systemd[1]: Listening on sshd.socket. Sep 10 00:39:18.146076 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 10 00:39:18.146458 systemd[1]: Listening on docker.socket. Sep 10 00:39:18.147253 systemd[1]: Reached target sockets.target. Sep 10 00:39:18.148026 systemd[1]: Reached target basic.target. Sep 10 00:39:18.148864 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 10 00:39:18.148892 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 10 00:39:18.149737 systemd[1]: Starting containerd.service... Sep 10 00:39:18.151435 systemd[1]: Starting dbus.service... Sep 10 00:39:18.153075 systemd[1]: Starting enable-oem-cloudinit.service... Sep 10 00:39:18.155267 systemd[1]: Starting extend-filesystems.service... Sep 10 00:39:18.156304 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Sep 10 00:39:18.157363 systemd[1]: Starting motdgen.service... Sep 10 00:39:18.158500 jq[1177]: false Sep 10 00:39:18.160056 systemd[1]: Starting prepare-helm.service... Sep 10 00:39:18.162128 systemd[1]: Starting ssh-key-proc-cmdline.service... Sep 10 00:39:18.164380 systemd[1]: Starting sshd-keygen.service... Sep 10 00:39:18.168003 systemd[1]: Starting systemd-logind.service... Sep 10 00:39:18.168873 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 10 00:39:18.168990 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Sep 10 00:39:18.169481 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Sep 10 00:39:18.170229 systemd[1]: Starting update-engine.service... Sep 10 00:39:18.175569 systemd[1]: Starting update-ssh-keys-after-ignition.service... Sep 10 00:39:18.181278 jq[1193]: true Sep 10 00:39:18.182276 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Sep 10 00:39:18.182578 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Sep 10 00:39:18.183224 systemd[1]: motdgen.service: Deactivated successfully. Sep 10 00:39:18.183432 systemd[1]: Finished motdgen.service. Sep 10 00:39:18.186301 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Sep 10 00:39:18.186512 systemd[1]: Finished ssh-key-proc-cmdline.service. Sep 10 00:39:18.193337 jq[1198]: true Sep 10 00:39:18.214043 dbus-daemon[1176]: [system] SELinux support is enabled Sep 10 00:39:18.214252 systemd[1]: Started dbus.service. Sep 10 00:39:18.217747 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Sep 10 00:39:18.217782 systemd[1]: Reached target system-config.target. Sep 10 00:39:18.219020 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Sep 10 00:39:18.219050 systemd[1]: Reached target user-config.target. Sep 10 00:39:18.242753 env[1200]: time="2025-09-10T00:39:18.242627357Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Sep 10 00:39:18.261254 env[1200]: time="2025-09-10T00:39:18.261200769Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Sep 10 00:39:18.261422 env[1200]: time="2025-09-10T00:39:18.261396506Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Sep 10 00:39:18.262926 env[1200]: time="2025-09-10T00:39:18.262871552Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.191-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Sep 10 00:39:18.262926 env[1200]: time="2025-09-10T00:39:18.262906487Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Sep 10 00:39:18.263312 env[1200]: time="2025-09-10T00:39:18.263278194Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 10 00:39:18.263312 env[1200]: time="2025-09-10T00:39:18.263304604Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Sep 10 00:39:18.263370 env[1200]: time="2025-09-10T00:39:18.263320444Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Sep 10 00:39:18.263370 env[1200]: time="2025-09-10T00:39:18.263332126Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Sep 10 00:39:18.263464 env[1200]: time="2025-09-10T00:39:18.263435349Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Sep 10 00:39:18.263818 env[1200]: time="2025-09-10T00:39:18.263793090Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Sep 10 00:39:18.263986 env[1200]: time="2025-09-10T00:39:18.263959562Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 10 00:39:18.264014 env[1200]: time="2025-09-10T00:39:18.263983988Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Sep 10 00:39:18.264086 env[1200]: time="2025-09-10T00:39:18.264070360Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Sep 10 00:39:18.264113 env[1200]: time="2025-09-10T00:39:18.264086550Z" level=info msg="metadata content store policy set" policy=shared Sep 10 00:39:18.272678 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 00:39:18.272730 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 00:39:18.299030 systemd-logind[1188]: Watching system buttons on /dev/input/event1 (Power Button) Sep 10 00:39:18.299058 systemd-logind[1188]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Sep 10 00:39:18.301015 systemd-logind[1188]: New seat seat0. Sep 10 00:39:18.304202 systemd-networkd[1026]: eth0: Gained IPv6LL Sep 10 00:39:18.307856 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 10 00:39:18.309223 systemd[1]: Reached target network-online.target. Sep 10 00:39:18.312429 systemd[1]: Starting kubelet.service... Sep 10 00:39:18.315280 systemd[1]: Started systemd-logind.service. Sep 10 00:39:18.315786 tar[1197]: linux-amd64/LICENSE Sep 10 00:39:18.315786 tar[1197]: linux-amd64/helm Sep 10 00:39:18.322265 extend-filesystems[1178]: Found loop1 Sep 10 00:39:18.322265 extend-filesystems[1178]: Found sr0 Sep 10 00:39:18.322265 extend-filesystems[1178]: Found vda Sep 10 00:39:18.322265 extend-filesystems[1178]: Found vda1 Sep 10 00:39:18.322265 extend-filesystems[1178]: Found vda2 Sep 10 00:39:18.350571 extend-filesystems[1178]: Found vda3 Sep 10 00:39:18.350571 extend-filesystems[1178]: Found usr Sep 10 00:39:18.350571 extend-filesystems[1178]: Found vda4 Sep 10 00:39:18.350571 extend-filesystems[1178]: Found vda6 Sep 10 00:39:18.350571 extend-filesystems[1178]: Found vda7 Sep 10 00:39:18.350571 extend-filesystems[1178]: Found vda9 Sep 10 00:39:18.350571 extend-filesystems[1178]: Checking size of /dev/vda9 Sep 10 00:39:18.384635 extend-filesystems[1178]: Resized partition /dev/vda9 Sep 10 00:39:18.426272 update_engine[1192]: I0910 00:39:18.406137 1192 main.cc:92] Flatcar Update Engine starting Sep 10 00:39:18.429918 extend-filesystems[1231]: resize2fs 1.46.5 (30-Dec-2021) Sep 10 00:39:18.433983 systemd[1]: Started update-engine.service. Sep 10 00:39:18.439513 systemd[1]: Started locksmithd.service. Sep 10 00:39:18.472404 update_engine[1192]: I0910 00:39:18.471691 1192 update_check_scheduler.cc:74] Next update check in 9m45s Sep 10 00:39:18.576988 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Sep 10 00:39:18.667032 env[1200]: time="2025-09-10T00:39:18.666909918Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Sep 10 00:39:18.667032 env[1200]: time="2025-09-10T00:39:18.667039401Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Sep 10 00:39:18.667032 env[1200]: time="2025-09-10T00:39:18.667062354Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Sep 10 00:39:18.667311 env[1200]: time="2025-09-10T00:39:18.667144849Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Sep 10 00:39:18.667311 env[1200]: time="2025-09-10T00:39:18.667177630Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Sep 10 00:39:18.667311 env[1200]: time="2025-09-10T00:39:18.667197287Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Sep 10 00:39:18.667311 env[1200]: time="2025-09-10T00:39:18.667210492Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Sep 10 00:39:18.667311 env[1200]: time="2025-09-10T00:39:18.667271426Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Sep 10 00:39:18.667311 env[1200]: time="2025-09-10T00:39:18.667289259Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Sep 10 00:39:18.667311 env[1200]: time="2025-09-10T00:39:18.667304237Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Sep 10 00:39:18.667466 env[1200]: time="2025-09-10T00:39:18.667320789Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Sep 10 00:39:18.667466 env[1200]: time="2025-09-10T00:39:18.667349863Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Sep 10 00:39:18.667629 env[1200]: time="2025-09-10T00:39:18.667585405Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Sep 10 00:39:18.667761 env[1200]: time="2025-09-10T00:39:18.667735506Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Sep 10 00:39:18.669542 env[1200]: time="2025-09-10T00:39:18.668255311Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Sep 10 00:39:18.669542 env[1200]: time="2025-09-10T00:39:18.668343216Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Sep 10 00:39:18.669542 env[1200]: time="2025-09-10T00:39:18.668360118Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Sep 10 00:39:18.669542 env[1200]: time="2025-09-10T00:39:18.668456829Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Sep 10 00:39:18.669542 env[1200]: time="2025-09-10T00:39:18.668474622Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Sep 10 00:39:18.669542 env[1200]: time="2025-09-10T00:39:18.668495492Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Sep 10 00:39:18.669542 env[1200]: time="2025-09-10T00:39:18.668510359Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Sep 10 00:39:18.669542 env[1200]: time="2025-09-10T00:39:18.668540676Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Sep 10 00:39:18.669542 env[1200]: time="2025-09-10T00:39:18.668556386Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Sep 10 00:39:18.669542 env[1200]: time="2025-09-10T00:39:18.668570001Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Sep 10 00:39:18.669542 env[1200]: time="2025-09-10T00:39:18.668582555Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Sep 10 00:39:18.669542 env[1200]: time="2025-09-10T00:39:18.668597863Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Sep 10 00:39:18.669542 env[1200]: time="2025-09-10T00:39:18.668804431Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Sep 10 00:39:18.669542 env[1200]: time="2025-09-10T00:39:18.668822214Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Sep 10 00:39:18.669542 env[1200]: time="2025-09-10T00:39:18.668835589Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Sep 10 00:39:18.669926 env[1200]: time="2025-09-10T00:39:18.668855276Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Sep 10 00:39:18.669926 env[1200]: time="2025-09-10T00:39:18.668876135Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Sep 10 00:39:18.669926 env[1200]: time="2025-09-10T00:39:18.668890262Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Sep 10 00:39:18.669926 env[1200]: time="2025-09-10T00:39:18.668923735Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Sep 10 00:39:18.669926 env[1200]: time="2025-09-10T00:39:18.668996561Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Sep 10 00:39:18.670063 env[1200]: time="2025-09-10T00:39:18.669258142Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Sep 10 00:39:18.670063 env[1200]: time="2025-09-10T00:39:18.669337891Z" level=info msg="Connect containerd service" Sep 10 00:39:18.670063 env[1200]: time="2025-09-10T00:39:18.669414705Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Sep 10 00:39:18.681836 env[1200]: time="2025-09-10T00:39:18.680423401Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 10 00:39:18.681836 env[1200]: time="2025-09-10T00:39:18.680628175Z" level=info msg="Start subscribing containerd event" Sep 10 00:39:18.681836 env[1200]: time="2025-09-10T00:39:18.681115899Z" level=info msg="Start recovering state" Sep 10 00:39:18.681836 env[1200]: time="2025-09-10T00:39:18.681324601Z" level=info msg="Start event monitor" Sep 10 00:39:18.681836 env[1200]: time="2025-09-10T00:39:18.681392748Z" level=info msg="Start snapshots syncer" Sep 10 00:39:18.681836 env[1200]: time="2025-09-10T00:39:18.681453583Z" level=info msg="Start cni network conf syncer for default" Sep 10 00:39:18.681836 env[1200]: time="2025-09-10T00:39:18.681462519Z" level=info msg="Start streaming server" Sep 10 00:39:18.681836 env[1200]: time="2025-09-10T00:39:18.681519376Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Sep 10 00:39:18.681836 env[1200]: time="2025-09-10T00:39:18.681598264Z" level=info msg=serving... address=/run/containerd/containerd.sock Sep 10 00:39:18.681791 systemd[1]: Started containerd.service. Sep 10 00:39:18.684844 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Sep 10 00:39:18.684977 env[1200]: time="2025-09-10T00:39:18.684947625Z" level=info msg="containerd successfully booted in 0.444043s" Sep 10 00:39:18.687004 bash[1220]: Updated "/home/core/.ssh/authorized_keys" Sep 10 00:39:18.687769 systemd[1]: Finished update-ssh-keys-after-ignition.service. Sep 10 00:39:18.832497 locksmithd[1233]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Sep 10 00:39:18.855136 extend-filesystems[1231]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Sep 10 00:39:18.855136 extend-filesystems[1231]: old_desc_blocks = 1, new_desc_blocks = 1 Sep 10 00:39:18.855136 extend-filesystems[1231]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Sep 10 00:39:18.859286 extend-filesystems[1178]: Resized filesystem in /dev/vda9 Sep 10 00:39:18.860442 systemd[1]: extend-filesystems.service: Deactivated successfully. Sep 10 00:39:18.860683 systemd[1]: Finished extend-filesystems.service. Sep 10 00:39:18.985895 systemd[1]: Created slice system-sshd.slice. Sep 10 00:39:19.064228 tar[1197]: linux-amd64/README.md Sep 10 00:39:19.069457 systemd[1]: Finished prepare-helm.service. Sep 10 00:39:19.654357 sshd_keygen[1199]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Sep 10 00:39:19.688568 systemd[1]: Finished sshd-keygen.service. Sep 10 00:39:19.698910 systemd[1]: Starting issuegen.service... Sep 10 00:39:19.701151 systemd[1]: Started sshd@0-10.0.0.37:22-10.0.0.1:41120.service. Sep 10 00:39:19.705691 systemd[1]: issuegen.service: Deactivated successfully. Sep 10 00:39:19.705917 systemd[1]: Finished issuegen.service. Sep 10 00:39:19.709207 systemd[1]: Starting systemd-user-sessions.service... Sep 10 00:39:19.718453 systemd[1]: Finished systemd-user-sessions.service. Sep 10 00:39:19.721943 systemd[1]: Started getty@tty1.service. Sep 10 00:39:19.725724 systemd[1]: Started serial-getty@ttyS0.service. Sep 10 00:39:19.764988 systemd[1]: Reached target getty.target. Sep 10 00:39:19.803559 sshd[1253]: Accepted publickey for core from 10.0.0.1 port 41120 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:39:19.806603 sshd[1253]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:39:19.819427 systemd-logind[1188]: New session 1 of user core. Sep 10 00:39:19.820422 systemd[1]: Created slice user-500.slice. Sep 10 00:39:19.831814 systemd[1]: Starting user-runtime-dir@500.service... Sep 10 00:39:19.844561 systemd[1]: Finished user-runtime-dir@500.service. Sep 10 00:39:19.847544 systemd[1]: Starting user@500.service... Sep 10 00:39:19.850920 (systemd)[1261]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:39:19.856222 systemd[1]: Started kubelet.service. Sep 10 00:39:19.892689 systemd[1]: Reached target multi-user.target. Sep 10 00:39:19.895304 systemd[1]: Starting systemd-update-utmp-runlevel.service... Sep 10 00:39:19.937115 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Sep 10 00:39:19.937312 systemd[1]: Finished systemd-update-utmp-runlevel.service. Sep 10 00:39:20.022704 systemd[1261]: Queued start job for default target default.target. Sep 10 00:39:20.023314 systemd[1261]: Reached target paths.target. Sep 10 00:39:20.023338 systemd[1261]: Reached target sockets.target. Sep 10 00:39:20.023355 systemd[1261]: Reached target timers.target. Sep 10 00:39:20.023370 systemd[1261]: Reached target basic.target. Sep 10 00:39:20.023485 systemd[1]: Started user@500.service. Sep 10 00:39:20.023622 systemd[1261]: Reached target default.target. Sep 10 00:39:20.023664 systemd[1261]: Startup finished in 126ms. Sep 10 00:39:20.031856 systemd[1]: Started session-1.scope. Sep 10 00:39:20.032775 systemd[1]: Startup finished in 834ms (kernel) + 5.017s (initrd) + 9.223s (userspace) = 15.075s. Sep 10 00:39:20.086717 systemd[1]: Started sshd@1-10.0.0.37:22-10.0.0.1:44822.service. Sep 10 00:39:20.126431 sshd[1274]: Accepted publickey for core from 10.0.0.1 port 44822 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:39:20.128258 sshd[1274]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:39:20.131960 systemd-logind[1188]: New session 2 of user core. Sep 10 00:39:20.132800 systemd[1]: Started session-2.scope. Sep 10 00:39:20.189445 sshd[1274]: pam_unix(sshd:session): session closed for user core Sep 10 00:39:20.192842 systemd[1]: sshd@1-10.0.0.37:22-10.0.0.1:44822.service: Deactivated successfully. Sep 10 00:39:20.193358 systemd[1]: session-2.scope: Deactivated successfully. Sep 10 00:39:20.193815 systemd-logind[1188]: Session 2 logged out. Waiting for processes to exit. Sep 10 00:39:20.194912 systemd[1]: Started sshd@2-10.0.0.37:22-10.0.0.1:44838.service. Sep 10 00:39:20.195728 systemd-logind[1188]: Removed session 2. Sep 10 00:39:20.235293 sshd[1280]: Accepted publickey for core from 10.0.0.1 port 44838 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:39:20.237117 sshd[1280]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:39:20.241846 systemd-logind[1188]: New session 3 of user core. Sep 10 00:39:20.242115 systemd[1]: Started session-3.scope. Sep 10 00:39:20.380255 sshd[1280]: pam_unix(sshd:session): session closed for user core Sep 10 00:39:20.382846 systemd[1]: sshd@2-10.0.0.37:22-10.0.0.1:44838.service: Deactivated successfully. Sep 10 00:39:20.383333 systemd[1]: session-3.scope: Deactivated successfully. Sep 10 00:39:20.383868 systemd-logind[1188]: Session 3 logged out. Waiting for processes to exit. Sep 10 00:39:20.384799 systemd[1]: Started sshd@3-10.0.0.37:22-10.0.0.1:44844.service. Sep 10 00:39:20.386200 systemd-logind[1188]: Removed session 3. Sep 10 00:39:20.421579 sshd[1291]: Accepted publickey for core from 10.0.0.1 port 44844 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:39:20.422996 sshd[1291]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:39:20.426807 systemd-logind[1188]: New session 4 of user core. Sep 10 00:39:20.427588 systemd[1]: Started session-4.scope. Sep 10 00:39:20.486866 sshd[1291]: pam_unix(sshd:session): session closed for user core Sep 10 00:39:20.489795 systemd[1]: sshd@3-10.0.0.37:22-10.0.0.1:44844.service: Deactivated successfully. Sep 10 00:39:20.490462 systemd[1]: session-4.scope: Deactivated successfully. Sep 10 00:39:20.491165 systemd-logind[1188]: Session 4 logged out. Waiting for processes to exit. Sep 10 00:39:20.492369 systemd[1]: Started sshd@4-10.0.0.37:22-10.0.0.1:44858.service. Sep 10 00:39:20.493340 systemd-logind[1188]: Removed session 4. Sep 10 00:39:20.531720 sshd[1297]: Accepted publickey for core from 10.0.0.1 port 44858 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:39:20.533388 sshd[1297]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:39:20.537553 systemd-logind[1188]: New session 5 of user core. Sep 10 00:39:20.538594 systemd[1]: Started session-5.scope. Sep 10 00:39:20.615510 sudo[1301]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Sep 10 00:39:20.615788 sudo[1301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 10 00:39:20.623184 dbus-daemon[1176]: Э\xe5\xba\xf3U: received setenforce notice (enforcing=-2103160576) Sep 10 00:39:20.625135 sudo[1301]: pam_unix(sudo:session): session closed for user root Sep 10 00:39:20.626906 sshd[1297]: pam_unix(sshd:session): session closed for user core Sep 10 00:39:20.629711 systemd[1]: sshd@4-10.0.0.37:22-10.0.0.1:44858.service: Deactivated successfully. Sep 10 00:39:20.630292 systemd[1]: session-5.scope: Deactivated successfully. Sep 10 00:39:20.630849 systemd-logind[1188]: Session 5 logged out. Waiting for processes to exit. Sep 10 00:39:20.631884 systemd[1]: Started sshd@5-10.0.0.37:22-10.0.0.1:44870.service. Sep 10 00:39:20.632636 systemd-logind[1188]: Removed session 5. Sep 10 00:39:20.670058 sshd[1305]: Accepted publickey for core from 10.0.0.1 port 44870 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:39:20.671587 sshd[1305]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:39:20.676257 systemd-logind[1188]: New session 6 of user core. Sep 10 00:39:20.677279 systemd[1]: Started session-6.scope. Sep 10 00:39:20.732956 sudo[1309]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Sep 10 00:39:20.733164 sudo[1309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 10 00:39:20.735721 sudo[1309]: pam_unix(sudo:session): session closed for user root Sep 10 00:39:20.741753 sudo[1308]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Sep 10 00:39:20.741978 sudo[1308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 10 00:39:20.770281 systemd[1]: Stopping audit-rules.service... Sep 10 00:39:20.770000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 10 00:39:20.771984 auditctl[1312]: No rules Sep 10 00:39:20.772302 systemd[1]: audit-rules.service: Deactivated successfully. Sep 10 00:39:20.772469 systemd[1]: Stopped audit-rules.service. Sep 10 00:39:20.772724 kernel: kauditd_printk_skb: 189 callbacks suppressed Sep 10 00:39:20.772782 kernel: audit: type=1305 audit(1757464760.770:199): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 10 00:39:20.773968 systemd[1]: Starting audit-rules.service... Sep 10 00:39:20.770000 audit[1312]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd9fc904e0 a2=420 a3=0 items=0 ppid=1 pid=1312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:20.782215 kernel: audit: type=1300 audit(1757464760.770:199): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd9fc904e0 a2=420 a3=0 items=0 ppid=1 pid=1312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:20.782261 kernel: audit: type=1327 audit(1757464760.770:199): proctitle=2F7362696E2F617564697463746C002D44 Sep 10 00:39:20.782289 kernel: audit: type=1131 audit(1757464760.770:200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:20.770000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Sep 10 00:39:20.770000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:20.792826 augenrules[1329]: No rules Sep 10 00:39:20.793436 systemd[1]: Finished audit-rules.service. Sep 10 00:39:20.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:20.794574 sudo[1308]: pam_unix(sudo:session): session closed for user root Sep 10 00:39:20.795968 sshd[1305]: pam_unix(sshd:session): session closed for user core Sep 10 00:39:20.793000 audit[1308]: USER_END pid=1308 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:39:20.799180 systemd[1]: sshd@5-10.0.0.37:22-10.0.0.1:44870.service: Deactivated successfully. Sep 10 00:39:20.799857 systemd[1]: session-6.scope: Deactivated successfully. Sep 10 00:39:20.800453 systemd-logind[1188]: Session 6 logged out. Waiting for processes to exit. Sep 10 00:39:20.801796 systemd[1]: Started sshd@6-10.0.0.37:22-10.0.0.1:44884.service. Sep 10 00:39:20.802394 kernel: audit: type=1130 audit(1757464760.792:201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:20.802458 kernel: audit: type=1106 audit(1757464760.793:202): pid=1308 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:39:20.802477 kernel: audit: type=1104 audit(1757464760.793:203): pid=1308 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:39:20.793000 audit[1308]: CRED_DISP pid=1308 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:39:20.803163 systemd-logind[1188]: Removed session 6. Sep 10 00:39:20.795000 audit[1305]: USER_END pid=1305 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:39:20.810661 kernel: audit: type=1106 audit(1757464760.795:204): pid=1305 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:39:20.810753 kernel: audit: type=1104 audit(1757464760.796:205): pid=1305 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:39:20.796000 audit[1305]: CRED_DISP pid=1305 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:39:20.814049 kernel: audit: type=1131 audit(1757464760.798:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.37:22-10.0.0.1:44870 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:20.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.37:22-10.0.0.1:44870 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:20.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.37:22-10.0.0.1:44884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:20.838000 audit[1335]: USER_ACCT pid=1335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:39:20.839363 sshd[1335]: Accepted publickey for core from 10.0.0.1 port 44884 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:39:20.839000 audit[1335]: CRED_ACQ pid=1335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:39:20.839000 audit[1335]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe15310020 a2=3 a3=0 items=0 ppid=1 pid=1335 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:20.839000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:39:20.840359 sshd[1335]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:39:20.843964 systemd-logind[1188]: New session 7 of user core. Sep 10 00:39:20.844745 systemd[1]: Started session-7.scope. Sep 10 00:39:20.848000 audit[1335]: USER_START pid=1335 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:39:20.849000 audit[1337]: CRED_ACQ pid=1337 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:39:20.903000 audit[1338]: USER_ACCT pid=1338 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:39:20.903000 audit[1338]: CRED_REFR pid=1338 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:39:20.904094 sudo[1338]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Sep 10 00:39:20.904300 sudo[1338]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 10 00:39:20.905000 audit[1338]: USER_START pid=1338 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:39:20.948215 systemd[1]: Starting docker.service... Sep 10 00:39:21.039222 env[1351]: time="2025-09-10T00:39:21.038955240Z" level=info msg="Starting up" Sep 10 00:39:21.043349 env[1351]: time="2025-09-10T00:39:21.043321177Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 10 00:39:21.043552 env[1351]: time="2025-09-10T00:39:21.043532303Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 10 00:39:21.043667 env[1351]: time="2025-09-10T00:39:21.043629075Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 10 00:39:21.043755 env[1351]: time="2025-09-10T00:39:21.043732759Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 10 00:39:21.053341 env[1351]: time="2025-09-10T00:39:21.053291906Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 10 00:39:21.053341 env[1351]: time="2025-09-10T00:39:21.053320540Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 10 00:39:21.053341 env[1351]: time="2025-09-10T00:39:21.053340728Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 10 00:39:21.053341 env[1351]: time="2025-09-10T00:39:21.053350276Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 10 00:39:21.060558 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3006811582-merged.mount: Deactivated successfully. Sep 10 00:39:21.812513 kubelet[1265]: E0910 00:39:21.812442 1265 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 10 00:39:21.814476 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 10 00:39:21.814594 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 10 00:39:21.813000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 10 00:39:21.814824 systemd[1]: kubelet.service: Consumed 1.621s CPU time. Sep 10 00:39:21.836889 env[1351]: time="2025-09-10T00:39:21.836833526Z" level=info msg="Loading containers: start." Sep 10 00:39:21.896000 audit[1388]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1388 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:21.896000 audit[1388]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fff94c3caa0 a2=0 a3=7fff94c3ca8c items=0 ppid=1351 pid=1388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:21.896000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Sep 10 00:39:21.898000 audit[1390]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1390 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:21.898000 audit[1390]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffc6af50420 a2=0 a3=7ffc6af5040c items=0 ppid=1351 pid=1390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:21.898000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Sep 10 00:39:21.900000 audit[1392]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1392 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:21.900000 audit[1392]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc804514b0 a2=0 a3=7ffc8045149c items=0 ppid=1351 pid=1392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:21.900000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 10 00:39:21.901000 audit[1394]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1394 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:21.901000 audit[1394]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffcd283d310 a2=0 a3=7ffcd283d2fc items=0 ppid=1351 pid=1394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:21.901000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 10 00:39:21.903000 audit[1396]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1396 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:21.903000 audit[1396]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc73e19e10 a2=0 a3=7ffc73e19dfc items=0 ppid=1351 pid=1396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:21.903000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Sep 10 00:39:21.917000 audit[1401]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1401 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:21.917000 audit[1401]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdeb6eecc0 a2=0 a3=7ffdeb6eecac items=0 ppid=1351 pid=1401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:21.917000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Sep 10 00:39:21.978000 audit[1403]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:21.978000 audit[1403]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffedabcf6e0 a2=0 a3=7ffedabcf6cc items=0 ppid=1351 pid=1403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:21.978000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Sep 10 00:39:21.980000 audit[1405]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:21.980000 audit[1405]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffd667e4e80 a2=0 a3=7ffd667e4e6c items=0 ppid=1351 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:21.980000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Sep 10 00:39:21.982000 audit[1407]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:21.982000 audit[1407]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffea6d12790 a2=0 a3=7ffea6d1277c items=0 ppid=1351 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:21.982000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 10 00:39:22.045000 audit[1411]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1411 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:22.045000 audit[1411]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fffb872a790 a2=0 a3=7fffb872a77c items=0 ppid=1351 pid=1411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:22.045000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 10 00:39:22.051000 audit[1412]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1412 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:22.051000 audit[1412]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe0c239580 a2=0 a3=7ffe0c23956c items=0 ppid=1351 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:22.051000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 10 00:39:22.063993 kernel: Initializing XFRM netlink socket Sep 10 00:39:22.097141 env[1351]: time="2025-09-10T00:39:22.097089820Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Sep 10 00:39:22.115000 audit[1420]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1420 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:22.115000 audit[1420]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffeeec31b60 a2=0 a3=7ffeeec31b4c items=0 ppid=1351 pid=1420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:22.115000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Sep 10 00:39:22.125000 audit[1423]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1423 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:22.125000 audit[1423]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffcc6732230 a2=0 a3=7ffcc673221c items=0 ppid=1351 pid=1423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:22.125000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Sep 10 00:39:22.128000 audit[1426]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1426 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:22.128000 audit[1426]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd8dbae270 a2=0 a3=7ffd8dbae25c items=0 ppid=1351 pid=1426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:22.128000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Sep 10 00:39:22.130000 audit[1428]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1428 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:22.130000 audit[1428]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fff1fe25b50 a2=0 a3=7fff1fe25b3c items=0 ppid=1351 pid=1428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:22.130000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Sep 10 00:39:22.132000 audit[1430]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1430 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:22.132000 audit[1430]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7fff93f336f0 a2=0 a3=7fff93f336dc items=0 ppid=1351 pid=1430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:22.132000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Sep 10 00:39:22.134000 audit[1432]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1432 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:22.134000 audit[1432]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffe888f8ef0 a2=0 a3=7ffe888f8edc items=0 ppid=1351 pid=1432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:22.134000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Sep 10 00:39:22.136000 audit[1434]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:22.136000 audit[1434]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7fff06048d60 a2=0 a3=7fff06048d4c items=0 ppid=1351 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:22.136000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Sep 10 00:39:22.142000 audit[1437]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:22.142000 audit[1437]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffdc44b8da0 a2=0 a3=7ffdc44b8d8c items=0 ppid=1351 pid=1437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:22.142000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Sep 10 00:39:22.144000 audit[1439]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1439 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:22.144000 audit[1439]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffde7d6ca30 a2=0 a3=7ffde7d6ca1c items=0 ppid=1351 pid=1439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:22.144000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 10 00:39:22.149000 audit[1441]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:22.149000 audit[1441]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffcea7d7e60 a2=0 a3=7ffcea7d7e4c items=0 ppid=1351 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:22.149000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 10 00:39:22.151000 audit[1443]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:22.151000 audit[1443]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe8e3a3710 a2=0 a3=7ffe8e3a36fc items=0 ppid=1351 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:22.151000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Sep 10 00:39:22.153348 systemd-networkd[1026]: docker0: Link UP Sep 10 00:39:22.210000 audit[1447]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1447 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:22.210000 audit[1447]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffdf8a84b0 a2=0 a3=7fffdf8a849c items=0 ppid=1351 pid=1447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:22.210000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 10 00:39:22.215000 audit[1448]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:22.215000 audit[1448]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffc95515d70 a2=0 a3=7ffc95515d5c items=0 ppid=1351 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:22.215000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 10 00:39:22.216805 env[1351]: time="2025-09-10T00:39:22.216751348Z" level=info msg="Loading containers: done." Sep 10 00:39:22.230580 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck347218990-merged.mount: Deactivated successfully. Sep 10 00:39:22.238761 env[1351]: time="2025-09-10T00:39:22.238703746Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Sep 10 00:39:22.238982 env[1351]: time="2025-09-10T00:39:22.238962492Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Sep 10 00:39:22.239084 env[1351]: time="2025-09-10T00:39:22.239070524Z" level=info msg="Daemon has completed initialization" Sep 10 00:39:22.258592 systemd[1]: Started docker.service. Sep 10 00:39:22.257000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:22.267021 env[1351]: time="2025-09-10T00:39:22.266947433Z" level=info msg="API listen on /run/docker.sock" Sep 10 00:39:23.331000 env[1200]: time="2025-09-10T00:39:23.330906637Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.4\"" Sep 10 00:39:24.564144 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1159628122.mount: Deactivated successfully. Sep 10 00:39:26.682891 env[1200]: time="2025-09-10T00:39:26.682823958Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:26.684971 env[1200]: time="2025-09-10T00:39:26.684918977Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1f41885d0a91155d5a5e670b2862eed338c7f12b0e8a5bbc88b1ab4a2d505ae8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:26.686902 env[1200]: time="2025-09-10T00:39:26.686866339Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:26.688686 env[1200]: time="2025-09-10T00:39:26.688642249Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:0d441d0d347145b3f02f20cb313239cdae86067643d7f70803fab8bac2d28876,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:26.689609 env[1200]: time="2025-09-10T00:39:26.689566423Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.4\" returns image reference \"sha256:1f41885d0a91155d5a5e670b2862eed338c7f12b0e8a5bbc88b1ab4a2d505ae8\"" Sep 10 00:39:26.690262 env[1200]: time="2025-09-10T00:39:26.690234506Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.4\"" Sep 10 00:39:29.600971 env[1200]: time="2025-09-10T00:39:29.600836022Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:29.603902 env[1200]: time="2025-09-10T00:39:29.603838002Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:358ab71c1a1ea4846ad0b3dff0d9db6b124236b64bc8a6b79dc874f65dc0d492,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:29.606783 env[1200]: time="2025-09-10T00:39:29.606732981Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:29.608982 env[1200]: time="2025-09-10T00:39:29.608920033Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:bd22c2af2f30a8f818568b4d5fe131098fdd38267e9e07872cfc33e8f5876bc3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:29.609769 env[1200]: time="2025-09-10T00:39:29.609682202Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.4\" returns image reference \"sha256:358ab71c1a1ea4846ad0b3dff0d9db6b124236b64bc8a6b79dc874f65dc0d492\"" Sep 10 00:39:29.610731 env[1200]: time="2025-09-10T00:39:29.610648264Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.4\"" Sep 10 00:39:31.934392 env[1200]: time="2025-09-10T00:39:31.934313646Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:31.937258 env[1200]: time="2025-09-10T00:39:31.937206331Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ab4ad8a84c3c69c18494ef32fa087b32f7c44d71e6acba463d2c7dda798c3d66,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:31.939505 env[1200]: time="2025-09-10T00:39:31.939467611Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:31.941602 env[1200]: time="2025-09-10T00:39:31.941544206Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:71533e5a960e2955a54164905e92dac516ec874a23e0bf31304db82650101a4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:31.942761 env[1200]: time="2025-09-10T00:39:31.942706736Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.4\" returns image reference \"sha256:ab4ad8a84c3c69c18494ef32fa087b32f7c44d71e6acba463d2c7dda798c3d66\"" Sep 10 00:39:31.943380 env[1200]: time="2025-09-10T00:39:31.943350864Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.4\"" Sep 10 00:39:32.065598 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Sep 10 00:39:32.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:32.065843 systemd[1]: Stopped kubelet.service. Sep 10 00:39:32.065902 systemd[1]: kubelet.service: Consumed 1.621s CPU time. Sep 10 00:39:32.066972 kernel: kauditd_printk_skb: 85 callbacks suppressed Sep 10 00:39:32.067037 kernel: audit: type=1130 audit(1757464772.064:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:32.067807 systemd[1]: Starting kubelet.service... Sep 10 00:39:32.064000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:32.073637 kernel: audit: type=1131 audit(1757464772.064:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:32.194899 systemd[1]: Started kubelet.service. Sep 10 00:39:32.194000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:32.198994 kernel: audit: type=1130 audit(1757464772.194:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:32.693613 kubelet[1488]: E0910 00:39:32.693445 1488 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 10 00:39:32.697051 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 10 00:39:32.738499 kernel: audit: type=1131 audit(1757464772.696:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 10 00:39:32.696000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 10 00:39:32.697200 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 10 00:39:35.385623 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1081358890.mount: Deactivated successfully. Sep 10 00:39:36.504589 env[1200]: time="2025-09-10T00:39:36.504501269Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:36.506762 env[1200]: time="2025-09-10T00:39:36.506683862Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1b2ea5e018dbbbd2efb8e5c540a6d3c463d77f250d3904429402ee057f09c64e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:36.508495 env[1200]: time="2025-09-10T00:39:36.508461676Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:36.510267 env[1200]: time="2025-09-10T00:39:36.510193263Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:bb04e9247da3aaeb96406b4d530a79fc865695b6807353dd1a28871df0d7f837,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:36.510695 env[1200]: time="2025-09-10T00:39:36.510643458Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.4\" returns image reference \"sha256:1b2ea5e018dbbbd2efb8e5c540a6d3c463d77f250d3904429402ee057f09c64e\"" Sep 10 00:39:36.511586 env[1200]: time="2025-09-10T00:39:36.511549166Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Sep 10 00:39:37.342399 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3358646259.mount: Deactivated successfully. Sep 10 00:39:39.084423 env[1200]: time="2025-09-10T00:39:39.084335930Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:39.086500 env[1200]: time="2025-09-10T00:39:39.086456467Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:39.088760 env[1200]: time="2025-09-10T00:39:39.088723368Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:39.090690 env[1200]: time="2025-09-10T00:39:39.090652876Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:39.091585 env[1200]: time="2025-09-10T00:39:39.091541783Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b\"" Sep 10 00:39:39.092538 env[1200]: time="2025-09-10T00:39:39.092479472Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Sep 10 00:39:39.611341 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3532352441.mount: Deactivated successfully. Sep 10 00:39:39.617322 env[1200]: time="2025-09-10T00:39:39.617248180Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:39.619399 env[1200]: time="2025-09-10T00:39:39.619352847Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:39.621066 env[1200]: time="2025-09-10T00:39:39.621025334Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:39.622541 env[1200]: time="2025-09-10T00:39:39.622497455Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:39.623041 env[1200]: time="2025-09-10T00:39:39.623010327Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Sep 10 00:39:39.623635 env[1200]: time="2025-09-10T00:39:39.623606304Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Sep 10 00:39:40.386327 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1483588994.mount: Deactivated successfully. Sep 10 00:39:42.948235 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Sep 10 00:39:42.956879 kernel: audit: type=1130 audit(1757464782.947:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:42.956943 kernel: audit: type=1131 audit(1757464782.947:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:42.947000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:42.947000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:42.948428 systemd[1]: Stopped kubelet.service. Sep 10 00:39:42.949867 systemd[1]: Starting kubelet.service... Sep 10 00:39:43.118000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:43.123141 kernel: audit: type=1130 audit(1757464783.118:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:43.118862 systemd[1]: Started kubelet.service. Sep 10 00:39:43.156898 kubelet[1499]: E0910 00:39:43.156847 1499 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 10 00:39:43.159717 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 10 00:39:43.159879 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 10 00:39:43.159000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 10 00:39:43.166014 kernel: audit: type=1131 audit(1757464783.159:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 10 00:39:44.395489 env[1200]: time="2025-09-10T00:39:44.395382708Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:44.397677 env[1200]: time="2025-09-10T00:39:44.397605026Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:44.399666 env[1200]: time="2025-09-10T00:39:44.399619694Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:44.401950 env[1200]: time="2025-09-10T00:39:44.401893208Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:44.402875 env[1200]: time="2025-09-10T00:39:44.402807893Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1\"" Sep 10 00:39:48.161765 systemd[1]: Stopped kubelet.service. Sep 10 00:39:48.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:48.164041 systemd[1]: Starting kubelet.service... Sep 10 00:39:48.161000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:48.199557 kernel: audit: type=1130 audit(1757464788.160:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:48.199629 kernel: audit: type=1131 audit(1757464788.161:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:48.214875 systemd[1]: Reloading. Sep 10 00:39:48.280374 /usr/lib/systemd/system-generators/torcx-generator[1555]: time="2025-09-10T00:39:48Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 10 00:39:48.280402 /usr/lib/systemd/system-generators/torcx-generator[1555]: time="2025-09-10T00:39:48Z" level=info msg="torcx already run" Sep 10 00:39:48.827490 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 10 00:39:48.827529 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 10 00:39:48.850358 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 10 00:39:48.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.931561 kernel: audit: type=1400 audit(1757464788.924:252): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.931652 kernel: audit: type=1400 audit(1757464788.924:253): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.931689 kernel: audit: type=1400 audit(1757464788.924:254): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.938078 kernel: audit: type=1400 audit(1757464788.924:255): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.938296 kernel: audit: type=1400 audit(1757464788.924:256): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.944863 kernel: audit: type=1400 audit(1757464788.924:257): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.945070 kernel: audit: type=1400 audit(1757464788.924:258): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.948001 kernel: audit: type=1400 audit(1757464788.924:259): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.930000 audit: BPF prog-id=46 op=LOAD Sep 10 00:39:48.930000 audit: BPF prog-id=41 op=UNLOAD Sep 10 00:39:48.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.937000 audit: BPF prog-id=47 op=LOAD Sep 10 00:39:48.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.940000 audit: BPF prog-id=48 op=LOAD Sep 10 00:39:48.940000 audit: BPF prog-id=42 op=UNLOAD Sep 10 00:39:48.940000 audit: BPF prog-id=43 op=UNLOAD Sep 10 00:39:48.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.950000 audit: BPF prog-id=49 op=LOAD Sep 10 00:39:48.950000 audit: BPF prog-id=30 op=UNLOAD Sep 10 00:39:48.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.951000 audit: BPF prog-id=50 op=LOAD Sep 10 00:39:48.951000 audit: BPF prog-id=39 op=UNLOAD Sep 10 00:39:48.953000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.953000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.953000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.953000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.953000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.953000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.953000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.953000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.953000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.954000 audit: BPF prog-id=51 op=LOAD Sep 10 00:39:48.954000 audit: BPF prog-id=31 op=UNLOAD Sep 10 00:39:48.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.954000 audit: BPF prog-id=52 op=LOAD Sep 10 00:39:48.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.955000 audit: BPF prog-id=53 op=LOAD Sep 10 00:39:48.955000 audit: BPF prog-id=32 op=UNLOAD Sep 10 00:39:48.955000 audit: BPF prog-id=33 op=UNLOAD Sep 10 00:39:48.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.955000 audit: BPF prog-id=54 op=LOAD Sep 10 00:39:48.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.955000 audit: BPF prog-id=55 op=LOAD Sep 10 00:39:48.955000 audit: BPF prog-id=34 op=UNLOAD Sep 10 00:39:48.955000 audit: BPF prog-id=35 op=UNLOAD Sep 10 00:39:48.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.956000 audit: BPF prog-id=56 op=LOAD Sep 10 00:39:48.956000 audit: BPF prog-id=44 op=UNLOAD Sep 10 00:39:48.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.958000 audit: BPF prog-id=57 op=LOAD Sep 10 00:39:48.958000 audit: BPF prog-id=36 op=UNLOAD Sep 10 00:39:48.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.958000 audit: BPF prog-id=58 op=LOAD Sep 10 00:39:48.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.959000 audit: BPF prog-id=59 op=LOAD Sep 10 00:39:48.959000 audit: BPF prog-id=37 op=UNLOAD Sep 10 00:39:48.959000 audit: BPF prog-id=38 op=UNLOAD Sep 10 00:39:48.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:48.959000 audit: BPF prog-id=60 op=LOAD Sep 10 00:39:48.959000 audit: BPF prog-id=40 op=UNLOAD Sep 10 00:39:48.974685 systemd[1]: Started kubelet.service. Sep 10 00:39:48.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:48.976351 systemd[1]: Stopping kubelet.service... Sep 10 00:39:48.976680 systemd[1]: kubelet.service: Deactivated successfully. Sep 10 00:39:48.976947 systemd[1]: Stopped kubelet.service. Sep 10 00:39:48.976000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:48.978699 systemd[1]: Starting kubelet.service... Sep 10 00:39:49.082962 systemd[1]: Started kubelet.service. Sep 10 00:39:49.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:49.148466 kubelet[1603]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 10 00:39:49.148466 kubelet[1603]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 10 00:39:49.148466 kubelet[1603]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 10 00:39:49.149112 kubelet[1603]: I0910 00:39:49.148651 1603 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 10 00:39:49.439450 kubelet[1603]: I0910 00:39:49.434037 1603 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Sep 10 00:39:49.439450 kubelet[1603]: I0910 00:39:49.434076 1603 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 10 00:39:49.439450 kubelet[1603]: I0910 00:39:49.434470 1603 server.go:956] "Client rotation is on, will bootstrap in background" Sep 10 00:39:50.639082 kubelet[1603]: E0910 00:39:50.638689 1603 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.0.0.37:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.37:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Sep 10 00:39:50.640162 kubelet[1603]: I0910 00:39:50.640095 1603 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 10 00:39:50.649917 kubelet[1603]: E0910 00:39:50.649828 1603 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 10 00:39:50.649917 kubelet[1603]: I0910 00:39:50.649883 1603 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 10 00:39:50.657047 kubelet[1603]: I0910 00:39:50.656980 1603 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 10 00:39:50.657383 kubelet[1603]: I0910 00:39:50.657334 1603 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 10 00:39:50.657598 kubelet[1603]: I0910 00:39:50.657372 1603 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 10 00:39:50.657598 kubelet[1603]: I0910 00:39:50.657597 1603 topology_manager.go:138] "Creating topology manager with none policy" Sep 10 00:39:50.657780 kubelet[1603]: I0910 00:39:50.657610 1603 container_manager_linux.go:303] "Creating device plugin manager" Sep 10 00:39:50.658629 kubelet[1603]: I0910 00:39:50.658598 1603 state_mem.go:36] "Initialized new in-memory state store" Sep 10 00:39:50.661411 kubelet[1603]: I0910 00:39:50.661350 1603 kubelet.go:480] "Attempting to sync node with API server" Sep 10 00:39:50.661411 kubelet[1603]: I0910 00:39:50.661407 1603 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 10 00:39:50.661594 kubelet[1603]: I0910 00:39:50.661449 1603 kubelet.go:386] "Adding apiserver pod source" Sep 10 00:39:50.666978 kubelet[1603]: I0910 00:39:50.666885 1603 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 10 00:39:50.714326 kubelet[1603]: I0910 00:39:50.714261 1603 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 10 00:39:50.715519 kubelet[1603]: I0910 00:39:50.715468 1603 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Sep 10 00:39:50.715963 kubelet[1603]: E0910 00:39:50.715915 1603 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.37:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.37:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Sep 10 00:39:50.716044 kubelet[1603]: E0910 00:39:50.715978 1603 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.37:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.37:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Sep 10 00:39:50.716264 kubelet[1603]: W0910 00:39:50.716230 1603 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Sep 10 00:39:50.719410 kubelet[1603]: I0910 00:39:50.719376 1603 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 10 00:39:50.719616 kubelet[1603]: I0910 00:39:50.719589 1603 server.go:1289] "Started kubelet" Sep 10 00:39:50.720464 kubelet[1603]: I0910 00:39:50.719959 1603 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 10 00:39:50.722282 kubelet[1603]: I0910 00:39:50.722254 1603 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 10 00:39:50.722482 kubelet[1603]: I0910 00:39:50.722291 1603 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Sep 10 00:39:50.726307 kubelet[1603]: E0910 00:39:50.724414 1603 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.37:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.37:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1863c4ea6c163572 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-09-10 00:39:50.71941157 +0000 UTC m=+1.630724912,LastTimestamp:2025-09-10 00:39:50.71941157 +0000 UTC m=+1.630724912,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Sep 10 00:39:50.726519 kubelet[1603]: I0910 00:39:50.726302 1603 server.go:317] "Adding debug handlers to kubelet server" Sep 10 00:39:50.725000 audit[1603]: AVC avc: denied { mac_admin } for pid=1603 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:50.725000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 10 00:39:50.725000 audit[1603]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0003b7d10 a1=c0005e6b10 a2=c0003b7ce0 a3=25 items=0 ppid=1 pid=1603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:50.725000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 10 00:39:50.727298 kubelet[1603]: I0910 00:39:50.726592 1603 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 10 00:39:50.727549 kubelet[1603]: I0910 00:39:50.727528 1603 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 10 00:39:50.726000 audit[1603]: AVC avc: denied { mac_admin } for pid=1603 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:50.726000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 10 00:39:50.726000 audit[1603]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000469320 a1=c0005e6b70 a2=c0003b7da0 a3=25 items=0 ppid=1 pid=1603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:50.726000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 10 00:39:50.728184 kubelet[1603]: I0910 00:39:50.728066 1603 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 10 00:39:50.728431 kubelet[1603]: E0910 00:39:50.728405 1603 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 10 00:39:50.729014 kubelet[1603]: I0910 00:39:50.728992 1603 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 10 00:39:50.730430 kubelet[1603]: E0910 00:39:50.730413 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:50.730554 kubelet[1603]: I0910 00:39:50.730538 1603 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 10 00:39:50.731052 kubelet[1603]: I0910 00:39:50.731034 1603 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 10 00:39:50.731298 kubelet[1603]: I0910 00:39:50.731282 1603 reconciler.go:26] "Reconciler: start to sync state" Sep 10 00:39:50.732348 kubelet[1603]: E0910 00:39:50.732320 1603 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.37:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.37:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Sep 10 00:39:50.733718 kubelet[1603]: E0910 00:39:50.733681 1603 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.37:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.37:6443: connect: connection refused" interval="200ms" Sep 10 00:39:50.736702 kubelet[1603]: I0910 00:39:50.736658 1603 factory.go:223] Registration of the containerd container factory successfully Sep 10 00:39:50.736702 kubelet[1603]: I0910 00:39:50.736679 1603 factory.go:223] Registration of the systemd container factory successfully Sep 10 00:39:50.736842 kubelet[1603]: I0910 00:39:50.736766 1603 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 10 00:39:50.738000 audit[1620]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1620 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:50.738000 audit[1620]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc07dbfdd0 a2=0 a3=7ffc07dbfdbc items=0 ppid=1603 pid=1620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:50.738000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 10 00:39:50.739000 audit[1621]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1621 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:50.739000 audit[1621]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd050eb4d0 a2=0 a3=7ffd050eb4bc items=0 ppid=1603 pid=1621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:50.739000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 10 00:39:50.742000 audit[1623]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1623 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:50.742000 audit[1623]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffed35822d0 a2=0 a3=7ffed35822bc items=0 ppid=1603 pid=1623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:50.742000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 10 00:39:50.744000 audit[1625]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1625 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:50.744000 audit[1625]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd7e846c60 a2=0 a3=7ffd7e846c4c items=0 ppid=1603 pid=1625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:50.744000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 10 00:39:50.753000 audit[1631]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1631 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:50.753000 audit[1631]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffc78b0a180 a2=0 a3=7ffc78b0a16c items=0 ppid=1603 pid=1631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:50.753000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Sep 10 00:39:50.755081 kubelet[1603]: I0910 00:39:50.755026 1603 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Sep 10 00:39:50.755474 kubelet[1603]: I0910 00:39:50.755451 1603 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 10 00:39:50.755600 kubelet[1603]: I0910 00:39:50.755581 1603 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 10 00:39:50.755733 kubelet[1603]: I0910 00:39:50.755717 1603 state_mem.go:36] "Initialized new in-memory state store" Sep 10 00:39:50.756000 audit[1635]: NETFILTER_CFG table=mangle:31 family=2 entries=1 op=nft_register_chain pid=1635 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:50.756000 audit[1635]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffddd1604d0 a2=0 a3=7ffddd1604bc items=0 ppid=1603 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:50.756000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 10 00:39:50.756000 audit[1634]: NETFILTER_CFG table=mangle:32 family=10 entries=2 op=nft_register_chain pid=1634 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:39:50.756000 audit[1634]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffb7968da0 a2=0 a3=7fffb7968d8c items=0 ppid=1603 pid=1634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:50.756000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 10 00:39:50.757509 kubelet[1603]: I0910 00:39:50.757290 1603 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Sep 10 00:39:50.757509 kubelet[1603]: I0910 00:39:50.757336 1603 status_manager.go:230] "Starting to sync pod status with apiserver" Sep 10 00:39:50.757509 kubelet[1603]: I0910 00:39:50.757377 1603 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 10 00:39:50.757509 kubelet[1603]: I0910 00:39:50.757386 1603 kubelet.go:2436] "Starting kubelet main sync loop" Sep 10 00:39:50.757509 kubelet[1603]: E0910 00:39:50.757431 1603 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 10 00:39:50.757000 audit[1636]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1636 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:50.757000 audit[1636]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffe311dab0 a2=0 a3=7fffe311da9c items=0 ppid=1603 pid=1636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:50.757000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 10 00:39:50.757000 audit[1638]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=1638 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:39:50.757000 audit[1638]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd66fd0a90 a2=0 a3=7ffd66fd0a7c items=0 ppid=1603 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:50.757000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 10 00:39:50.758000 audit[1640]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1640 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:39:50.758000 audit[1640]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffe71df130 a2=0 a3=7fffe71df11c items=0 ppid=1603 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:50.758000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 10 00:39:50.758000 audit[1641]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1641 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:39:50.758000 audit[1641]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffffcc2ef50 a2=0 a3=7ffffcc2ef3c items=0 ppid=1603 pid=1641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:50.758000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 10 00:39:50.759000 audit[1642]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1642 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:39:50.759000 audit[1642]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffca45292f0 a2=0 a3=7ffca45292dc items=0 ppid=1603 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:50.759000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 10 00:39:50.763568 kubelet[1603]: E0910 00:39:50.763528 1603 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.37:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.37:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Sep 10 00:39:50.764579 kubelet[1603]: I0910 00:39:50.764243 1603 policy_none.go:49] "None policy: Start" Sep 10 00:39:50.764579 kubelet[1603]: I0910 00:39:50.764289 1603 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 10 00:39:50.764579 kubelet[1603]: I0910 00:39:50.764309 1603 state_mem.go:35] "Initializing new in-memory state store" Sep 10 00:39:50.773435 systemd[1]: Created slice kubepods.slice. Sep 10 00:39:50.778566 systemd[1]: Created slice kubepods-burstable.slice. Sep 10 00:39:50.782099 systemd[1]: Created slice kubepods-besteffort.slice. Sep 10 00:39:50.788033 kubelet[1603]: E0910 00:39:50.787982 1603 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Sep 10 00:39:50.787000 audit[1603]: AVC avc: denied { mac_admin } for pid=1603 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:50.787000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 10 00:39:50.787000 audit[1603]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000f121e0 a1=c000abdd10 a2=c000f121b0 a3=25 items=0 ppid=1 pid=1603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:50.787000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 10 00:39:50.788541 kubelet[1603]: E0910 00:39:50.788088 1603 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Sep 10 00:39:50.788541 kubelet[1603]: I0910 00:39:50.788268 1603 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 10 00:39:50.788541 kubelet[1603]: I0910 00:39:50.788285 1603 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 10 00:39:50.789225 kubelet[1603]: I0910 00:39:50.788754 1603 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 10 00:39:50.789830 kubelet[1603]: E0910 00:39:50.789744 1603 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 10 00:39:50.790049 kubelet[1603]: E0910 00:39:50.789842 1603 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Sep 10 00:39:50.877716 systemd[1]: Created slice kubepods-burstable-pod5e65ee46dbc6023dddae90b73d00f603.slice. Sep 10 00:39:50.886038 kubelet[1603]: E0910 00:39:50.885989 1603 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 10 00:39:50.889830 kubelet[1603]: I0910 00:39:50.889678 1603 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 10 00:39:50.890329 kubelet[1603]: E0910 00:39:50.890183 1603 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.37:6443/api/v1/nodes\": dial tcp 10.0.0.37:6443: connect: connection refused" node="localhost" Sep 10 00:39:50.892811 systemd[1]: Created slice kubepods-burstable-pod8de7187202bee21b84740a213836f615.slice. Sep 10 00:39:50.894789 kubelet[1603]: E0910 00:39:50.894750 1603 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 10 00:39:50.897265 systemd[1]: Created slice kubepods-burstable-podd75e6f6978d9f275ea19380916c9cccd.slice. Sep 10 00:39:50.899023 kubelet[1603]: E0910 00:39:50.898955 1603 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 10 00:39:50.932627 kubelet[1603]: I0910 00:39:50.932539 1603 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8de7187202bee21b84740a213836f615-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"8de7187202bee21b84740a213836f615\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 00:39:50.932627 kubelet[1603]: I0910 00:39:50.932594 1603 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8de7187202bee21b84740a213836f615-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"8de7187202bee21b84740a213836f615\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 00:39:50.932627 kubelet[1603]: I0910 00:39:50.932622 1603 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8de7187202bee21b84740a213836f615-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"8de7187202bee21b84740a213836f615\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 00:39:50.932627 kubelet[1603]: I0910 00:39:50.932642 1603 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8de7187202bee21b84740a213836f615-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"8de7187202bee21b84740a213836f615\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 00:39:50.933023 kubelet[1603]: I0910 00:39:50.932665 1603 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d75e6f6978d9f275ea19380916c9cccd-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"d75e6f6978d9f275ea19380916c9cccd\") " pod="kube-system/kube-scheduler-localhost" Sep 10 00:39:50.933023 kubelet[1603]: I0910 00:39:50.932682 1603 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/5e65ee46dbc6023dddae90b73d00f603-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"5e65ee46dbc6023dddae90b73d00f603\") " pod="kube-system/kube-apiserver-localhost" Sep 10 00:39:50.933023 kubelet[1603]: I0910 00:39:50.932786 1603 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/5e65ee46dbc6023dddae90b73d00f603-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"5e65ee46dbc6023dddae90b73d00f603\") " pod="kube-system/kube-apiserver-localhost" Sep 10 00:39:50.933023 kubelet[1603]: I0910 00:39:50.932867 1603 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/5e65ee46dbc6023dddae90b73d00f603-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"5e65ee46dbc6023dddae90b73d00f603\") " pod="kube-system/kube-apiserver-localhost" Sep 10 00:39:50.933023 kubelet[1603]: I0910 00:39:50.932895 1603 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/8de7187202bee21b84740a213836f615-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"8de7187202bee21b84740a213836f615\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 00:39:50.935014 kubelet[1603]: E0910 00:39:50.934950 1603 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.37:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.37:6443: connect: connection refused" interval="400ms" Sep 10 00:39:51.092318 kubelet[1603]: I0910 00:39:51.092271 1603 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 10 00:39:51.092967 kubelet[1603]: E0910 00:39:51.092863 1603 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.37:6443/api/v1/nodes\": dial tcp 10.0.0.37:6443: connect: connection refused" node="localhost" Sep 10 00:39:51.187580 kubelet[1603]: E0910 00:39:51.187414 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:39:51.188581 env[1200]: time="2025-09-10T00:39:51.188517007Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:5e65ee46dbc6023dddae90b73d00f603,Namespace:kube-system,Attempt:0,}" Sep 10 00:39:51.195857 kubelet[1603]: E0910 00:39:51.195822 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:39:51.196603 env[1200]: time="2025-09-10T00:39:51.196536054Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:8de7187202bee21b84740a213836f615,Namespace:kube-system,Attempt:0,}" Sep 10 00:39:51.200004 kubelet[1603]: E0910 00:39:51.199970 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:39:51.200649 env[1200]: time="2025-09-10T00:39:51.200591397Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:d75e6f6978d9f275ea19380916c9cccd,Namespace:kube-system,Attempt:0,}" Sep 10 00:39:51.336151 kubelet[1603]: E0910 00:39:51.336069 1603 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.37:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.37:6443: connect: connection refused" interval="800ms" Sep 10 00:39:51.495370 kubelet[1603]: I0910 00:39:51.494983 1603 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 10 00:39:51.495546 kubelet[1603]: E0910 00:39:51.495418 1603 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.37:6443/api/v1/nodes\": dial tcp 10.0.0.37:6443: connect: connection refused" node="localhost" Sep 10 00:39:51.634067 kubelet[1603]: E0910 00:39:51.633993 1603 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.37:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.37:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Sep 10 00:39:51.656772 kubelet[1603]: E0910 00:39:51.656725 1603 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.37:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.37:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Sep 10 00:39:51.867072 kubelet[1603]: E0910 00:39:51.866856 1603 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.37:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.37:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Sep 10 00:39:52.003702 kubelet[1603]: E0910 00:39:52.003635 1603 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.37:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.37:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Sep 10 00:39:52.137001 kubelet[1603]: E0910 00:39:52.136823 1603 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.37:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.37:6443: connect: connection refused" interval="1.6s" Sep 10 00:39:52.297786 kubelet[1603]: I0910 00:39:52.297740 1603 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 10 00:39:52.298198 kubelet[1603]: E0910 00:39:52.298164 1603 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.37:6443/api/v1/nodes\": dial tcp 10.0.0.37:6443: connect: connection refused" node="localhost" Sep 10 00:39:52.725024 kubelet[1603]: E0910 00:39:52.724972 1603 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.0.0.37:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.37:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Sep 10 00:39:53.053779 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3698419298.mount: Deactivated successfully. Sep 10 00:39:53.066352 env[1200]: time="2025-09-10T00:39:53.066239192Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:53.067688 env[1200]: time="2025-09-10T00:39:53.067663300Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:53.071049 env[1200]: time="2025-09-10T00:39:53.070999072Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:53.072195 env[1200]: time="2025-09-10T00:39:53.072071725Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:53.075417 env[1200]: time="2025-09-10T00:39:53.075351860Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:53.077373 env[1200]: time="2025-09-10T00:39:53.077256922Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:53.078662 env[1200]: time="2025-09-10T00:39:53.078587561Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:53.080762 env[1200]: time="2025-09-10T00:39:53.080263673Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:53.082285 env[1200]: time="2025-09-10T00:39:53.082217649Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:53.083668 env[1200]: time="2025-09-10T00:39:53.083577523Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:53.085128 env[1200]: time="2025-09-10T00:39:53.085052830Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:53.088718 env[1200]: time="2025-09-10T00:39:53.088655535Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:39:53.173689 env[1200]: time="2025-09-10T00:39:53.173606164Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:39:53.173689 env[1200]: time="2025-09-10T00:39:53.173642264Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:39:53.173689 env[1200]: time="2025-09-10T00:39:53.173652123Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:39:53.174245 env[1200]: time="2025-09-10T00:39:53.174192151Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5d201411176d5d5ea9d8d6ede3e899ed7cdde059dd47775cb86124f5815e5a87 pid=1667 runtime=io.containerd.runc.v2 Sep 10 00:39:53.174295 env[1200]: time="2025-09-10T00:39:53.174223521Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:39:53.174295 env[1200]: time="2025-09-10T00:39:53.174260743Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:39:53.174425 env[1200]: time="2025-09-10T00:39:53.174270702Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:39:53.174497 env[1200]: time="2025-09-10T00:39:53.174450888Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cb98b4d95cc9676f1105929ab50f27fe75f58a34b7ab59d2593de941a409e1aa pid=1668 runtime=io.containerd.runc.v2 Sep 10 00:39:53.178897 env[1200]: time="2025-09-10T00:39:53.178838012Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:39:53.179040 env[1200]: time="2025-09-10T00:39:53.179014782Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:39:53.179174 env[1200]: time="2025-09-10T00:39:53.179143970Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:39:53.184159 env[1200]: time="2025-09-10T00:39:53.184094147Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ae870eb24d432292b9a47f4fff0f8dbee2205d1405209bc483b31fe626aa27f3 pid=1653 runtime=io.containerd.runc.v2 Sep 10 00:39:53.285584 systemd[1]: Started cri-containerd-cb98b4d95cc9676f1105929ab50f27fe75f58a34b7ab59d2593de941a409e1aa.scope. Sep 10 00:39:53.293437 systemd[1]: Started cri-containerd-ae870eb24d432292b9a47f4fff0f8dbee2205d1405209bc483b31fe626aa27f3.scope. Sep 10 00:39:53.312309 systemd[1]: Started cri-containerd-5d201411176d5d5ea9d8d6ede3e899ed7cdde059dd47775cb86124f5815e5a87.scope. Sep 10 00:39:53.364032 kernel: kauditd_printk_skb: 215 callbacks suppressed Sep 10 00:39:53.364294 kernel: audit: type=1400 audit(1757464793.357:442): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.364347 kernel: audit: type=1400 audit(1757464793.357:443): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.366716 kernel: audit: type=1400 audit(1757464793.357:444): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.370394 kernel: audit: type=1400 audit(1757464793.357:445): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.374493 kernel: audit: type=1400 audit(1757464793.357:446): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.378915 kernel: audit: type=1400 audit(1757464793.357:447): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.385849 kernel: audit: type=1400 audit(1757464793.357:448): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.385902 kernel: audit: type=1400 audit(1757464793.358:449): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.388969 kernel: audit: type=1400 audit(1757464793.358:450): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.394666 kernel: audit: type=1400 audit(1757464793.382:451): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.382000 audit: BPF prog-id=61 op=LOAD Sep 10 00:39:53.382000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.382000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1668 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.382000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362393862346439356363393637366631313035393239616235306632 Sep 10 00:39:53.382000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.382000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=1668 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.382000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362393862346439356363393637366631313035393239616235306632 Sep 10 00:39:53.382000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.382000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.382000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.382000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.382000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.382000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.382000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.382000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.382000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.382000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.382000 audit: BPF prog-id=62 op=LOAD Sep 10 00:39:53.382000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003d29d0 items=0 ppid=1668 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.382000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362393862346439356363393637366631313035393239616235306632 Sep 10 00:39:53.388000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.388000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.388000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.388000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.388000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.388000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.388000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.388000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.388000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.388000 audit: BPF prog-id=63 op=LOAD Sep 10 00:39:53.388000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003d2a18 items=0 ppid=1668 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.388000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362393862346439356363393637366631313035393239616235306632 Sep 10 00:39:53.394000 audit: BPF prog-id=63 op=UNLOAD Sep 10 00:39:53.394000 audit: BPF prog-id=62 op=UNLOAD Sep 10 00:39:53.394000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.394000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.394000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.394000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.394000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.394000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.394000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.394000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.394000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.394000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.394000 audit: BPF prog-id=64 op=LOAD Sep 10 00:39:53.394000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003d2e28 items=0 ppid=1668 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362393862346439356363393637366631313035393239616235306632 Sep 10 00:39:53.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.469000 audit: BPF prog-id=65 op=LOAD Sep 10 00:39:53.470000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.470000 audit[1695]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014fc48 a2=10 a3=1c items=0 ppid=1667 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564323031343131313736643564356561396438643665646533653839 Sep 10 00:39:53.470000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.470000 audit[1695]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014f6b0 a2=3c a3=8 items=0 ppid=1667 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564323031343131313736643564356561396438643665646533653839 Sep 10 00:39:53.470000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.470000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.470000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.470000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.470000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.470000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.470000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.470000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.470000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.471000 audit: BPF prog-id=66 op=LOAD Sep 10 00:39:53.473000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.473000 audit[1698]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1653 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165383730656232346434333232393262396134376634666666306638 Sep 10 00:39:53.473000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.473000 audit[1698]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=1653 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165383730656232346434333232393262396134376634666666306638 Sep 10 00:39:53.473000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.473000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.473000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.473000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.473000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.473000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.473000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.473000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.473000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.473000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.473000 audit: BPF prog-id=67 op=LOAD Sep 10 00:39:53.473000 audit[1698]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000408350 items=0 ppid=1653 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165383730656232346434333232393262396134376634666666306638 Sep 10 00:39:53.474000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.474000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.474000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.474000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.474000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.474000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.474000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.474000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.474000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.474000 audit: BPF prog-id=68 op=LOAD Sep 10 00:39:53.470000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.470000 audit: BPF prog-id=69 op=LOAD Sep 10 00:39:53.470000 audit[1695]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014f9d8 a2=78 a3=c0003c0930 items=0 ppid=1667 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564323031343131313736643564356561396438643665646533653839 Sep 10 00:39:53.475000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.474000 audit[1698]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000408398 items=0 ppid=1653 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165383730656232346434333232393262396134376634666666306638 Sep 10 00:39:53.475000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit: BPF prog-id=70 op=LOAD Sep 10 00:39:53.475000 audit: BPF prog-id=68 op=UNLOAD Sep 10 00:39:53.475000 audit: BPF prog-id=67 op=UNLOAD Sep 10 00:39:53.475000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1695]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014f770 a2=78 a3=c0003c0978 items=0 ppid=1667 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564323031343131313736643564356561396438643665646533653839 Sep 10 00:39:53.475000 audit: BPF prog-id=70 op=UNLOAD Sep 10 00:39:53.475000 audit: BPF prog-id=69 op=UNLOAD Sep 10 00:39:53.475000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit: BPF prog-id=71 op=LOAD Sep 10 00:39:53.475000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.475000 audit: BPF prog-id=72 op=LOAD Sep 10 00:39:53.475000 audit[1698]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0004087a8 items=0 ppid=1653 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165383730656232346434333232393262396134376634666666306638 Sep 10 00:39:53.475000 audit[1695]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014fc30 a2=78 a3=c0003c0d88 items=0 ppid=1667 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564323031343131313736643564356561396438643665646533653839 Sep 10 00:39:53.479173 kubelet[1603]: E0910 00:39:53.479124 1603 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.37:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.37:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Sep 10 00:39:53.483419 env[1200]: time="2025-09-10T00:39:53.483375546Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:d75e6f6978d9f275ea19380916c9cccd,Namespace:kube-system,Attempt:0,} returns sandbox id \"cb98b4d95cc9676f1105929ab50f27fe75f58a34b7ab59d2593de941a409e1aa\"" Sep 10 00:39:53.484803 kubelet[1603]: E0910 00:39:53.484731 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:39:53.518147 env[1200]: time="2025-09-10T00:39:53.517703939Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:8de7187202bee21b84740a213836f615,Namespace:kube-system,Attempt:0,} returns sandbox id \"ae870eb24d432292b9a47f4fff0f8dbee2205d1405209bc483b31fe626aa27f3\"" Sep 10 00:39:53.518973 env[1200]: time="2025-09-10T00:39:53.518858889Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:5e65ee46dbc6023dddae90b73d00f603,Namespace:kube-system,Attempt:0,} returns sandbox id \"5d201411176d5d5ea9d8d6ede3e899ed7cdde059dd47775cb86124f5815e5a87\"" Sep 10 00:39:53.519350 kubelet[1603]: E0910 00:39:53.519314 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:39:53.520802 kubelet[1603]: E0910 00:39:53.520513 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:39:53.574236 env[1200]: time="2025-09-10T00:39:53.572373726Z" level=info msg="CreateContainer within sandbox \"cb98b4d95cc9676f1105929ab50f27fe75f58a34b7ab59d2593de941a409e1aa\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Sep 10 00:39:53.578730 env[1200]: time="2025-09-10T00:39:53.578686902Z" level=info msg="CreateContainer within sandbox \"ae870eb24d432292b9a47f4fff0f8dbee2205d1405209bc483b31fe626aa27f3\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Sep 10 00:39:53.584793 env[1200]: time="2025-09-10T00:39:53.584728427Z" level=info msg="CreateContainer within sandbox \"5d201411176d5d5ea9d8d6ede3e899ed7cdde059dd47775cb86124f5815e5a87\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Sep 10 00:39:53.617358 env[1200]: time="2025-09-10T00:39:53.617262049Z" level=info msg="CreateContainer within sandbox \"cb98b4d95cc9676f1105929ab50f27fe75f58a34b7ab59d2593de941a409e1aa\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"8ad707ae9a193cc912434fdfe73f8c67857d649be50fad13d98b91d681a02616\"" Sep 10 00:39:53.618247 env[1200]: time="2025-09-10T00:39:53.618201025Z" level=info msg="StartContainer for \"8ad707ae9a193cc912434fdfe73f8c67857d649be50fad13d98b91d681a02616\"" Sep 10 00:39:53.619984 env[1200]: time="2025-09-10T00:39:53.619905321Z" level=info msg="CreateContainer within sandbox \"5d201411176d5d5ea9d8d6ede3e899ed7cdde059dd47775cb86124f5815e5a87\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"8bc2c54cf3788e2c16043322ba9f0cc04a517eb9608014878c72273fa093ab5d\"" Sep 10 00:39:53.620635 env[1200]: time="2025-09-10T00:39:53.620586841Z" level=info msg="StartContainer for \"8bc2c54cf3788e2c16043322ba9f0cc04a517eb9608014878c72273fa093ab5d\"" Sep 10 00:39:53.622539 env[1200]: time="2025-09-10T00:39:53.622501652Z" level=info msg="CreateContainer within sandbox \"ae870eb24d432292b9a47f4fff0f8dbee2205d1405209bc483b31fe626aa27f3\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"163ad5ad7b11d6dd26e9339e621dc59760e446e614eb0638f093cfff015b2fa1\"" Sep 10 00:39:53.623125 env[1200]: time="2025-09-10T00:39:53.623090254Z" level=info msg="StartContainer for \"163ad5ad7b11d6dd26e9339e621dc59760e446e614eb0638f093cfff015b2fa1\"" Sep 10 00:39:53.637890 systemd[1]: Started cri-containerd-8ad707ae9a193cc912434fdfe73f8c67857d649be50fad13d98b91d681a02616.scope. Sep 10 00:39:53.646710 systemd[1]: Started cri-containerd-8bc2c54cf3788e2c16043322ba9f0cc04a517eb9608014878c72273fa093ab5d.scope. Sep 10 00:39:53.653501 systemd[1]: Started cri-containerd-163ad5ad7b11d6dd26e9339e621dc59760e446e614eb0638f093cfff015b2fa1.scope. Sep 10 00:39:53.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.657000 audit: BPF prog-id=73 op=LOAD Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1668 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861643730376165396131393363633931323433346664666537336638 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1668 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861643730376165396131393363633931323433346664666537336638 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit: BPF prog-id=74 op=LOAD Sep 10 00:39:53.658000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000095dc0 items=0 ppid=1668 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861643730376165396131393363633931323433346664666537336638 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit: BPF prog-id=75 op=LOAD Sep 10 00:39:53.658000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000095e08 items=0 ppid=1668 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861643730376165396131393363633931323433346664666537336638 Sep 10 00:39:53.658000 audit: BPF prog-id=75 op=UNLOAD Sep 10 00:39:53.658000 audit: BPF prog-id=74 op=UNLOAD Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.658000 audit: BPF prog-id=76 op=LOAD Sep 10 00:39:53.658000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000398218 items=0 ppid=1668 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861643730376165396131393363633931323433346664666537336638 Sep 10 00:39:53.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit: BPF prog-id=77 op=LOAD Sep 10 00:39:53.671000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit[1795]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=1667 pid=1795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862633263353463663337383865326331363034333332326261396630 Sep 10 00:39:53.671000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit[1795]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=8 items=0 ppid=1667 pid=1795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862633263353463663337383865326331363034333332326261396630 Sep 10 00:39:53.671000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.671000 audit: BPF prog-id=78 op=LOAD Sep 10 00:39:53.671000 audit[1795]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c0003a3920 items=0 ppid=1667 pid=1795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862633263353463663337383865326331363034333332326261396630 Sep 10 00:39:53.672000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.672000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.672000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.672000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.672000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.672000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.672000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.672000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.672000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.672000 audit: BPF prog-id=79 op=LOAD Sep 10 00:39:53.672000 audit[1795]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c0003a3968 items=0 ppid=1667 pid=1795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862633263353463663337383865326331363034333332326261396630 Sep 10 00:39:53.672000 audit: BPF prog-id=79 op=UNLOAD Sep 10 00:39:53.672000 audit: BPF prog-id=78 op=UNLOAD Sep 10 00:39:53.672000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.672000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.672000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.672000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.672000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.672000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.672000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.672000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.672000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.672000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.672000 audit: BPF prog-id=80 op=LOAD Sep 10 00:39:53.672000 audit[1795]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c0003a3d78 items=0 ppid=1667 pid=1795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862633263353463663337383865326331363034333332326261396630 Sep 10 00:39:53.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.678000 audit: BPF prog-id=81 op=LOAD Sep 10 00:39:53.678000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.678000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1653 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136336164356164376231316436646432366539333339653632316463 Sep 10 00:39:53.678000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.678000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1653 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136336164356164376231316436646432366539333339653632316463 Sep 10 00:39:53.679000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.679000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.679000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.679000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.679000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.679000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.679000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.679000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.679000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.679000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.679000 audit: BPF prog-id=82 op=LOAD Sep 10 00:39:53.679000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00038c370 items=0 ppid=1653 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136336164356164376231316436646432366539333339653632316463 Sep 10 00:39:53.681000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.681000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.681000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.681000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.681000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.681000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.681000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.681000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.681000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.681000 audit: BPF prog-id=83 op=LOAD Sep 10 00:39:53.681000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00038c3b8 items=0 ppid=1653 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.681000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136336164356164376231316436646432366539333339653632316463 Sep 10 00:39:53.682000 audit: BPF prog-id=83 op=UNLOAD Sep 10 00:39:53.682000 audit: BPF prog-id=82 op=UNLOAD Sep 10 00:39:53.682000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.682000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.682000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.682000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.682000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.682000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.682000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.682000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.682000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.682000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:53.682000 audit: BPF prog-id=84 op=LOAD Sep 10 00:39:53.682000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00038c7c8 items=0 ppid=1653 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:53.682000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136336164356164376231316436646432366539333339653632316463 Sep 10 00:39:53.717186 env[1200]: time="2025-09-10T00:39:53.714376573Z" level=info msg="StartContainer for \"8ad707ae9a193cc912434fdfe73f8c67857d649be50fad13d98b91d681a02616\" returns successfully" Sep 10 00:39:53.740970 kubelet[1603]: E0910 00:39:53.738547 1603 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.37:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.37:6443: connect: connection refused" interval="3.2s" Sep 10 00:39:53.741375 env[1200]: time="2025-09-10T00:39:53.740082359Z" level=info msg="StartContainer for \"8bc2c54cf3788e2c16043322ba9f0cc04a517eb9608014878c72273fa093ab5d\" returns successfully" Sep 10 00:39:53.743242 env[1200]: time="2025-09-10T00:39:53.741901186Z" level=info msg="StartContainer for \"163ad5ad7b11d6dd26e9339e621dc59760e446e614eb0638f093cfff015b2fa1\" returns successfully" Sep 10 00:39:53.769061 kubelet[1603]: E0910 00:39:53.769014 1603 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 10 00:39:53.769294 kubelet[1603]: E0910 00:39:53.769219 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:39:53.771854 kubelet[1603]: E0910 00:39:53.771798 1603 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 10 00:39:53.772076 kubelet[1603]: E0910 00:39:53.772050 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:39:53.774312 kubelet[1603]: E0910 00:39:53.774285 1603 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 10 00:39:53.774547 kubelet[1603]: E0910 00:39:53.774495 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:39:53.899777 kubelet[1603]: I0910 00:39:53.899585 1603 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 10 00:39:54.797389 kubelet[1603]: E0910 00:39:54.796925 1603 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 10 00:39:54.797389 kubelet[1603]: E0910 00:39:54.797055 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:39:54.797389 kubelet[1603]: E0910 00:39:54.797250 1603 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 10 00:39:54.797389 kubelet[1603]: E0910 00:39:54.797321 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:39:55.436000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:39:55.436000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0064d3460 a2=fc6 a3=0 items=0 ppid=1667 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 key=(null) Sep 10 00:39:55.436000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 10 00:39:55.436000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:39:55.436000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00524e990 a2=fc6 a3=0 items=0 ppid=1667 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 key=(null) Sep 10 00:39:55.436000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 10 00:39:55.437000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:39:55.437000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c005d002a0 a2=fc6 a3=0 items=0 ppid=1667 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 key=(null) Sep 10 00:39:55.437000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 10 00:39:55.439000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:39:55.439000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c003489ce0 a2=fc6 a3=0 items=0 ppid=1667 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 key=(null) Sep 10 00:39:55.439000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 10 00:39:55.439000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:39:55.439000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c005d00420 a2=fc6 a3=0 items=0 ppid=1667 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 key=(null) Sep 10 00:39:55.439000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 10 00:39:55.441000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:39:55.441000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c003eff230 a2=fc6 a3=0 items=0 ppid=1667 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 key=(null) Sep 10 00:39:55.441000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 10 00:39:55.596000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:39:55.596000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:39:55.596000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000a98000 a2=fc6 a3=0 items=0 ppid=1653 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 key=(null) Sep 10 00:39:55.596000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:39:55.596000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00046c040 a2=fc6 a3=0 items=0 ppid=1653 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 key=(null) Sep 10 00:39:55.596000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:39:55.676613 kubelet[1603]: I0910 00:39:55.676540 1603 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Sep 10 00:39:55.676613 kubelet[1603]: E0910 00:39:55.676601 1603 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Sep 10 00:39:55.695454 kubelet[1603]: E0910 00:39:55.695302 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:55.795871 kubelet[1603]: E0910 00:39:55.795802 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:55.896664 kubelet[1603]: E0910 00:39:55.896592 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:55.997707 kubelet[1603]: E0910 00:39:55.997626 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:56.098708 kubelet[1603]: E0910 00:39:56.098643 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:56.199587 kubelet[1603]: E0910 00:39:56.199526 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:56.300707 kubelet[1603]: E0910 00:39:56.300567 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:56.401460 kubelet[1603]: E0910 00:39:56.401406 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:56.502239 kubelet[1603]: E0910 00:39:56.502192 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:56.603119 kubelet[1603]: E0910 00:39:56.602952 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:56.704074 kubelet[1603]: E0910 00:39:56.704020 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:56.732221 kubelet[1603]: E0910 00:39:56.732171 1603 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 10 00:39:56.732399 kubelet[1603]: E0910 00:39:56.732325 1603 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:39:56.805166 kubelet[1603]: E0910 00:39:56.805123 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:56.906320 kubelet[1603]: E0910 00:39:56.906184 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:57.006432 kubelet[1603]: E0910 00:39:57.006368 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:57.107556 kubelet[1603]: E0910 00:39:57.107483 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:57.208544 kubelet[1603]: E0910 00:39:57.208373 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:57.308630 kubelet[1603]: E0910 00:39:57.308561 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:57.409637 kubelet[1603]: E0910 00:39:57.409567 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:57.510698 kubelet[1603]: E0910 00:39:57.510611 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:57.611609 kubelet[1603]: E0910 00:39:57.611514 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:57.668344 systemd[1]: Reloading. Sep 10 00:39:57.712710 kubelet[1603]: E0910 00:39:57.712676 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:57.749832 /usr/lib/systemd/system-generators/torcx-generator[1911]: time="2025-09-10T00:39:57Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 10 00:39:57.749863 /usr/lib/systemd/system-generators/torcx-generator[1911]: time="2025-09-10T00:39:57Z" level=info msg="torcx already run" Sep 10 00:39:57.813887 kubelet[1603]: E0910 00:39:57.813750 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:57.847220 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 10 00:39:57.847239 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 10 00:39:57.876172 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 10 00:39:57.914903 kubelet[1603]: E0910 00:39:57.914823 1603 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 00:39:57.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.981000 audit: BPF prog-id=85 op=LOAD Sep 10 00:39:57.981000 audit: BPF prog-id=81 op=UNLOAD Sep 10 00:39:57.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.982000 audit: BPF prog-id=86 op=LOAD Sep 10 00:39:57.982000 audit: BPF prog-id=65 op=UNLOAD Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit: BPF prog-id=87 op=LOAD Sep 10 00:39:57.984000 audit: BPF prog-id=46 op=UNLOAD Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit: BPF prog-id=88 op=LOAD Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.985000 audit: BPF prog-id=89 op=LOAD Sep 10 00:39:57.985000 audit: BPF prog-id=47 op=UNLOAD Sep 10 00:39:57.985000 audit: BPF prog-id=48 op=UNLOAD Sep 10 00:39:57.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.988000 audit: BPF prog-id=90 op=LOAD Sep 10 00:39:57.988000 audit: BPF prog-id=49 op=UNLOAD Sep 10 00:39:57.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.989000 audit: BPF prog-id=91 op=LOAD Sep 10 00:39:57.989000 audit: BPF prog-id=50 op=UNLOAD Sep 10 00:39:57.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.989000 audit: BPF prog-id=92 op=LOAD Sep 10 00:39:57.989000 audit: BPF prog-id=66 op=UNLOAD Sep 10 00:39:57.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.990000 audit: BPF prog-id=93 op=LOAD Sep 10 00:39:57.990000 audit: BPF prog-id=77 op=UNLOAD Sep 10 00:39:57.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.992000 audit: BPF prog-id=94 op=LOAD Sep 10 00:39:57.992000 audit: BPF prog-id=73 op=UNLOAD Sep 10 00:39:57.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.994000 audit: BPF prog-id=95 op=LOAD Sep 10 00:39:57.994000 audit: BPF prog-id=51 op=UNLOAD Sep 10 00:39:57.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.994000 audit: BPF prog-id=96 op=LOAD Sep 10 00:39:57.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.994000 audit: BPF prog-id=97 op=LOAD Sep 10 00:39:57.994000 audit: BPF prog-id=52 op=UNLOAD Sep 10 00:39:57.994000 audit: BPF prog-id=53 op=UNLOAD Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit: BPF prog-id=98 op=LOAD Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit: BPF prog-id=99 op=LOAD Sep 10 00:39:57.995000 audit: BPF prog-id=54 op=UNLOAD Sep 10 00:39:57.995000 audit: BPF prog-id=55 op=UNLOAD Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.995000 audit: BPF prog-id=100 op=LOAD Sep 10 00:39:57.995000 audit: BPF prog-id=56 op=UNLOAD Sep 10 00:39:57.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.996000 audit: BPF prog-id=101 op=LOAD Sep 10 00:39:57.997000 audit: BPF prog-id=57 op=UNLOAD Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit: BPF prog-id=102 op=LOAD Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit: BPF prog-id=103 op=LOAD Sep 10 00:39:57.997000 audit: BPF prog-id=58 op=UNLOAD Sep 10 00:39:57.997000 audit: BPF prog-id=59 op=UNLOAD Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.997000 audit: BPF prog-id=104 op=LOAD Sep 10 00:39:57.997000 audit: BPF prog-id=60 op=UNLOAD Sep 10 00:39:57.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:57.998000 audit: BPF prog-id=105 op=LOAD Sep 10 00:39:57.998000 audit: BPF prog-id=61 op=UNLOAD Sep 10 00:39:58.011527 systemd[1]: Stopping kubelet.service... Sep 10 00:39:58.040339 systemd[1]: kubelet.service: Deactivated successfully. Sep 10 00:39:58.040536 systemd[1]: Stopped kubelet.service. Sep 10 00:39:58.039000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:58.042805 systemd[1]: Starting kubelet.service... Sep 10 00:39:58.143028 systemd[1]: Started kubelet.service. Sep 10 00:39:58.142000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:39:58.206267 kubelet[1956]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 10 00:39:58.206267 kubelet[1956]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 10 00:39:58.206267 kubelet[1956]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 10 00:39:58.206742 kubelet[1956]: I0910 00:39:58.206402 1956 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 10 00:39:58.214571 kubelet[1956]: I0910 00:39:58.214518 1956 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Sep 10 00:39:58.214571 kubelet[1956]: I0910 00:39:58.214548 1956 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 10 00:39:58.214881 kubelet[1956]: I0910 00:39:58.214845 1956 server.go:956] "Client rotation is on, will bootstrap in background" Sep 10 00:39:58.216138 kubelet[1956]: I0910 00:39:58.216108 1956 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Sep 10 00:39:58.220416 kubelet[1956]: I0910 00:39:58.219434 1956 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 10 00:39:58.230710 kubelet[1956]: E0910 00:39:58.228670 1956 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 10 00:39:58.230710 kubelet[1956]: I0910 00:39:58.228720 1956 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 10 00:39:58.233258 kubelet[1956]: I0910 00:39:58.233223 1956 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 10 00:39:58.233428 kubelet[1956]: I0910 00:39:58.233391 1956 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 10 00:39:58.233592 kubelet[1956]: I0910 00:39:58.233427 1956 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 10 00:39:58.233592 kubelet[1956]: I0910 00:39:58.233571 1956 topology_manager.go:138] "Creating topology manager with none policy" Sep 10 00:39:58.233592 kubelet[1956]: I0910 00:39:58.233578 1956 container_manager_linux.go:303] "Creating device plugin manager" Sep 10 00:39:58.233907 kubelet[1956]: I0910 00:39:58.233624 1956 state_mem.go:36] "Initialized new in-memory state store" Sep 10 00:39:58.233907 kubelet[1956]: I0910 00:39:58.233754 1956 kubelet.go:480] "Attempting to sync node with API server" Sep 10 00:39:58.233907 kubelet[1956]: I0910 00:39:58.233775 1956 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 10 00:39:58.233907 kubelet[1956]: I0910 00:39:58.233799 1956 kubelet.go:386] "Adding apiserver pod source" Sep 10 00:39:58.233907 kubelet[1956]: I0910 00:39:58.233812 1956 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 10 00:39:58.238261 kubelet[1956]: I0910 00:39:58.238221 1956 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 10 00:39:58.239105 kubelet[1956]: I0910 00:39:58.239089 1956 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Sep 10 00:39:58.241626 kubelet[1956]: I0910 00:39:58.241612 1956 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 10 00:39:58.241750 kubelet[1956]: I0910 00:39:58.241735 1956 server.go:1289] "Started kubelet" Sep 10 00:39:58.242000 audit[1956]: AVC avc: denied { mac_admin } for pid=1956 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:58.242000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 10 00:39:58.242000 audit[1956]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c24a20 a1=c000303dd0 a2=c000c249f0 a3=25 items=0 ppid=1 pid=1956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:58.242000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 10 00:39:58.242000 audit[1956]: AVC avc: denied { mac_admin } for pid=1956 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:58.242000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 10 00:39:58.242000 audit[1956]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0003d5560 a1=c000303de8 a2=c000c24ab0 a3=25 items=0 ppid=1 pid=1956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:58.242000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 10 00:39:58.244143 kubelet[1956]: I0910 00:39:58.243529 1956 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 10 00:39:58.244143 kubelet[1956]: I0910 00:39:58.243558 1956 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 10 00:39:58.244143 kubelet[1956]: I0910 00:39:58.243605 1956 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 10 00:39:58.249001 kubelet[1956]: E0910 00:39:58.248855 1956 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 10 00:39:58.249704 kubelet[1956]: I0910 00:39:58.249672 1956 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Sep 10 00:39:58.252320 kubelet[1956]: I0910 00:39:58.252278 1956 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 10 00:39:58.252591 kubelet[1956]: I0910 00:39:58.252573 1956 server.go:317] "Adding debug handlers to kubelet server" Sep 10 00:39:58.255813 kubelet[1956]: I0910 00:39:58.255779 1956 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 10 00:39:58.256157 kubelet[1956]: I0910 00:39:58.256140 1956 reconciler.go:26] "Reconciler: start to sync state" Sep 10 00:39:58.256213 kubelet[1956]: I0910 00:39:58.256171 1956 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 10 00:39:58.256461 kubelet[1956]: I0910 00:39:58.256432 1956 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 10 00:39:58.256571 kubelet[1956]: I0910 00:39:58.256405 1956 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 10 00:39:58.256993 kubelet[1956]: I0910 00:39:58.256971 1956 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 10 00:39:58.259812 kubelet[1956]: I0910 00:39:58.259783 1956 factory.go:223] Registration of the containerd container factory successfully Sep 10 00:39:58.259812 kubelet[1956]: I0910 00:39:58.259806 1956 factory.go:223] Registration of the systemd container factory successfully Sep 10 00:39:58.264358 kubelet[1956]: I0910 00:39:58.264315 1956 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Sep 10 00:39:58.265439 kubelet[1956]: I0910 00:39:58.265414 1956 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Sep 10 00:39:58.265542 kubelet[1956]: I0910 00:39:58.265524 1956 status_manager.go:230] "Starting to sync pod status with apiserver" Sep 10 00:39:58.265656 kubelet[1956]: I0910 00:39:58.265639 1956 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 10 00:39:58.265730 kubelet[1956]: I0910 00:39:58.265715 1956 kubelet.go:2436] "Starting kubelet main sync loop" Sep 10 00:39:58.265857 kubelet[1956]: E0910 00:39:58.265828 1956 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 10 00:39:58.288813 kubelet[1956]: I0910 00:39:58.288785 1956 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 10 00:39:58.289036 kubelet[1956]: I0910 00:39:58.289017 1956 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 10 00:39:58.289117 kubelet[1956]: I0910 00:39:58.289104 1956 state_mem.go:36] "Initialized new in-memory state store" Sep 10 00:39:58.289298 kubelet[1956]: I0910 00:39:58.289283 1956 state_mem.go:88] "Updated default CPUSet" cpuSet="" Sep 10 00:39:58.289399 kubelet[1956]: I0910 00:39:58.289370 1956 state_mem.go:96] "Updated CPUSet assignments" assignments={} Sep 10 00:39:58.289474 kubelet[1956]: I0910 00:39:58.289460 1956 policy_none.go:49] "None policy: Start" Sep 10 00:39:58.289565 kubelet[1956]: I0910 00:39:58.289548 1956 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 10 00:39:58.289651 kubelet[1956]: I0910 00:39:58.289637 1956 state_mem.go:35] "Initializing new in-memory state store" Sep 10 00:39:58.289816 kubelet[1956]: I0910 00:39:58.289802 1956 state_mem.go:75] "Updated machine memory state" Sep 10 00:39:58.293117 kubelet[1956]: E0910 00:39:58.293083 1956 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Sep 10 00:39:58.292000 audit[1956]: AVC avc: denied { mac_admin } for pid=1956 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:39:58.292000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 10 00:39:58.292000 audit[1956]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c25620 a1=c000d9c7c8 a2=c000c255f0 a3=25 items=0 ppid=1 pid=1956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:39:58.292000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 10 00:39:58.293391 kubelet[1956]: E0910 00:39:58.293143 1956 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Sep 10 00:39:58.293391 kubelet[1956]: I0910 00:39:58.293280 1956 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 10 00:39:58.293391 kubelet[1956]: I0910 00:39:58.293295 1956 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 10 00:39:58.293610 kubelet[1956]: I0910 00:39:58.293586 1956 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 10 00:39:58.294567 kubelet[1956]: E0910 00:39:58.294544 1956 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 10 00:39:58.367581 kubelet[1956]: I0910 00:39:58.367521 1956 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Sep 10 00:39:58.367787 kubelet[1956]: I0910 00:39:58.367713 1956 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Sep 10 00:39:58.367787 kubelet[1956]: I0910 00:39:58.367742 1956 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Sep 10 00:39:58.400790 kubelet[1956]: I0910 00:39:58.400657 1956 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 10 00:39:58.557961 kubelet[1956]: I0910 00:39:58.557894 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/8de7187202bee21b84740a213836f615-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"8de7187202bee21b84740a213836f615\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 00:39:58.557961 kubelet[1956]: I0910 00:39:58.557952 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8de7187202bee21b84740a213836f615-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"8de7187202bee21b84740a213836f615\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 00:39:58.557961 kubelet[1956]: I0910 00:39:58.557974 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/5e65ee46dbc6023dddae90b73d00f603-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"5e65ee46dbc6023dddae90b73d00f603\") " pod="kube-system/kube-apiserver-localhost" Sep 10 00:39:58.558212 kubelet[1956]: I0910 00:39:58.557986 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8de7187202bee21b84740a213836f615-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"8de7187202bee21b84740a213836f615\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 00:39:58.558212 kubelet[1956]: I0910 00:39:58.558073 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8de7187202bee21b84740a213836f615-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"8de7187202bee21b84740a213836f615\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 00:39:58.558212 kubelet[1956]: I0910 00:39:58.558117 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d75e6f6978d9f275ea19380916c9cccd-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"d75e6f6978d9f275ea19380916c9cccd\") " pod="kube-system/kube-scheduler-localhost" Sep 10 00:39:58.558212 kubelet[1956]: I0910 00:39:58.558136 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/5e65ee46dbc6023dddae90b73d00f603-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"5e65ee46dbc6023dddae90b73d00f603\") " pod="kube-system/kube-apiserver-localhost" Sep 10 00:39:58.558212 kubelet[1956]: I0910 00:39:58.558151 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/5e65ee46dbc6023dddae90b73d00f603-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"5e65ee46dbc6023dddae90b73d00f603\") " pod="kube-system/kube-apiserver-localhost" Sep 10 00:39:58.558328 kubelet[1956]: I0910 00:39:58.558177 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8de7187202bee21b84740a213836f615-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"8de7187202bee21b84740a213836f615\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 00:39:58.722793 kubelet[1956]: E0910 00:39:58.722659 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:39:58.723472 kubelet[1956]: E0910 00:39:58.723456 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:39:58.723867 kubelet[1956]: E0910 00:39:58.723833 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:39:58.743820 kubelet[1956]: I0910 00:39:58.743775 1956 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Sep 10 00:39:58.750882 kubelet[1956]: I0910 00:39:58.750800 1956 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Sep 10 00:39:59.234686 kubelet[1956]: I0910 00:39:59.234630 1956 apiserver.go:52] "Watching apiserver" Sep 10 00:39:59.257391 kubelet[1956]: I0910 00:39:59.257319 1956 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Sep 10 00:39:59.275632 kubelet[1956]: I0910 00:39:59.275602 1956 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Sep 10 00:39:59.275713 kubelet[1956]: E0910 00:39:59.275655 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:39:59.275824 kubelet[1956]: I0910 00:39:59.275806 1956 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Sep 10 00:39:59.580816 kubelet[1956]: E0910 00:39:59.580668 1956 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Sep 10 00:39:59.580816 kubelet[1956]: E0910 00:39:59.580668 1956 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Sep 10 00:39:59.581056 kubelet[1956]: E0910 00:39:59.580887 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:39:59.581056 kubelet[1956]: E0910 00:39:59.580889 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:00.217267 kubelet[1956]: I0910 00:40:00.217198 1956 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=2.217170116 podStartE2EDuration="2.217170116s" podCreationTimestamp="2025-09-10 00:39:58 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-10 00:39:59.852652543 +0000 UTC m=+1.705982967" watchObservedRunningTime="2025-09-10 00:40:00.217170116 +0000 UTC m=+2.070500531" Sep 10 00:40:00.276921 kubelet[1956]: E0910 00:40:00.276860 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:00.277355 kubelet[1956]: E0910 00:40:00.277085 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:00.277443 kubelet[1956]: E0910 00:40:00.277413 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:00.660405 kubelet[1956]: I0910 00:40:00.660260 1956 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=2.660233566 podStartE2EDuration="2.660233566s" podCreationTimestamp="2025-09-10 00:39:58 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-10 00:40:00.218240827 +0000 UTC m=+2.071571241" watchObservedRunningTime="2025-09-10 00:40:00.660233566 +0000 UTC m=+2.513563970" Sep 10 00:40:00.768255 kubelet[1956]: I0910 00:40:00.768160 1956 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.768136994 podStartE2EDuration="2.768136994s" podCreationTimestamp="2025-09-10 00:39:58 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-10 00:40:00.661139512 +0000 UTC m=+2.514469926" watchObservedRunningTime="2025-09-10 00:40:00.768136994 +0000 UTC m=+2.621467408" Sep 10 00:40:01.754000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:40:01.760451 kernel: kauditd_printk_skb: 614 callbacks suppressed Sep 10 00:40:01.760639 kernel: audit: type=1400 audit(1757464801.754:807): avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:40:01.755000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:40:01.764732 kernel: audit: type=1400 audit(1757464801.755:808): avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:40:01.764833 kernel: audit: type=1300 audit(1757464801.755:808): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00046c940 a2=fc6 a3=0 items=0 ppid=1653 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 key=(null) Sep 10 00:40:01.755000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00046c940 a2=fc6 a3=0 items=0 ppid=1653 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 key=(null) Sep 10 00:40:01.769545 kernel: audit: type=1327 audit(1757464801.755:808): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:40:01.755000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:40:01.773606 kernel: audit: type=1400 audit(1757464801.756:809): avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:40:01.756000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:40:01.756000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000cc7d40 a2=fc6 a3=0 items=0 ppid=1653 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 key=(null) Sep 10 00:40:01.782713 kernel: audit: type=1300 audit(1757464801.756:809): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000cc7d40 a2=fc6 a3=0 items=0 ppid=1653 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 key=(null) Sep 10 00:40:01.782928 kernel: audit: type=1327 audit(1757464801.756:809): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:40:01.756000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:40:01.786733 kernel: audit: type=1400 audit(1757464801.756:810): avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:40:01.756000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:40:01.790154 kernel: audit: type=1300 audit(1757464801.756:810): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00046cc60 a2=fc6 a3=0 items=0 ppid=1653 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 key=(null) Sep 10 00:40:01.756000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00046cc60 a2=fc6 a3=0 items=0 ppid=1653 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 key=(null) Sep 10 00:40:01.756000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:40:01.798623 kernel: audit: type=1327 audit(1757464801.756:810): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:40:01.754000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0000d8da0 a2=fc6 a3=0 items=0 ppid=1653 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 key=(null) Sep 10 00:40:01.754000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:40:02.134000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 10 00:40:02.134000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000681680 a2=fc6 a3=0 items=0 ppid=1653 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 key=(null) Sep 10 00:40:02.134000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:40:02.838687 kubelet[1956]: I0910 00:40:02.838646 1956 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Sep 10 00:40:02.839300 kubelet[1956]: I0910 00:40:02.839125 1956 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Sep 10 00:40:02.839348 env[1200]: time="2025-09-10T00:40:02.838972850Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Sep 10 00:40:03.962775 update_engine[1192]: I0910 00:40:03.962674 1192 update_attempter.cc:509] Updating boot flags... Sep 10 00:40:04.314821 systemd[1]: Created slice kubepods-besteffort-pode2f3be94_44e1_4ce7_aa0e_3b273a004d54.slice. Sep 10 00:40:04.360106 systemd[1]: Created slice kubepods-besteffort-pod87b4dd2a_71f6_432f_a31e_989e36e0b87e.slice. Sep 10 00:40:04.396175 kubelet[1956]: I0910 00:40:04.396102 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-br7w8\" (UniqueName: \"kubernetes.io/projected/e2f3be94-44e1-4ce7-aa0e-3b273a004d54-kube-api-access-br7w8\") pod \"kube-proxy-dqwnr\" (UID: \"e2f3be94-44e1-4ce7-aa0e-3b273a004d54\") " pod="kube-system/kube-proxy-dqwnr" Sep 10 00:40:04.396175 kubelet[1956]: I0910 00:40:04.396178 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6ptf4\" (UniqueName: \"kubernetes.io/projected/87b4dd2a-71f6-432f-a31e-989e36e0b87e-kube-api-access-6ptf4\") pod \"tigera-operator-755d956888-l8gdd\" (UID: \"87b4dd2a-71f6-432f-a31e-989e36e0b87e\") " pod="tigera-operator/tigera-operator-755d956888-l8gdd" Sep 10 00:40:04.396691 kubelet[1956]: I0910 00:40:04.396279 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e2f3be94-44e1-4ce7-aa0e-3b273a004d54-xtables-lock\") pod \"kube-proxy-dqwnr\" (UID: \"e2f3be94-44e1-4ce7-aa0e-3b273a004d54\") " pod="kube-system/kube-proxy-dqwnr" Sep 10 00:40:04.396691 kubelet[1956]: I0910 00:40:04.396312 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e2f3be94-44e1-4ce7-aa0e-3b273a004d54-lib-modules\") pod \"kube-proxy-dqwnr\" (UID: \"e2f3be94-44e1-4ce7-aa0e-3b273a004d54\") " pod="kube-system/kube-proxy-dqwnr" Sep 10 00:40:04.396691 kubelet[1956]: I0910 00:40:04.396334 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/e2f3be94-44e1-4ce7-aa0e-3b273a004d54-kube-proxy\") pod \"kube-proxy-dqwnr\" (UID: \"e2f3be94-44e1-4ce7-aa0e-3b273a004d54\") " pod="kube-system/kube-proxy-dqwnr" Sep 10 00:40:04.396691 kubelet[1956]: I0910 00:40:04.396356 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/87b4dd2a-71f6-432f-a31e-989e36e0b87e-var-lib-calico\") pod \"tigera-operator-755d956888-l8gdd\" (UID: \"87b4dd2a-71f6-432f-a31e-989e36e0b87e\") " pod="tigera-operator/tigera-operator-755d956888-l8gdd" Sep 10 00:40:04.503662 kubelet[1956]: I0910 00:40:04.503614 1956 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Sep 10 00:40:04.626807 kubelet[1956]: E0910 00:40:04.626629 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:04.627624 env[1200]: time="2025-09-10T00:40:04.627555693Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-dqwnr,Uid:e2f3be94-44e1-4ce7-aa0e-3b273a004d54,Namespace:kube-system,Attempt:0,}" Sep 10 00:40:04.643747 env[1200]: time="2025-09-10T00:40:04.643664225Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:40:04.643978 env[1200]: time="2025-09-10T00:40:04.643752793Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:40:04.643978 env[1200]: time="2025-09-10T00:40:04.643769825Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:40:04.644238 env[1200]: time="2025-09-10T00:40:04.643993761Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d8075d376114fb455f9345c89d10212c9ca61f02a59f1d8f92c381fd585bbb07 pid=2033 runtime=io.containerd.runc.v2 Sep 10 00:40:04.887732 env[1200]: time="2025-09-10T00:40:04.887529791Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-l8gdd,Uid:87b4dd2a-71f6-432f-a31e-989e36e0b87e,Namespace:tigera-operator,Attempt:0,}" Sep 10 00:40:04.913713 systemd[1]: Started cri-containerd-d8075d376114fb455f9345c89d10212c9ca61f02a59f1d8f92c381fd585bbb07.scope. Sep 10 00:40:04.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.923000 audit: BPF prog-id=106 op=LOAD Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2033 pid=2043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:04.924000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438303735643337363131346662343535663933343563383964313032 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2033 pid=2043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:04.924000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438303735643337363131346662343535663933343563383964313032 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit: BPF prog-id=107 op=LOAD Sep 10 00:40:04.924000 audit[2043]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003801f0 items=0 ppid=2033 pid=2043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:04.924000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438303735643337363131346662343535663933343563383964313032 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit: BPF prog-id=108 op=LOAD Sep 10 00:40:04.924000 audit[2043]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000380238 items=0 ppid=2033 pid=2043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:04.924000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438303735643337363131346662343535663933343563383964313032 Sep 10 00:40:04.924000 audit: BPF prog-id=108 op=UNLOAD Sep 10 00:40:04.924000 audit: BPF prog-id=107 op=UNLOAD Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { perfmon } for pid=2043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit[2043]: AVC avc: denied { bpf } for pid=2043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:04.924000 audit: BPF prog-id=109 op=LOAD Sep 10 00:40:04.924000 audit[2043]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000380648 items=0 ppid=2033 pid=2043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:04.924000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438303735643337363131346662343535663933343563383964313032 Sep 10 00:40:04.942103 env[1200]: time="2025-09-10T00:40:04.942012486Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-dqwnr,Uid:e2f3be94-44e1-4ce7-aa0e-3b273a004d54,Namespace:kube-system,Attempt:0,} returns sandbox id \"d8075d376114fb455f9345c89d10212c9ca61f02a59f1d8f92c381fd585bbb07\"" Sep 10 00:40:04.944068 kubelet[1956]: E0910 00:40:04.944035 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:04.970442 env[1200]: time="2025-09-10T00:40:04.970265944Z" level=info msg="CreateContainer within sandbox \"d8075d376114fb455f9345c89d10212c9ca61f02a59f1d8f92c381fd585bbb07\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Sep 10 00:40:05.037828 env[1200]: time="2025-09-10T00:40:05.037605196Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:40:05.037828 env[1200]: time="2025-09-10T00:40:05.037663006Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:40:05.037828 env[1200]: time="2025-09-10T00:40:05.037677914Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:40:05.038286 env[1200]: time="2025-09-10T00:40:05.037985728Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2a4648e027e1186e6bf33066e20cfbb3cd39586eb1ff8ac6fb9f7d1a57e1677f pid=2074 runtime=io.containerd.runc.v2 Sep 10 00:40:05.044873 env[1200]: time="2025-09-10T00:40:05.044755360Z" level=info msg="CreateContainer within sandbox \"d8075d376114fb455f9345c89d10212c9ca61f02a59f1d8f92c381fd585bbb07\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"f547370a71c66edf8697c1152053f53ba38955aa8fa4afff8ad7b680d7a29719\"" Sep 10 00:40:05.046237 env[1200]: time="2025-09-10T00:40:05.046194430Z" level=info msg="StartContainer for \"f547370a71c66edf8697c1152053f53ba38955aa8fa4afff8ad7b680d7a29719\"" Sep 10 00:40:05.062528 systemd[1]: Started cri-containerd-2a4648e027e1186e6bf33066e20cfbb3cd39586eb1ff8ac6fb9f7d1a57e1677f.scope. Sep 10 00:40:05.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.080000 audit: BPF prog-id=110 op=LOAD Sep 10 00:40:05.083906 systemd[1]: Started cri-containerd-f547370a71c66edf8697c1152053f53ba38955aa8fa4afff8ad7b680d7a29719.scope. Sep 10 00:40:05.082000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.082000 audit[2082]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2074 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261343634386530323765313138366536626633333036366532306366 Sep 10 00:40:05.082000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.082000 audit[2082]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2074 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261343634386530323765313138366536626633333036366532306366 Sep 10 00:40:05.082000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.082000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.082000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.082000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.082000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.082000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.082000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.082000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.082000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.082000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.082000 audit: BPF prog-id=111 op=LOAD Sep 10 00:40:05.082000 audit[2082]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000271cf0 items=0 ppid=2074 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261343634386530323765313138366536626633333036366532306366 Sep 10 00:40:05.082000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.082000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.082000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.082000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.082000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.082000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.082000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.082000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.082000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.082000 audit: BPF prog-id=112 op=LOAD Sep 10 00:40:05.082000 audit[2082]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000271d38 items=0 ppid=2074 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261343634386530323765313138366536626633333036366532306366 Sep 10 00:40:05.083000 audit: BPF prog-id=112 op=UNLOAD Sep 10 00:40:05.083000 audit: BPF prog-id=111 op=UNLOAD Sep 10 00:40:05.083000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.083000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.083000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.083000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.083000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.083000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.083000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.083000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.083000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.083000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.083000 audit: BPF prog-id=113 op=LOAD Sep 10 00:40:05.083000 audit[2082]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003f4148 items=0 ppid=2074 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.083000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261343634386530323765313138366536626633333036366532306366 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { perfmon } for pid=2100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fee7d19f0b8 items=0 ppid=2033 pid=2100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635343733373061373163363665646638363937633131353230353366 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { bpf } for pid=2100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { bpf } for pid=2100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { bpf } for pid=2100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { perfmon } for pid=2100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { perfmon } for pid=2100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { perfmon } for pid=2100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { perfmon } for pid=2100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { perfmon } for pid=2100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { bpf } for pid=2100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { bpf } for pid=2100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit: BPF prog-id=114 op=LOAD Sep 10 00:40:05.105000 audit[2100]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003fa3d8 items=0 ppid=2033 pid=2100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635343733373061373163363665646638363937633131353230353366 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { bpf } for pid=2100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { bpf } for pid=2100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { perfmon } for pid=2100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { perfmon } for pid=2100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { perfmon } for pid=2100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { perfmon } for pid=2100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { perfmon } for pid=2100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { bpf } for pid=2100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { bpf } for pid=2100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit: BPF prog-id=115 op=LOAD Sep 10 00:40:05.105000 audit[2100]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003fa428 items=0 ppid=2033 pid=2100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635343733373061373163363665646638363937633131353230353366 Sep 10 00:40:05.105000 audit: BPF prog-id=115 op=UNLOAD Sep 10 00:40:05.105000 audit: BPF prog-id=114 op=UNLOAD Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { bpf } for pid=2100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { bpf } for pid=2100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { bpf } for pid=2100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { perfmon } for pid=2100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { perfmon } for pid=2100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { perfmon } for pid=2100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { perfmon } for pid=2100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { perfmon } for pid=2100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { bpf } for pid=2100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit[2100]: AVC avc: denied { bpf } for pid=2100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:05.105000 audit: BPF prog-id=116 op=LOAD Sep 10 00:40:05.105000 audit[2100]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003fa4b8 items=0 ppid=2033 pid=2100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635343733373061373163363665646638363937633131353230353366 Sep 10 00:40:05.127835 env[1200]: time="2025-09-10T00:40:05.127053764Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-l8gdd,Uid:87b4dd2a-71f6-432f-a31e-989e36e0b87e,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"2a4648e027e1186e6bf33066e20cfbb3cd39586eb1ff8ac6fb9f7d1a57e1677f\"" Sep 10 00:40:05.131556 env[1200]: time="2025-09-10T00:40:05.131487024Z" level=info msg="StartContainer for \"f547370a71c66edf8697c1152053f53ba38955aa8fa4afff8ad7b680d7a29719\" returns successfully" Sep 10 00:40:05.137602 env[1200]: time="2025-09-10T00:40:05.137533835Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\"" Sep 10 00:40:05.259000 audit[2176]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.259000 audit[2176]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff30ba8d60 a2=0 a3=7fff30ba8d4c items=0 ppid=2118 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.259000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 10 00:40:05.260000 audit[2177]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2177 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.260000 audit[2177]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc47ec01d0 a2=0 a3=7ffc47ec01bc items=0 ppid=2118 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.260000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 10 00:40:05.260000 audit[2179]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.260000 audit[2179]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe54444270 a2=0 a3=7ffe5444425c items=0 ppid=2118 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.260000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 10 00:40:05.261000 audit[2180]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2180 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.261000 audit[2180]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd84e2c600 a2=0 a3=7ffd84e2c5ec items=0 ppid=2118 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.261000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 10 00:40:05.263000 audit[2181]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.263000 audit[2181]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff874d9140 a2=0 a3=7fff874d912c items=0 ppid=2118 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.263000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 10 00:40:05.266000 audit[2183]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2183 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.266000 audit[2183]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe54295160 a2=0 a3=7ffe5429514c items=0 ppid=2118 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.266000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 10 00:40:05.290483 kubelet[1956]: E0910 00:40:05.290110 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:05.307344 kubelet[1956]: I0910 00:40:05.307253 1956 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-dqwnr" podStartSLOduration=1.3072257170000001 podStartE2EDuration="1.307225717s" podCreationTimestamp="2025-09-10 00:40:04 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-10 00:40:05.306783549 +0000 UTC m=+7.160113973" watchObservedRunningTime="2025-09-10 00:40:05.307225717 +0000 UTC m=+7.160556141" Sep 10 00:40:05.362000 audit[2184]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.362000 audit[2184]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc857a09f0 a2=0 a3=7ffc857a09dc items=0 ppid=2118 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.362000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 10 00:40:05.368000 audit[2186]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.368000 audit[2186]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc0b57e440 a2=0 a3=7ffc0b57e42c items=0 ppid=2118 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.368000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Sep 10 00:40:05.374000 audit[2189]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.374000 audit[2189]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffef3848170 a2=0 a3=7ffef384815c items=0 ppid=2118 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.374000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Sep 10 00:40:05.375000 audit[2190]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2190 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.375000 audit[2190]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd703f44d0 a2=0 a3=7ffd703f44bc items=0 ppid=2118 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.375000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 10 00:40:05.379000 audit[2192]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2192 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.379000 audit[2192]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffed973d2a0 a2=0 a3=7ffed973d28c items=0 ppid=2118 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.379000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 10 00:40:05.381000 audit[2193]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2193 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.381000 audit[2193]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd4dd10f20 a2=0 a3=7ffd4dd10f0c items=0 ppid=2118 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.381000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 10 00:40:05.385000 audit[2195]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2195 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.385000 audit[2195]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc878a3390 a2=0 a3=7ffc878a337c items=0 ppid=2118 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.385000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 10 00:40:05.389000 audit[2198]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2198 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.389000 audit[2198]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe66dfbbd0 a2=0 a3=7ffe66dfbbbc items=0 ppid=2118 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.389000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Sep 10 00:40:05.390000 audit[2199]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2199 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.390000 audit[2199]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffff712b7c0 a2=0 a3=7ffff712b7ac items=0 ppid=2118 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.390000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 10 00:40:05.393000 audit[2201]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2201 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.393000 audit[2201]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffeb64a4ef0 a2=0 a3=7ffeb64a4edc items=0 ppid=2118 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.393000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 10 00:40:05.394000 audit[2202]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2202 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.394000 audit[2202]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffff206fa20 a2=0 a3=7ffff206fa0c items=0 ppid=2118 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.394000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 10 00:40:05.397000 audit[2204]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2204 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.397000 audit[2204]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe5856b890 a2=0 a3=7ffe5856b87c items=0 ppid=2118 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.397000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 10 00:40:05.402000 audit[2207]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2207 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.402000 audit[2207]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffedd1e58c0 a2=0 a3=7ffedd1e58ac items=0 ppid=2118 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.402000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 10 00:40:05.407000 audit[2210]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2210 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.407000 audit[2210]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffced717ee0 a2=0 a3=7ffced717ecc items=0 ppid=2118 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.407000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 10 00:40:05.408000 audit[2211]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2211 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.408000 audit[2211]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd24be2c70 a2=0 a3=7ffd24be2c5c items=0 ppid=2118 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.408000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 10 00:40:05.411000 audit[2213]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2213 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.411000 audit[2213]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffcb3862bc0 a2=0 a3=7ffcb3862bac items=0 ppid=2118 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.411000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 10 00:40:05.415000 audit[2216]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2216 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.415000 audit[2216]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd191a6da0 a2=0 a3=7ffd191a6d8c items=0 ppid=2118 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.415000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 10 00:40:05.417000 audit[2217]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2217 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.417000 audit[2217]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd79320c50 a2=0 a3=7ffd79320c3c items=0 ppid=2118 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.417000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 10 00:40:05.420000 audit[2219]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2219 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 00:40:05.420000 audit[2219]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7fffdbb0eda0 a2=0 a3=7fffdbb0ed8c items=0 ppid=2118 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.420000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 10 00:40:05.455000 audit[2226]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2226 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:05.455000 audit[2226]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe578a3ef0 a2=0 a3=7ffe578a3edc items=0 ppid=2118 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.455000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:05.471000 audit[2226]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:05.471000 audit[2226]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffe578a3ef0 a2=0 a3=7ffe578a3edc items=0 ppid=2118 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.471000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:05.473000 audit[2231]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.473000 audit[2231]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd3ef9b630 a2=0 a3=7ffd3ef9b61c items=0 ppid=2118 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.473000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 10 00:40:05.475000 audit[2233]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2233 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.475000 audit[2233]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe0b7d2500 a2=0 a3=7ffe0b7d24ec items=0 ppid=2118 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.475000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Sep 10 00:40:05.479000 audit[2236]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.479000 audit[2236]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd18e63380 a2=0 a3=7ffd18e6336c items=0 ppid=2118 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.479000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Sep 10 00:40:05.480000 audit[2237]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.480000 audit[2237]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe42238a10 a2=0 a3=7ffe422389fc items=0 ppid=2118 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.480000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 10 00:40:05.483000 audit[2239]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2239 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.483000 audit[2239]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffb30dec90 a2=0 a3=7fffb30dec7c items=0 ppid=2118 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.483000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 10 00:40:05.484000 audit[2240]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.484000 audit[2240]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdbb055db0 a2=0 a3=7ffdbb055d9c items=0 ppid=2118 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.484000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 10 00:40:05.486000 audit[2242]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.486000 audit[2242]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffcaedfd470 a2=0 a3=7ffcaedfd45c items=0 ppid=2118 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.486000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Sep 10 00:40:05.490000 audit[2245]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2245 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.490000 audit[2245]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffd104f8520 a2=0 a3=7ffd104f850c items=0 ppid=2118 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.490000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 10 00:40:05.492000 audit[2246]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2246 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.492000 audit[2246]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe34269380 a2=0 a3=7ffe3426936c items=0 ppid=2118 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.492000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 10 00:40:05.494000 audit[2248]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2248 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.494000 audit[2248]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff86fbfa10 a2=0 a3=7fff86fbf9fc items=0 ppid=2118 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.494000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 10 00:40:05.496000 audit[2249]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2249 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.496000 audit[2249]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdef1ebc70 a2=0 a3=7ffdef1ebc5c items=0 ppid=2118 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.496000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 10 00:40:05.498000 audit[2251]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2251 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.498000 audit[2251]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd4d4e1ab0 a2=0 a3=7ffd4d4e1a9c items=0 ppid=2118 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.498000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 10 00:40:05.504000 audit[2254]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2254 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.504000 audit[2254]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffeaa9d1070 a2=0 a3=7ffeaa9d105c items=0 ppid=2118 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.504000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 10 00:40:05.515000 audit[2257]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2257 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.515000 audit[2257]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffeb1dede90 a2=0 a3=7ffeb1dede7c items=0 ppid=2118 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.515000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Sep 10 00:40:05.518000 audit[2258]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2258 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.518000 audit[2258]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc60e20e40 a2=0 a3=7ffc60e20e2c items=0 ppid=2118 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.518000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 10 00:40:05.521000 audit[2260]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2260 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.521000 audit[2260]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fffe9daec30 a2=0 a3=7fffe9daec1c items=0 ppid=2118 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.521000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 10 00:40:05.526000 audit[2263]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2263 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.526000 audit[2263]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffdee5f5650 a2=0 a3=7ffdee5f563c items=0 ppid=2118 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.526000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 10 00:40:05.528000 audit[2264]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2264 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.528000 audit[2264]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc5a3799b0 a2=0 a3=7ffc5a37999c items=0 ppid=2118 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.528000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 10 00:40:05.530000 audit[2266]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2266 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.530000 audit[2266]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffebc0280f0 a2=0 a3=7ffebc0280dc items=0 ppid=2118 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.530000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 10 00:40:05.532000 audit[2267]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2267 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.532000 audit[2267]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffa4c9ec70 a2=0 a3=7fffa4c9ec5c items=0 ppid=2118 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.532000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 10 00:40:05.536000 audit[2269]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2269 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.536000 audit[2269]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffed134acc0 a2=0 a3=7ffed134acac items=0 ppid=2118 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.536000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 10 00:40:05.540000 audit[2272]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2272 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 00:40:05.540000 audit[2272]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffce98800f0 a2=0 a3=7ffce98800dc items=0 ppid=2118 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.540000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 10 00:40:05.543000 audit[2274]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2274 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 10 00:40:05.543000 audit[2274]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffd98d4f860 a2=0 a3=7ffd98d4f84c items=0 ppid=2118 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.543000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:05.544000 audit[2274]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2274 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 10 00:40:05.544000 audit[2274]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffd98d4f860 a2=0 a3=7ffd98d4f84c items=0 ppid=2118 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:05.544000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:05.786125 kubelet[1956]: E0910 00:40:05.785993 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:06.291822 kubelet[1956]: E0910 00:40:06.291753 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:07.292967 kubelet[1956]: E0910 00:40:07.292903 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:07.845519 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2696829512.mount: Deactivated successfully. Sep 10 00:40:08.295473 kubelet[1956]: E0910 00:40:08.295444 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:08.320997 kubelet[1956]: E0910 00:40:08.320961 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:08.652186 env[1200]: time="2025-09-10T00:40:08.652020349Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:08.654573 env[1200]: time="2025-09-10T00:40:08.654535100Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1911afdd8478c6ca3036ff85614050d5d19acc0f0c3f6a5a7b3e34b38dd309c9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:08.656352 env[1200]: time="2025-09-10T00:40:08.656312265Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:08.658554 env[1200]: time="2025-09-10T00:40:08.658462356Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:00a7a9b62f9b9a4e0856128b078539783b8352b07f707bff595cb604cc580f6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:08.658854 env[1200]: time="2025-09-10T00:40:08.658803432Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\" returns image reference \"sha256:1911afdd8478c6ca3036ff85614050d5d19acc0f0c3f6a5a7b3e34b38dd309c9\"" Sep 10 00:40:08.665181 env[1200]: time="2025-09-10T00:40:08.665086777Z" level=info msg="CreateContainer within sandbox \"2a4648e027e1186e6bf33066e20cfbb3cd39586eb1ff8ac6fb9f7d1a57e1677f\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Sep 10 00:40:09.059697 env[1200]: time="2025-09-10T00:40:09.059605764Z" level=info msg="CreateContainer within sandbox \"2a4648e027e1186e6bf33066e20cfbb3cd39586eb1ff8ac6fb9f7d1a57e1677f\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"e810cc8979db4cdc87424687fb1282e16c795573967887f9cbfd3229031d8adc\"" Sep 10 00:40:09.060431 env[1200]: time="2025-09-10T00:40:09.060363277Z" level=info msg="StartContainer for \"e810cc8979db4cdc87424687fb1282e16c795573967887f9cbfd3229031d8adc\"" Sep 10 00:40:09.078134 systemd[1]: run-containerd-runc-k8s.io-e810cc8979db4cdc87424687fb1282e16c795573967887f9cbfd3229031d8adc-runc.rVBitR.mount: Deactivated successfully. Sep 10 00:40:09.079852 systemd[1]: Started cri-containerd-e810cc8979db4cdc87424687fb1282e16c795573967887f9cbfd3229031d8adc.scope. Sep 10 00:40:09.098190 kernel: kauditd_printk_skb: 315 callbacks suppressed Sep 10 00:40:09.098352 kernel: audit: type=1400 audit(1757464809.093:905): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.098376 kernel: audit: type=1400 audit(1757464809.093:906): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.104018 kernel: audit: type=1400 audit(1757464809.093:907): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.104096 kernel: audit: type=1400 audit(1757464809.093:908): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.107231 kernel: audit: type=1400 audit(1757464809.093:909): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.110034 kernel: audit: type=1400 audit(1757464809.093:910): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.115623 kernel: audit: type=1400 audit(1757464809.093:911): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.115686 kernel: audit: type=1400 audit(1757464809.093:912): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.124241 kernel: audit: type=1400 audit(1757464809.093:913): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.124445 kernel: audit: type=1400 audit(1757464809.097:914): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.097000 audit: BPF prog-id=117 op=LOAD Sep 10 00:40:09.097000 audit[2284]: AVC avc: denied { bpf } for pid=2284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.097000 audit[2284]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2074 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:09.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538313063633839373964623463646338373432343638376662313238 Sep 10 00:40:09.097000 audit[2284]: AVC avc: denied { perfmon } for pid=2284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.097000 audit[2284]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2074 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:09.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538313063633839373964623463646338373432343638376662313238 Sep 10 00:40:09.097000 audit[2284]: AVC avc: denied { bpf } for pid=2284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.097000 audit[2284]: AVC avc: denied { bpf } for pid=2284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.097000 audit[2284]: AVC avc: denied { bpf } for pid=2284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.097000 audit[2284]: AVC avc: denied { perfmon } for pid=2284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.097000 audit[2284]: AVC avc: denied { perfmon } for pid=2284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.097000 audit[2284]: AVC avc: denied { perfmon } for pid=2284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.097000 audit[2284]: AVC avc: denied { perfmon } for pid=2284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.097000 audit[2284]: AVC avc: denied { perfmon } for pid=2284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.097000 audit[2284]: AVC avc: denied { bpf } for pid=2284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.097000 audit[2284]: AVC avc: denied { bpf } for pid=2284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.097000 audit: BPF prog-id=118 op=LOAD Sep 10 00:40:09.097000 audit[2284]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000324670 items=0 ppid=2074 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:09.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538313063633839373964623463646338373432343638376662313238 Sep 10 00:40:09.099000 audit[2284]: AVC avc: denied { bpf } for pid=2284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.099000 audit[2284]: AVC avc: denied { bpf } for pid=2284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.099000 audit[2284]: AVC avc: denied { perfmon } for pid=2284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.099000 audit[2284]: AVC avc: denied { perfmon } for pid=2284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.099000 audit[2284]: AVC avc: denied { perfmon } for pid=2284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.099000 audit[2284]: AVC avc: denied { perfmon } for pid=2284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.099000 audit[2284]: AVC avc: denied { perfmon } for pid=2284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.099000 audit[2284]: AVC avc: denied { bpf } for pid=2284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.099000 audit[2284]: AVC avc: denied { bpf } for pid=2284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.099000 audit: BPF prog-id=119 op=LOAD Sep 10 00:40:09.099000 audit[2284]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003246b8 items=0 ppid=2074 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:09.099000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538313063633839373964623463646338373432343638376662313238 Sep 10 00:40:09.103000 audit: BPF prog-id=119 op=UNLOAD Sep 10 00:40:09.103000 audit: BPF prog-id=118 op=UNLOAD Sep 10 00:40:09.103000 audit[2284]: AVC avc: denied { bpf } for pid=2284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.103000 audit[2284]: AVC avc: denied { bpf } for pid=2284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.103000 audit[2284]: AVC avc: denied { bpf } for pid=2284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.103000 audit[2284]: AVC avc: denied { perfmon } for pid=2284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.103000 audit[2284]: AVC avc: denied { perfmon } for pid=2284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.103000 audit[2284]: AVC avc: denied { perfmon } for pid=2284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.103000 audit[2284]: AVC avc: denied { perfmon } for pid=2284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.103000 audit[2284]: AVC avc: denied { perfmon } for pid=2284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.103000 audit[2284]: AVC avc: denied { bpf } for pid=2284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.103000 audit[2284]: AVC avc: denied { bpf } for pid=2284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:09.103000 audit: BPF prog-id=120 op=LOAD Sep 10 00:40:09.103000 audit[2284]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000324ac8 items=0 ppid=2074 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:09.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538313063633839373964623463646338373432343638376662313238 Sep 10 00:40:09.145041 env[1200]: time="2025-09-10T00:40:09.144964692Z" level=info msg="StartContainer for \"e810cc8979db4cdc87424687fb1282e16c795573967887f9cbfd3229031d8adc\" returns successfully" Sep 10 00:40:09.298009 kubelet[1956]: E0910 00:40:09.297960 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:09.298009 kubelet[1956]: E0910 00:40:09.298021 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:09.315470 kubelet[1956]: I0910 00:40:09.315296 1956 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-755d956888-l8gdd" podStartSLOduration=1.792039046 podStartE2EDuration="5.315275178s" podCreationTimestamp="2025-09-10 00:40:04 +0000 UTC" firstStartedPulling="2025-09-10 00:40:05.136922505 +0000 UTC m=+6.990252919" lastFinishedPulling="2025-09-10 00:40:08.660158637 +0000 UTC m=+10.513489051" observedRunningTime="2025-09-10 00:40:09.306898678 +0000 UTC m=+11.160229092" watchObservedRunningTime="2025-09-10 00:40:09.315275178 +0000 UTC m=+11.168605592" Sep 10 00:40:15.131186 sudo[1338]: pam_unix(sudo:session): session closed for user root Sep 10 00:40:15.130000 audit[1338]: USER_END pid=1338 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:40:15.132133 kernel: kauditd_printk_skb: 47 callbacks suppressed Sep 10 00:40:15.132202 kernel: audit: type=1106 audit(1757464815.130:923): pid=1338 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:40:15.135000 audit[1338]: CRED_DISP pid=1338 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:40:15.138640 sshd[1335]: pam_unix(sshd:session): session closed for user core Sep 10 00:40:15.139992 kernel: audit: type=1104 audit(1757464815.135:924): pid=1338 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 00:40:15.139000 audit[1335]: USER_END pid=1335 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:15.142032 systemd-logind[1188]: Session 7 logged out. Waiting for processes to exit. Sep 10 00:40:15.143483 systemd[1]: sshd@6-10.0.0.37:22-10.0.0.1:44884.service: Deactivated successfully. Sep 10 00:40:15.146152 kernel: audit: type=1106 audit(1757464815.139:925): pid=1335 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:15.144157 systemd[1]: session-7.scope: Deactivated successfully. Sep 10 00:40:15.144282 systemd[1]: session-7.scope: Consumed 5.952s CPU time. Sep 10 00:40:15.145369 systemd-logind[1188]: Removed session 7. Sep 10 00:40:15.139000 audit[1335]: CRED_DISP pid=1335 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:15.151018 kernel: audit: type=1104 audit(1757464815.139:926): pid=1335 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:15.151128 kernel: audit: type=1131 audit(1757464815.142:927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.37:22-10.0.0.1:44884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:40:15.142000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.37:22-10.0.0.1:44884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:40:15.369504 kernel: audit: type=1325 audit(1757464815.360:928): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2371 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:15.369696 kernel: audit: type=1300 audit(1757464815.360:928): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff539e6fb0 a2=0 a3=7fff539e6f9c items=0 ppid=2118 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:15.360000 audit[2371]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2371 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:15.360000 audit[2371]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff539e6fb0 a2=0 a3=7fff539e6f9c items=0 ppid=2118 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:15.360000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:15.372983 kernel: audit: type=1327 audit(1757464815.360:928): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:15.375000 audit[2371]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2371 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:15.379977 kernel: audit: type=1325 audit(1757464815.375:929): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2371 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:15.375000 audit[2371]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff539e6fb0 a2=0 a3=0 items=0 ppid=2118 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:15.375000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:15.389084 kernel: audit: type=1300 audit(1757464815.375:929): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff539e6fb0 a2=0 a3=0 items=0 ppid=2118 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:15.395000 audit[2373]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2373 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:15.395000 audit[2373]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffeef35fc00 a2=0 a3=7ffeef35fbec items=0 ppid=2118 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:15.395000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:15.400000 audit[2373]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2373 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:15.400000 audit[2373]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffeef35fc00 a2=0 a3=0 items=0 ppid=2118 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:15.400000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:19.170000 audit[2376]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2376 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:19.170000 audit[2376]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffc68caae80 a2=0 a3=7ffc68caae6c items=0 ppid=2118 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:19.170000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:19.180000 audit[2376]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2376 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:19.180000 audit[2376]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc68caae80 a2=0 a3=0 items=0 ppid=2118 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:19.180000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:19.195000 audit[2378]: NETFILTER_CFG table=filter:95 family=2 entries=19 op=nft_register_rule pid=2378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:19.195000 audit[2378]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc8c6c3b30 a2=0 a3=7ffc8c6c3b1c items=0 ppid=2118 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:19.195000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:19.201000 audit[2378]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:19.201000 audit[2378]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc8c6c3b30 a2=0 a3=0 items=0 ppid=2118 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:19.201000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:19.273977 kubelet[1956]: I0910 00:40:19.273855 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/82c2be6b-6e3c-48eb-96d0-bc50ed62bd8b-tigera-ca-bundle\") pod \"calico-typha-78c68cd7fd-nn9bd\" (UID: \"82c2be6b-6e3c-48eb-96d0-bc50ed62bd8b\") " pod="calico-system/calico-typha-78c68cd7fd-nn9bd" Sep 10 00:40:19.273977 kubelet[1956]: I0910 00:40:19.273912 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wp4ml\" (UniqueName: \"kubernetes.io/projected/82c2be6b-6e3c-48eb-96d0-bc50ed62bd8b-kube-api-access-wp4ml\") pod \"calico-typha-78c68cd7fd-nn9bd\" (UID: \"82c2be6b-6e3c-48eb-96d0-bc50ed62bd8b\") " pod="calico-system/calico-typha-78c68cd7fd-nn9bd" Sep 10 00:40:19.273977 kubelet[1956]: I0910 00:40:19.273926 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/82c2be6b-6e3c-48eb-96d0-bc50ed62bd8b-typha-certs\") pod \"calico-typha-78c68cd7fd-nn9bd\" (UID: \"82c2be6b-6e3c-48eb-96d0-bc50ed62bd8b\") " pod="calico-system/calico-typha-78c68cd7fd-nn9bd" Sep 10 00:40:19.278692 systemd[1]: Created slice kubepods-besteffort-pod82c2be6b_6e3c_48eb_96d0_bc50ed62bd8b.slice. Sep 10 00:40:19.508882 systemd[1]: Created slice kubepods-besteffort-pod39de653a_5ba4_436a_86c2_d31bc3c6bcef.slice. Sep 10 00:40:19.582394 kubelet[1956]: E0910 00:40:19.582352 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:19.587399 env[1200]: time="2025-09-10T00:40:19.587343865Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-78c68cd7fd-nn9bd,Uid:82c2be6b-6e3c-48eb-96d0-bc50ed62bd8b,Namespace:calico-system,Attempt:0,}" Sep 10 00:40:19.672242 env[1200]: time="2025-09-10T00:40:19.672110818Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:40:19.672242 env[1200]: time="2025-09-10T00:40:19.672164289Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:40:19.672242 env[1200]: time="2025-09-10T00:40:19.672175731Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:40:19.672711 env[1200]: time="2025-09-10T00:40:19.672620479Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/61782b14f7f3ffc2a8b9d8e86a56f9444d3cf5e3e4163eab20fb60f2faf23c64 pid=2388 runtime=io.containerd.runc.v2 Sep 10 00:40:19.677455 kubelet[1956]: I0910 00:40:19.677378 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/39de653a-5ba4-436a-86c2-d31bc3c6bcef-cni-bin-dir\") pod \"calico-node-r5xjm\" (UID: \"39de653a-5ba4-436a-86c2-d31bc3c6bcef\") " pod="calico-system/calico-node-r5xjm" Sep 10 00:40:19.677525 kubelet[1956]: I0910 00:40:19.677467 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/39de653a-5ba4-436a-86c2-d31bc3c6bcef-var-run-calico\") pod \"calico-node-r5xjm\" (UID: \"39de653a-5ba4-436a-86c2-d31bc3c6bcef\") " pod="calico-system/calico-node-r5xjm" Sep 10 00:40:19.677562 kubelet[1956]: I0910 00:40:19.677534 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/39de653a-5ba4-436a-86c2-d31bc3c6bcef-xtables-lock\") pod \"calico-node-r5xjm\" (UID: \"39de653a-5ba4-436a-86c2-d31bc3c6bcef\") " pod="calico-system/calico-node-r5xjm" Sep 10 00:40:19.677653 kubelet[1956]: I0910 00:40:19.677613 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/39de653a-5ba4-436a-86c2-d31bc3c6bcef-cni-net-dir\") pod \"calico-node-r5xjm\" (UID: \"39de653a-5ba4-436a-86c2-d31bc3c6bcef\") " pod="calico-system/calico-node-r5xjm" Sep 10 00:40:19.677800 kubelet[1956]: I0910 00:40:19.677709 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/39de653a-5ba4-436a-86c2-d31bc3c6bcef-flexvol-driver-host\") pod \"calico-node-r5xjm\" (UID: \"39de653a-5ba4-436a-86c2-d31bc3c6bcef\") " pod="calico-system/calico-node-r5xjm" Sep 10 00:40:19.677993 kubelet[1956]: I0910 00:40:19.677851 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/39de653a-5ba4-436a-86c2-d31bc3c6bcef-cni-log-dir\") pod \"calico-node-r5xjm\" (UID: \"39de653a-5ba4-436a-86c2-d31bc3c6bcef\") " pod="calico-system/calico-node-r5xjm" Sep 10 00:40:19.677993 kubelet[1956]: I0910 00:40:19.677889 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/39de653a-5ba4-436a-86c2-d31bc3c6bcef-lib-modules\") pod \"calico-node-r5xjm\" (UID: \"39de653a-5ba4-436a-86c2-d31bc3c6bcef\") " pod="calico-system/calico-node-r5xjm" Sep 10 00:40:19.678053 kubelet[1956]: I0910 00:40:19.678000 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/39de653a-5ba4-436a-86c2-d31bc3c6bcef-var-lib-calico\") pod \"calico-node-r5xjm\" (UID: \"39de653a-5ba4-436a-86c2-d31bc3c6bcef\") " pod="calico-system/calico-node-r5xjm" Sep 10 00:40:19.678081 kubelet[1956]: I0910 00:40:19.678053 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/39de653a-5ba4-436a-86c2-d31bc3c6bcef-node-certs\") pod \"calico-node-r5xjm\" (UID: \"39de653a-5ba4-436a-86c2-d31bc3c6bcef\") " pod="calico-system/calico-node-r5xjm" Sep 10 00:40:19.678237 kubelet[1956]: I0910 00:40:19.678081 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/39de653a-5ba4-436a-86c2-d31bc3c6bcef-policysync\") pod \"calico-node-r5xjm\" (UID: \"39de653a-5ba4-436a-86c2-d31bc3c6bcef\") " pod="calico-system/calico-node-r5xjm" Sep 10 00:40:19.678237 kubelet[1956]: I0910 00:40:19.678113 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/39de653a-5ba4-436a-86c2-d31bc3c6bcef-tigera-ca-bundle\") pod \"calico-node-r5xjm\" (UID: \"39de653a-5ba4-436a-86c2-d31bc3c6bcef\") " pod="calico-system/calico-node-r5xjm" Sep 10 00:40:19.678237 kubelet[1956]: I0910 00:40:19.678210 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-v9kf9\" (UniqueName: \"kubernetes.io/projected/39de653a-5ba4-436a-86c2-d31bc3c6bcef-kube-api-access-v9kf9\") pod \"calico-node-r5xjm\" (UID: \"39de653a-5ba4-436a-86c2-d31bc3c6bcef\") " pod="calico-system/calico-node-r5xjm" Sep 10 00:40:19.687291 kubelet[1956]: E0910 00:40:19.687210 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-tn66z" podUID="9d11f211-d02b-4887-86fd-f93a2eb25fc1" Sep 10 00:40:19.695727 systemd[1]: Started cri-containerd-61782b14f7f3ffc2a8b9d8e86a56f9444d3cf5e3e4163eab20fb60f2faf23c64.scope. Sep 10 00:40:19.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit: BPF prog-id=121 op=LOAD Sep 10 00:40:19.717000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[2397]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2388 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:19.717000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631373832623134663766336666633261386239643865383661353666 Sep 10 00:40:19.717000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[2397]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2388 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:19.717000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631373832623134663766336666633261386239643865383661353666 Sep 10 00:40:19.717000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit: BPF prog-id=122 op=LOAD Sep 10 00:40:19.717000 audit[2397]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000279d90 items=0 ppid=2388 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:19.717000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631373832623134663766336666633261386239643865383661353666 Sep 10 00:40:19.717000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.717000 audit: BPF prog-id=123 op=LOAD Sep 10 00:40:19.717000 audit[2397]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000279dd8 items=0 ppid=2388 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:19.717000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631373832623134663766336666633261386239643865383661353666 Sep 10 00:40:19.717000 audit: BPF prog-id=123 op=UNLOAD Sep 10 00:40:19.718000 audit: BPF prog-id=122 op=UNLOAD Sep 10 00:40:19.718000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.718000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.718000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.718000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.718000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.718000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.718000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.718000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.718000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.718000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:19.718000 audit: BPF prog-id=124 op=LOAD Sep 10 00:40:19.718000 audit[2397]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003ee1e8 items=0 ppid=2388 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:19.718000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631373832623134663766336666633261386239643865383661353666 Sep 10 00:40:19.746305 env[1200]: time="2025-09-10T00:40:19.746254556Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-78c68cd7fd-nn9bd,Uid:82c2be6b-6e3c-48eb-96d0-bc50ed62bd8b,Namespace:calico-system,Attempt:0,} returns sandbox id \"61782b14f7f3ffc2a8b9d8e86a56f9444d3cf5e3e4163eab20fb60f2faf23c64\"" Sep 10 00:40:19.746999 kubelet[1956]: E0910 00:40:19.746973 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:19.748141 env[1200]: time="2025-09-10T00:40:19.748080646Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\"" Sep 10 00:40:19.780561 kubelet[1956]: I0910 00:40:19.778415 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/9d11f211-d02b-4887-86fd-f93a2eb25fc1-varrun\") pod \"csi-node-driver-tn66z\" (UID: \"9d11f211-d02b-4887-86fd-f93a2eb25fc1\") " pod="calico-system/csi-node-driver-tn66z" Sep 10 00:40:19.780561 kubelet[1956]: I0910 00:40:19.778573 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/9d11f211-d02b-4887-86fd-f93a2eb25fc1-kubelet-dir\") pod \"csi-node-driver-tn66z\" (UID: \"9d11f211-d02b-4887-86fd-f93a2eb25fc1\") " pod="calico-system/csi-node-driver-tn66z" Sep 10 00:40:19.780561 kubelet[1956]: I0910 00:40:19.778698 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/9d11f211-d02b-4887-86fd-f93a2eb25fc1-socket-dir\") pod \"csi-node-driver-tn66z\" (UID: \"9d11f211-d02b-4887-86fd-f93a2eb25fc1\") " pod="calico-system/csi-node-driver-tn66z" Sep 10 00:40:19.780561 kubelet[1956]: I0910 00:40:19.778775 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9hcbc\" (UniqueName: \"kubernetes.io/projected/9d11f211-d02b-4887-86fd-f93a2eb25fc1-kube-api-access-9hcbc\") pod \"csi-node-driver-tn66z\" (UID: \"9d11f211-d02b-4887-86fd-f93a2eb25fc1\") " pod="calico-system/csi-node-driver-tn66z" Sep 10 00:40:19.780561 kubelet[1956]: I0910 00:40:19.778822 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/9d11f211-d02b-4887-86fd-f93a2eb25fc1-registration-dir\") pod \"csi-node-driver-tn66z\" (UID: \"9d11f211-d02b-4887-86fd-f93a2eb25fc1\") " pod="calico-system/csi-node-driver-tn66z" Sep 10 00:40:19.880358 kubelet[1956]: E0910 00:40:19.880317 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.880358 kubelet[1956]: W0910 00:40:19.880341 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.881197 kubelet[1956]: E0910 00:40:19.881176 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.881465 kubelet[1956]: E0910 00:40:19.881449 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.881465 kubelet[1956]: W0910 00:40:19.881461 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.881465 kubelet[1956]: E0910 00:40:19.881469 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.881768 kubelet[1956]: E0910 00:40:19.881742 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.881768 kubelet[1956]: W0910 00:40:19.881763 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.881862 kubelet[1956]: E0910 00:40:19.881779 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.881995 kubelet[1956]: E0910 00:40:19.881976 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.881995 kubelet[1956]: W0910 00:40:19.881990 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.882079 kubelet[1956]: E0910 00:40:19.882001 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.882175 kubelet[1956]: E0910 00:40:19.882160 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.882175 kubelet[1956]: W0910 00:40:19.882170 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.882221 kubelet[1956]: E0910 00:40:19.882177 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.882379 kubelet[1956]: E0910 00:40:19.882365 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.882379 kubelet[1956]: W0910 00:40:19.882375 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.882379 kubelet[1956]: E0910 00:40:19.882383 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.882632 kubelet[1956]: E0910 00:40:19.882604 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.882632 kubelet[1956]: W0910 00:40:19.882620 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.882632 kubelet[1956]: E0910 00:40:19.882631 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.882945 kubelet[1956]: E0910 00:40:19.882915 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.883007 kubelet[1956]: W0910 00:40:19.882947 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.883007 kubelet[1956]: E0910 00:40:19.882959 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.883181 kubelet[1956]: E0910 00:40:19.883165 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.883181 kubelet[1956]: W0910 00:40:19.883179 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.883260 kubelet[1956]: E0910 00:40:19.883190 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.883378 kubelet[1956]: E0910 00:40:19.883361 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.883378 kubelet[1956]: W0910 00:40:19.883373 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.883483 kubelet[1956]: E0910 00:40:19.883382 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.883671 kubelet[1956]: E0910 00:40:19.883610 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.883671 kubelet[1956]: W0910 00:40:19.883620 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.883671 kubelet[1956]: E0910 00:40:19.883631 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.883854 kubelet[1956]: E0910 00:40:19.883836 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.883854 kubelet[1956]: W0910 00:40:19.883848 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.883854 kubelet[1956]: E0910 00:40:19.883856 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.884115 kubelet[1956]: E0910 00:40:19.884097 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.884115 kubelet[1956]: W0910 00:40:19.884109 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.884230 kubelet[1956]: E0910 00:40:19.884120 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.884326 kubelet[1956]: E0910 00:40:19.884306 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.884326 kubelet[1956]: W0910 00:40:19.884320 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.884326 kubelet[1956]: E0910 00:40:19.884329 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.884618 kubelet[1956]: E0910 00:40:19.884598 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.884618 kubelet[1956]: W0910 00:40:19.884612 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.884747 kubelet[1956]: E0910 00:40:19.884631 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.884900 kubelet[1956]: E0910 00:40:19.884883 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.884900 kubelet[1956]: W0910 00:40:19.884897 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.885015 kubelet[1956]: E0910 00:40:19.884908 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.885115 kubelet[1956]: E0910 00:40:19.885103 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.885115 kubelet[1956]: W0910 00:40:19.885112 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.885179 kubelet[1956]: E0910 00:40:19.885121 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.885280 kubelet[1956]: E0910 00:40:19.885267 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.885280 kubelet[1956]: W0910 00:40:19.885276 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.885360 kubelet[1956]: E0910 00:40:19.885284 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.885467 kubelet[1956]: E0910 00:40:19.885453 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.885467 kubelet[1956]: W0910 00:40:19.885463 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.885535 kubelet[1956]: E0910 00:40:19.885474 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.885676 kubelet[1956]: E0910 00:40:19.885659 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.885676 kubelet[1956]: W0910 00:40:19.885674 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.885759 kubelet[1956]: E0910 00:40:19.885683 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.886032 kubelet[1956]: E0910 00:40:19.886000 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.886032 kubelet[1956]: W0910 00:40:19.886026 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.886137 kubelet[1956]: E0910 00:40:19.886052 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.886380 kubelet[1956]: E0910 00:40:19.886340 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.886380 kubelet[1956]: W0910 00:40:19.886364 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.886380 kubelet[1956]: E0910 00:40:19.886376 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.886610 kubelet[1956]: E0910 00:40:19.886591 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.886610 kubelet[1956]: W0910 00:40:19.886603 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.886610 kubelet[1956]: E0910 00:40:19.886611 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.886829 kubelet[1956]: E0910 00:40:19.886816 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.886829 kubelet[1956]: W0910 00:40:19.886828 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.886904 kubelet[1956]: E0910 00:40:19.886837 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.887041 kubelet[1956]: E0910 00:40:19.887031 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.887041 kubelet[1956]: W0910 00:40:19.887040 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.887167 kubelet[1956]: E0910 00:40:19.887047 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.913661 kubelet[1956]: E0910 00:40:19.913619 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.913661 kubelet[1956]: W0910 00:40:19.913652 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.913860 kubelet[1956]: E0910 00:40:19.913677 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:19.913962 kubelet[1956]: E0910 00:40:19.913925 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:19.913992 kubelet[1956]: W0910 00:40:19.913961 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:19.913992 kubelet[1956]: E0910 00:40:19.913984 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:20.112144 env[1200]: time="2025-09-10T00:40:20.111975946Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-r5xjm,Uid:39de653a-5ba4-436a-86c2-d31bc3c6bcef,Namespace:calico-system,Attempt:0,}" Sep 10 00:40:20.132904 env[1200]: time="2025-09-10T00:40:20.132826680Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:40:20.132904 env[1200]: time="2025-09-10T00:40:20.132872327Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:40:20.132904 env[1200]: time="2025-09-10T00:40:20.132881654Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:40:20.133774 env[1200]: time="2025-09-10T00:40:20.133047056Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8e21e077144c7d5d1740fa79d16d716e1f23fd868664f459f687b7fecc42d166 pid=2460 runtime=io.containerd.runc.v2 Sep 10 00:40:20.143158 systemd[1]: Started cri-containerd-8e21e077144c7d5d1740fa79d16d716e1f23fd868664f459f687b7fecc42d166.scope. Sep 10 00:40:20.157563 kernel: kauditd_printk_skb: 76 callbacks suppressed Sep 10 00:40:20.157723 kernel: audit: type=1400 audit(1757464820.153:954): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.162145 kernel: audit: type=1400 audit(1757464820.153:955): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.162235 kernel: audit: type=1400 audit(1757464820.153:956): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.167977 kernel: audit: type=1400 audit(1757464820.153:957): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.168024 kernel: audit: type=1400 audit(1757464820.153:958): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.170744 kernel: audit: type=1400 audit(1757464820.153:959): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.176329 kernel: audit: type=1400 audit(1757464820.153:960): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.176382 kernel: audit: type=1400 audit(1757464820.153:961): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.181942 kernel: audit: type=1400 audit(1757464820.153:962): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.181988 kernel: audit: type=1400 audit(1757464820.153:963): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.153000 audit: BPF prog-id=125 op=LOAD Sep 10 00:40:20.153000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.153000 audit[2469]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2460 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:20.153000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865323165303737313434633764356431373430666137396431366437 Sep 10 00:40:20.153000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.153000 audit[2469]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2460 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:20.153000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865323165303737313434633764356431373430666137396431366437 Sep 10 00:40:20.154000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.154000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.154000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.154000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.154000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.154000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.154000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.154000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.154000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.154000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.154000 audit: BPF prog-id=126 op=LOAD Sep 10 00:40:20.154000 audit[2469]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000098af0 items=0 ppid=2460 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:20.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865323165303737313434633764356431373430666137396431366437 Sep 10 00:40:20.154000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.154000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.154000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.154000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.154000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.154000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.154000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.154000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.154000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.154000 audit: BPF prog-id=127 op=LOAD Sep 10 00:40:20.154000 audit[2469]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000098b38 items=0 ppid=2460 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:20.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865323165303737313434633764356431373430666137396431366437 Sep 10 00:40:20.158000 audit: BPF prog-id=127 op=UNLOAD Sep 10 00:40:20.158000 audit: BPF prog-id=126 op=UNLOAD Sep 10 00:40:20.158000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.158000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.158000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.158000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.158000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.158000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.158000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.158000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.158000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.158000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:20.158000 audit: BPF prog-id=128 op=LOAD Sep 10 00:40:20.158000 audit[2469]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000098f48 items=0 ppid=2460 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:20.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865323165303737313434633764356431373430666137396431366437 Sep 10 00:40:20.186961 env[1200]: time="2025-09-10T00:40:20.186897899Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-r5xjm,Uid:39de653a-5ba4-436a-86c2-d31bc3c6bcef,Namespace:calico-system,Attempt:0,} returns sandbox id \"8e21e077144c7d5d1740fa79d16d716e1f23fd868664f459f687b7fecc42d166\"" Sep 10 00:40:20.246000 audit[2494]: NETFILTER_CFG table=filter:97 family=2 entries=21 op=nft_register_rule pid=2494 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:20.246000 audit[2494]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffe8aa993d0 a2=0 a3=7ffe8aa993bc items=0 ppid=2118 pid=2494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:20.246000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:20.250000 audit[2494]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2494 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:20.250000 audit[2494]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe8aa993d0 a2=0 a3=0 items=0 ppid=2118 pid=2494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:20.250000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:21.267252 kubelet[1956]: E0910 00:40:21.267194 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-tn66z" podUID="9d11f211-d02b-4887-86fd-f93a2eb25fc1" Sep 10 00:40:21.472129 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1045169057.mount: Deactivated successfully. Sep 10 00:40:23.267106 kubelet[1956]: E0910 00:40:23.267031 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-tn66z" podUID="9d11f211-d02b-4887-86fd-f93a2eb25fc1" Sep 10 00:40:23.420642 env[1200]: time="2025-09-10T00:40:23.420585241Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:23.424266 env[1200]: time="2025-09-10T00:40:23.424219512Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1d7bb7b0cce2924d35c7c26f6b6600409ea7c9535074c3d2e517ffbb3a0e0b36,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:23.426387 env[1200]: time="2025-09-10T00:40:23.426341485Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:23.428629 env[1200]: time="2025-09-10T00:40:23.428560632Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:f4a3d61ffda9c98a53adeb412c5af404ca3727a3cc2d0b4ef28d197bdd47ecaa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:23.429315 env[1200]: time="2025-09-10T00:40:23.429269256Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\" returns image reference \"sha256:1d7bb7b0cce2924d35c7c26f6b6600409ea7c9535074c3d2e517ffbb3a0e0b36\"" Sep 10 00:40:23.433195 env[1200]: time="2025-09-10T00:40:23.433148698Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\"" Sep 10 00:40:23.462190 env[1200]: time="2025-09-10T00:40:23.462110599Z" level=info msg="CreateContainer within sandbox \"61782b14f7f3ffc2a8b9d8e86a56f9444d3cf5e3e4163eab20fb60f2faf23c64\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Sep 10 00:40:23.478420 env[1200]: time="2025-09-10T00:40:23.478358639Z" level=info msg="CreateContainer within sandbox \"61782b14f7f3ffc2a8b9d8e86a56f9444d3cf5e3e4163eab20fb60f2faf23c64\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"96369f49f4bf5e1498c9a794de20650b0e1f4b064247b039f84bc616f0e978ce\"" Sep 10 00:40:23.479047 env[1200]: time="2025-09-10T00:40:23.479007500Z" level=info msg="StartContainer for \"96369f49f4bf5e1498c9a794de20650b0e1f4b064247b039f84bc616f0e978ce\"" Sep 10 00:40:23.496924 systemd[1]: Started cri-containerd-96369f49f4bf5e1498c9a794de20650b0e1f4b064247b039f84bc616f0e978ce.scope. Sep 10 00:40:23.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.512000 audit: BPF prog-id=129 op=LOAD Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2388 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:23.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936333639663439663462663565313439386339613739346465323036 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2388 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:23.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936333639663439663462663565313439386339613739346465323036 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit: BPF prog-id=130 op=LOAD Sep 10 00:40:23.513000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000300860 items=0 ppid=2388 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:23.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936333639663439663462663565313439386339613739346465323036 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit: BPF prog-id=131 op=LOAD Sep 10 00:40:23.513000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003008a8 items=0 ppid=2388 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:23.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936333639663439663462663565313439386339613739346465323036 Sep 10 00:40:23.513000 audit: BPF prog-id=131 op=UNLOAD Sep 10 00:40:23.513000 audit: BPF prog-id=130 op=UNLOAD Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:23.513000 audit: BPF prog-id=132 op=LOAD Sep 10 00:40:23.513000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000300cb8 items=0 ppid=2388 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:23.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936333639663439663462663565313439386339613739346465323036 Sep 10 00:40:23.559090 env[1200]: time="2025-09-10T00:40:23.558904819Z" level=info msg="StartContainer for \"96369f49f4bf5e1498c9a794de20650b0e1f4b064247b039f84bc616f0e978ce\" returns successfully" Sep 10 00:40:24.327665 kubelet[1956]: E0910 00:40:24.327619 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:24.341416 kubelet[1956]: I0910 00:40:24.341332 1956 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-78c68cd7fd-nn9bd" podStartSLOduration=1.6560424459999998 podStartE2EDuration="5.341311226s" podCreationTimestamp="2025-09-10 00:40:19 +0000 UTC" firstStartedPulling="2025-09-10 00:40:19.747608116 +0000 UTC m=+21.600938520" lastFinishedPulling="2025-09-10 00:40:23.432876866 +0000 UTC m=+25.286207300" observedRunningTime="2025-09-10 00:40:24.340842544 +0000 UTC m=+26.194172948" watchObservedRunningTime="2025-09-10 00:40:24.341311226 +0000 UTC m=+26.194641640" Sep 10 00:40:24.406566 kubelet[1956]: E0910 00:40:24.406503 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.406566 kubelet[1956]: W0910 00:40:24.406529 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.406566 kubelet[1956]: E0910 00:40:24.406561 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.406963 kubelet[1956]: E0910 00:40:24.406912 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.407003 kubelet[1956]: W0910 00:40:24.406962 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.407003 kubelet[1956]: E0910 00:40:24.406992 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.407295 kubelet[1956]: E0910 00:40:24.407275 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.407295 kubelet[1956]: W0910 00:40:24.407285 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.407295 kubelet[1956]: E0910 00:40:24.407293 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.407503 kubelet[1956]: E0910 00:40:24.407478 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.407503 kubelet[1956]: W0910 00:40:24.407488 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.407503 kubelet[1956]: E0910 00:40:24.407497 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.407758 kubelet[1956]: E0910 00:40:24.407714 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.407758 kubelet[1956]: W0910 00:40:24.407723 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.407758 kubelet[1956]: E0910 00:40:24.407733 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.408014 kubelet[1956]: E0910 00:40:24.407981 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.408077 kubelet[1956]: W0910 00:40:24.408011 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.408077 kubelet[1956]: E0910 00:40:24.408054 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.408309 kubelet[1956]: E0910 00:40:24.408292 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.408309 kubelet[1956]: W0910 00:40:24.408305 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.408402 kubelet[1956]: E0910 00:40:24.408314 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.408539 kubelet[1956]: E0910 00:40:24.408522 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.408631 kubelet[1956]: W0910 00:40:24.408612 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.408717 kubelet[1956]: E0910 00:40:24.408700 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.409009 kubelet[1956]: E0910 00:40:24.408982 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.409009 kubelet[1956]: W0910 00:40:24.408993 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.409009 kubelet[1956]: E0910 00:40:24.409002 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.409289 kubelet[1956]: E0910 00:40:24.409238 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.409289 kubelet[1956]: W0910 00:40:24.409247 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.409289 kubelet[1956]: E0910 00:40:24.409256 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.409480 kubelet[1956]: E0910 00:40:24.409461 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.409480 kubelet[1956]: W0910 00:40:24.409474 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.409569 kubelet[1956]: E0910 00:40:24.409485 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.409669 kubelet[1956]: E0910 00:40:24.409655 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.409669 kubelet[1956]: W0910 00:40:24.409666 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.409721 kubelet[1956]: E0910 00:40:24.409676 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.410036 kubelet[1956]: E0910 00:40:24.409859 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.410036 kubelet[1956]: W0910 00:40:24.409878 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.410036 kubelet[1956]: E0910 00:40:24.409902 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.410157 kubelet[1956]: E0910 00:40:24.410148 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.410218 kubelet[1956]: W0910 00:40:24.410198 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.410218 kubelet[1956]: E0910 00:40:24.410213 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.410369 kubelet[1956]: E0910 00:40:24.410354 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.410369 kubelet[1956]: W0910 00:40:24.410364 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.410424 kubelet[1956]: E0910 00:40:24.410375 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.414767 kubelet[1956]: E0910 00:40:24.414747 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.414767 kubelet[1956]: W0910 00:40:24.414761 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.414852 kubelet[1956]: E0910 00:40:24.414772 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.415057 kubelet[1956]: E0910 00:40:24.415035 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.415057 kubelet[1956]: W0910 00:40:24.415047 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.415057 kubelet[1956]: E0910 00:40:24.415055 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.415261 kubelet[1956]: E0910 00:40:24.415248 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.415261 kubelet[1956]: W0910 00:40:24.415259 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.415315 kubelet[1956]: E0910 00:40:24.415266 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.415483 kubelet[1956]: E0910 00:40:24.415468 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.415483 kubelet[1956]: W0910 00:40:24.415481 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.415536 kubelet[1956]: E0910 00:40:24.415491 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.415704 kubelet[1956]: E0910 00:40:24.415690 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.415734 kubelet[1956]: W0910 00:40:24.415703 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.415734 kubelet[1956]: E0910 00:40:24.415730 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.415921 kubelet[1956]: E0910 00:40:24.415909 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.415921 kubelet[1956]: W0910 00:40:24.415919 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.415988 kubelet[1956]: E0910 00:40:24.415949 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.416202 kubelet[1956]: E0910 00:40:24.416180 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.416202 kubelet[1956]: W0910 00:40:24.416195 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.416289 kubelet[1956]: E0910 00:40:24.416209 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.416866 kubelet[1956]: E0910 00:40:24.416840 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.416866 kubelet[1956]: W0910 00:40:24.416860 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.416963 kubelet[1956]: E0910 00:40:24.416872 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.417076 kubelet[1956]: E0910 00:40:24.417053 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.417076 kubelet[1956]: W0910 00:40:24.417068 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.417076 kubelet[1956]: E0910 00:40:24.417076 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.417261 kubelet[1956]: E0910 00:40:24.417244 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.417261 kubelet[1956]: W0910 00:40:24.417255 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.417261 kubelet[1956]: E0910 00:40:24.417262 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.417460 kubelet[1956]: E0910 00:40:24.417445 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.417460 kubelet[1956]: W0910 00:40:24.417455 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.417511 kubelet[1956]: E0910 00:40:24.417464 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.417817 kubelet[1956]: E0910 00:40:24.417799 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.417817 kubelet[1956]: W0910 00:40:24.417811 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.417817 kubelet[1956]: E0910 00:40:24.417819 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.418035 kubelet[1956]: E0910 00:40:24.418020 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.418070 kubelet[1956]: W0910 00:40:24.418036 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.418070 kubelet[1956]: E0910 00:40:24.418045 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.418226 kubelet[1956]: E0910 00:40:24.418213 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.418260 kubelet[1956]: W0910 00:40:24.418223 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.418260 kubelet[1956]: E0910 00:40:24.418236 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.418396 kubelet[1956]: E0910 00:40:24.418382 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.418396 kubelet[1956]: W0910 00:40:24.418392 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.418457 kubelet[1956]: E0910 00:40:24.418402 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.418668 kubelet[1956]: E0910 00:40:24.418646 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.418668 kubelet[1956]: W0910 00:40:24.418658 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.418724 kubelet[1956]: E0910 00:40:24.418671 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.419007 kubelet[1956]: E0910 00:40:24.418987 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.419041 kubelet[1956]: W0910 00:40:24.419007 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.419041 kubelet[1956]: E0910 00:40:24.419027 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.419227 kubelet[1956]: E0910 00:40:24.419208 1956 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 00:40:24.419227 kubelet[1956]: W0910 00:40:24.419225 1956 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 00:40:24.419302 kubelet[1956]: E0910 00:40:24.419234 1956 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 00:40:24.998916 env[1200]: time="2025-09-10T00:40:24.998829561Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:25.001437 env[1200]: time="2025-09-10T00:40:25.001385090Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4f2b088ed6fdfc6a97ac0650a4ba8171107d6656ce265c592e4c8423fd10e5c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:25.003268 env[1200]: time="2025-09-10T00:40:25.003235581Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:25.004840 env[1200]: time="2025-09-10T00:40:25.004772803Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:81bdfcd9dbd36624dc35354e8c181c75631ba40e6c7df5820f5f56cea36f0ef9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:25.005334 env[1200]: time="2025-09-10T00:40:25.005294775Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\" returns image reference \"sha256:4f2b088ed6fdfc6a97ac0650a4ba8171107d6656ce265c592e4c8423fd10e5c4\"" Sep 10 00:40:25.011637 env[1200]: time="2025-09-10T00:40:25.011581082Z" level=info msg="CreateContainer within sandbox \"8e21e077144c7d5d1740fa79d16d716e1f23fd868664f459f687b7fecc42d166\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Sep 10 00:40:25.028401 env[1200]: time="2025-09-10T00:40:25.028339670Z" level=info msg="CreateContainer within sandbox \"8e21e077144c7d5d1740fa79d16d716e1f23fd868664f459f687b7fecc42d166\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"ee7b544e2b15ca3ae750be8dbac4f5a185d85564552ed3754abaf8024d97d005\"" Sep 10 00:40:25.029043 env[1200]: time="2025-09-10T00:40:25.029011624Z" level=info msg="StartContainer for \"ee7b544e2b15ca3ae750be8dbac4f5a185d85564552ed3754abaf8024d97d005\"" Sep 10 00:40:25.050644 systemd[1]: run-containerd-runc-k8s.io-ee7b544e2b15ca3ae750be8dbac4f5a185d85564552ed3754abaf8024d97d005-runc.4bscJn.mount: Deactivated successfully. Sep 10 00:40:25.054894 systemd[1]: Started cri-containerd-ee7b544e2b15ca3ae750be8dbac4f5a185d85564552ed3754abaf8024d97d005.scope. Sep 10 00:40:25.074000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.074000 audit[2580]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f25a254b2f8 items=0 ppid=2460 pid=2580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:25.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565376235343465326231356361336165373530626538646261633466 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit: BPF prog-id=133 op=LOAD Sep 10 00:40:25.075000 audit[2580]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000024238 items=0 ppid=2460 pid=2580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:25.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565376235343465326231356361336165373530626538646261633466 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit: BPF prog-id=134 op=LOAD Sep 10 00:40:25.075000 audit[2580]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000024288 items=0 ppid=2460 pid=2580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:25.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565376235343465326231356361336165373530626538646261633466 Sep 10 00:40:25.075000 audit: BPF prog-id=134 op=UNLOAD Sep 10 00:40:25.075000 audit: BPF prog-id=133 op=UNLOAD Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:25.075000 audit: BPF prog-id=135 op=LOAD Sep 10 00:40:25.075000 audit[2580]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000024318 items=0 ppid=2460 pid=2580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:25.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565376235343465326231356361336165373530626538646261633466 Sep 10 00:40:25.094638 env[1200]: time="2025-09-10T00:40:25.094566083Z" level=info msg="StartContainer for \"ee7b544e2b15ca3ae750be8dbac4f5a185d85564552ed3754abaf8024d97d005\" returns successfully" Sep 10 00:40:25.103159 systemd[1]: cri-containerd-ee7b544e2b15ca3ae750be8dbac4f5a185d85564552ed3754abaf8024d97d005.scope: Deactivated successfully. Sep 10 00:40:25.107000 audit: BPF prog-id=135 op=UNLOAD Sep 10 00:40:25.266490 kubelet[1956]: E0910 00:40:25.266331 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-tn66z" podUID="9d11f211-d02b-4887-86fd-f93a2eb25fc1" Sep 10 00:40:25.443076 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ee7b544e2b15ca3ae750be8dbac4f5a185d85564552ed3754abaf8024d97d005-rootfs.mount: Deactivated successfully. Sep 10 00:40:25.673089 kubelet[1956]: I0910 00:40:25.672861 1956 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 10 00:40:25.673482 kubelet[1956]: E0910 00:40:25.673409 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:25.881128 env[1200]: time="2025-09-10T00:40:25.881046306Z" level=info msg="shim disconnected" id=ee7b544e2b15ca3ae750be8dbac4f5a185d85564552ed3754abaf8024d97d005 Sep 10 00:40:25.881128 env[1200]: time="2025-09-10T00:40:25.881121227Z" level=warning msg="cleaning up after shim disconnected" id=ee7b544e2b15ca3ae750be8dbac4f5a185d85564552ed3754abaf8024d97d005 namespace=k8s.io Sep 10 00:40:25.881128 env[1200]: time="2025-09-10T00:40:25.881137418Z" level=info msg="cleaning up dead shim" Sep 10 00:40:25.889665 env[1200]: time="2025-09-10T00:40:25.889591572Z" level=warning msg="cleanup warnings time=\"2025-09-10T00:40:25Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2625 runtime=io.containerd.runc.v2\n" Sep 10 00:40:26.335967 env[1200]: time="2025-09-10T00:40:26.335904315Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\"" Sep 10 00:40:26.381400 kubelet[1956]: I0910 00:40:26.381346 1956 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 10 00:40:26.381713 kubelet[1956]: E0910 00:40:26.381677 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:26.401000 audit[2639]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2639 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:26.403250 kernel: kauditd_printk_skb: 154 callbacks suppressed Sep 10 00:40:26.403311 kernel: audit: type=1325 audit(1757464826.401:999): table=filter:99 family=2 entries=21 op=nft_register_rule pid=2639 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:26.401000 audit[2639]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd5772d850 a2=0 a3=7ffd5772d83c items=0 ppid=2118 pid=2639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:26.412838 kernel: audit: type=1300 audit(1757464826.401:999): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd5772d850 a2=0 a3=7ffd5772d83c items=0 ppid=2118 pid=2639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:26.401000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:26.415962 kernel: audit: type=1327 audit(1757464826.401:999): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:26.416000 audit[2639]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=2639 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:26.416000 audit[2639]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffd5772d850 a2=0 a3=7ffd5772d83c items=0 ppid=2118 pid=2639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:26.424917 kernel: audit: type=1325 audit(1757464826.416:1000): table=nat:100 family=2 entries=19 op=nft_register_chain pid=2639 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:26.424992 kernel: audit: type=1300 audit(1757464826.416:1000): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffd5772d850 a2=0 a3=7ffd5772d83c items=0 ppid=2118 pid=2639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:26.425013 kernel: audit: type=1327 audit(1757464826.416:1000): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:26.416000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:27.266955 kubelet[1956]: E0910 00:40:27.266879 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-tn66z" podUID="9d11f211-d02b-4887-86fd-f93a2eb25fc1" Sep 10 00:40:27.334769 kubelet[1956]: E0910 00:40:27.334719 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:29.269878 kubelet[1956]: E0910 00:40:29.269810 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-tn66z" podUID="9d11f211-d02b-4887-86fd-f93a2eb25fc1" Sep 10 00:40:30.930122 env[1200]: time="2025-09-10T00:40:30.930061870Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:30.932539 env[1200]: time="2025-09-10T00:40:30.932462513Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:034822460c2f667e1f4a7679c843cc35ce1bf2c25dec86f04e07fb403df7e458,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:30.934018 env[1200]: time="2025-09-10T00:40:30.933979274Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:30.935560 env[1200]: time="2025-09-10T00:40:30.935520501Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:73d1e391050490d54e5bee8ff2b1a50a8be1746c98dc530361b00e8c0ab63f87,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:30.936152 env[1200]: time="2025-09-10T00:40:30.936127202Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\" returns image reference \"sha256:034822460c2f667e1f4a7679c843cc35ce1bf2c25dec86f04e07fb403df7e458\"" Sep 10 00:40:30.942270 env[1200]: time="2025-09-10T00:40:30.942241394Z" level=info msg="CreateContainer within sandbox \"8e21e077144c7d5d1740fa79d16d716e1f23fd868664f459f687b7fecc42d166\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Sep 10 00:40:30.957758 env[1200]: time="2025-09-10T00:40:30.957704229Z" level=info msg="CreateContainer within sandbox \"8e21e077144c7d5d1740fa79d16d716e1f23fd868664f459f687b7fecc42d166\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"6f4f3d31329be2f3b492ec17c74c30f29d7e298e9b7fd375465f8b916bcd4b2a\"" Sep 10 00:40:30.958343 env[1200]: time="2025-09-10T00:40:30.958275182Z" level=info msg="StartContainer for \"6f4f3d31329be2f3b492ec17c74c30f29d7e298e9b7fd375465f8b916bcd4b2a\"" Sep 10 00:40:30.976692 systemd[1]: Started cri-containerd-6f4f3d31329be2f3b492ec17c74c30f29d7e298e9b7fd375465f8b916bcd4b2a.scope. Sep 10 00:40:30.992000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:30.992000 audit[2649]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fe8b004cb18 items=0 ppid=2460 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:31.001636 kernel: audit: type=1400 audit(1757464830.992:1001): avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:31.001759 kernel: audit: type=1300 audit(1757464830.992:1001): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fe8b004cb18 items=0 ppid=2460 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:31.001793 kernel: audit: type=1327 audit(1757464830.992:1001): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666346633643331333239626532663362343932656331376337346333 Sep 10 00:40:30.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666346633643331333239626532663362343932656331376337346333 Sep 10 00:40:31.005968 kernel: audit: type=1400 audit(1757464830.992:1002): avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:30.992000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:30.992000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:30.992000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:30.992000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:30.992000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:30.992000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:30.992000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:30.992000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:30.992000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:30.992000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:30.992000 audit: BPF prog-id=136 op=LOAD Sep 10 00:40:30.992000 audit[2649]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000293188 items=0 ppid=2460 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:30.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666346633643331333239626532663362343932656331376337346333 Sep 10 00:40:31.000000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:31.000000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:31.000000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:31.000000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:31.000000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:31.000000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:31.000000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:31.000000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:31.000000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:31.000000 audit: BPF prog-id=137 op=LOAD Sep 10 00:40:31.000000 audit[2649]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0002931d8 items=0 ppid=2460 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:31.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666346633643331333239626532663362343932656331376337346333 Sep 10 00:40:31.004000 audit: BPF prog-id=137 op=UNLOAD Sep 10 00:40:31.004000 audit: BPF prog-id=136 op=UNLOAD Sep 10 00:40:31.004000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:31.004000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:31.004000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:31.004000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:31.004000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:31.004000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:31.004000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:31.004000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:31.004000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:31.004000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:31.004000 audit: BPF prog-id=138 op=LOAD Sep 10 00:40:31.004000 audit[2649]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000293268 items=0 ppid=2460 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:31.004000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666346633643331333239626532663362343932656331376337346333 Sep 10 00:40:31.024716 env[1200]: time="2025-09-10T00:40:31.024652213Z" level=info msg="StartContainer for \"6f4f3d31329be2f3b492ec17c74c30f29d7e298e9b7fd375465f8b916bcd4b2a\" returns successfully" Sep 10 00:40:31.266592 kubelet[1956]: E0910 00:40:31.266491 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-tn66z" podUID="9d11f211-d02b-4887-86fd-f93a2eb25fc1" Sep 10 00:40:33.266981 kubelet[1956]: E0910 00:40:33.266877 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-tn66z" podUID="9d11f211-d02b-4887-86fd-f93a2eb25fc1" Sep 10 00:40:33.564355 systemd[1]: cri-containerd-6f4f3d31329be2f3b492ec17c74c30f29d7e298e9b7fd375465f8b916bcd4b2a.scope: Deactivated successfully. Sep 10 00:40:33.567000 audit: BPF prog-id=138 op=UNLOAD Sep 10 00:40:33.568985 kernel: kauditd_printk_skb: 39 callbacks suppressed Sep 10 00:40:33.569091 kernel: audit: type=1334 audit(1757464833.567:1007): prog-id=138 op=UNLOAD Sep 10 00:40:33.583041 kubelet[1956]: I0910 00:40:33.582999 1956 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Sep 10 00:40:33.588339 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6f4f3d31329be2f3b492ec17c74c30f29d7e298e9b7fd375465f8b916bcd4b2a-rootfs.mount: Deactivated successfully. Sep 10 00:40:33.651083 env[1200]: time="2025-09-10T00:40:33.651012060Z" level=info msg="shim disconnected" id=6f4f3d31329be2f3b492ec17c74c30f29d7e298e9b7fd375465f8b916bcd4b2a Sep 10 00:40:33.651811 env[1200]: time="2025-09-10T00:40:33.651757281Z" level=warning msg="cleaning up after shim disconnected" id=6f4f3d31329be2f3b492ec17c74c30f29d7e298e9b7fd375465f8b916bcd4b2a namespace=k8s.io Sep 10 00:40:33.651811 env[1200]: time="2025-09-10T00:40:33.651782508Z" level=info msg="cleaning up dead shim" Sep 10 00:40:33.670810 env[1200]: time="2025-09-10T00:40:33.670740147Z" level=warning msg="cleanup warnings time=\"2025-09-10T00:40:33Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2689 runtime=io.containerd.runc.v2\n" Sep 10 00:40:33.677811 systemd[1]: Created slice kubepods-besteffort-pod15af17cb_bf28_4fae_bb29_ea2d7f332ad6.slice. Sep 10 00:40:33.685042 kubelet[1956]: I0910 00:40:33.684996 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/15af17cb-bf28-4fae-bb29-ea2d7f332ad6-calico-apiserver-certs\") pod \"calico-apiserver-694cb88886-nchgf\" (UID: \"15af17cb-bf28-4fae-bb29-ea2d7f332ad6\") " pod="calico-apiserver/calico-apiserver-694cb88886-nchgf" Sep 10 00:40:33.685042 kubelet[1956]: I0910 00:40:33.685039 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6fsgw\" (UniqueName: \"kubernetes.io/projected/15af17cb-bf28-4fae-bb29-ea2d7f332ad6-kube-api-access-6fsgw\") pod \"calico-apiserver-694cb88886-nchgf\" (UID: \"15af17cb-bf28-4fae-bb29-ea2d7f332ad6\") " pod="calico-apiserver/calico-apiserver-694cb88886-nchgf" Sep 10 00:40:33.686360 systemd[1]: Created slice kubepods-burstable-pod22301409_d6d8_4292_99ff_10eb88dc10dd.slice. Sep 10 00:40:33.696201 systemd[1]: Created slice kubepods-besteffort-pode0eb7a77_49bf_46c6_a40a_21241cec7dbe.slice. Sep 10 00:40:33.703065 systemd[1]: Created slice kubepods-besteffort-podf4d5d37f_4e25_4fb2_8c58_65edfe9c58e9.slice. Sep 10 00:40:33.709822 systemd[1]: Created slice kubepods-burstable-pod72632e3f_7809_4b45_ab8b_6f8e8e8d5c3a.slice. Sep 10 00:40:33.717973 systemd[1]: Created slice kubepods-besteffort-pod70a96d34_f4e7_4ed6_9a70_692bda4903ef.slice. Sep 10 00:40:33.721295 systemd[1]: Created slice kubepods-besteffort-poddbcb3f8c_1da8_4226_977e_9eb4d59cd42f.slice. Sep 10 00:40:33.727797 systemd[1]: Created slice kubepods-besteffort-pode48b1739_8cbf_43e6_b074_f445c5aaa2ae.slice. Sep 10 00:40:33.786235 kubelet[1956]: I0910 00:40:33.786147 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/72632e3f-7809-4b45-ab8b-6f8e8e8d5c3a-config-volume\") pod \"coredns-674b8bbfcf-wcqd5\" (UID: \"72632e3f-7809-4b45-ab8b-6f8e8e8d5c3a\") " pod="kube-system/coredns-674b8bbfcf-wcqd5" Sep 10 00:40:33.786235 kubelet[1956]: I0910 00:40:33.786213 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9xjzg\" (UniqueName: \"kubernetes.io/projected/f4d5d37f-4e25-4fb2-8c58-65edfe9c58e9-kube-api-access-9xjzg\") pod \"calico-apiserver-585fb9d697-fs8cm\" (UID: \"f4d5d37f-4e25-4fb2-8c58-65edfe9c58e9\") " pod="calico-apiserver/calico-apiserver-585fb9d697-fs8cm" Sep 10 00:40:33.786571 kubelet[1956]: I0910 00:40:33.786343 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tp84n\" (UniqueName: \"kubernetes.io/projected/dbcb3f8c-1da8-4226-977e-9eb4d59cd42f-kube-api-access-tp84n\") pod \"goldmane-54d579b49d-pbxhz\" (UID: \"dbcb3f8c-1da8-4226-977e-9eb4d59cd42f\") " pod="calico-system/goldmane-54d579b49d-pbxhz" Sep 10 00:40:33.786571 kubelet[1956]: I0910 00:40:33.786401 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/e48b1739-8cbf-43e6-b074-f445c5aaa2ae-calico-apiserver-certs\") pod \"calico-apiserver-694cb88886-v9hh9\" (UID: \"e48b1739-8cbf-43e6-b074-f445c5aaa2ae\") " pod="calico-apiserver/calico-apiserver-694cb88886-v9hh9" Sep 10 00:40:33.786571 kubelet[1956]: I0910 00:40:33.786445 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/f4d5d37f-4e25-4fb2-8c58-65edfe9c58e9-calico-apiserver-certs\") pod \"calico-apiserver-585fb9d697-fs8cm\" (UID: \"f4d5d37f-4e25-4fb2-8c58-65edfe9c58e9\") " pod="calico-apiserver/calico-apiserver-585fb9d697-fs8cm" Sep 10 00:40:33.786571 kubelet[1956]: I0910 00:40:33.786474 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8p6qs\" (UniqueName: \"kubernetes.io/projected/e0eb7a77-49bf-46c6-a40a-21241cec7dbe-kube-api-access-8p6qs\") pod \"whisker-76b494f845-dpfcm\" (UID: \"e0eb7a77-49bf-46c6-a40a-21241cec7dbe\") " pod="calico-system/whisker-76b494f845-dpfcm" Sep 10 00:40:33.786571 kubelet[1956]: I0910 00:40:33.786502 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/70a96d34-f4e7-4ed6-9a70-692bda4903ef-tigera-ca-bundle\") pod \"calico-kube-controllers-6dbd5f8568-lbcfq\" (UID: \"70a96d34-f4e7-4ed6-9a70-692bda4903ef\") " pod="calico-system/calico-kube-controllers-6dbd5f8568-lbcfq" Sep 10 00:40:33.786769 kubelet[1956]: I0910 00:40:33.786578 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2vxgl\" (UniqueName: \"kubernetes.io/projected/72632e3f-7809-4b45-ab8b-6f8e8e8d5c3a-kube-api-access-2vxgl\") pod \"coredns-674b8bbfcf-wcqd5\" (UID: \"72632e3f-7809-4b45-ab8b-6f8e8e8d5c3a\") " pod="kube-system/coredns-674b8bbfcf-wcqd5" Sep 10 00:40:33.786769 kubelet[1956]: I0910 00:40:33.786607 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/22301409-d6d8-4292-99ff-10eb88dc10dd-config-volume\") pod \"coredns-674b8bbfcf-wj5kf\" (UID: \"22301409-d6d8-4292-99ff-10eb88dc10dd\") " pod="kube-system/coredns-674b8bbfcf-wj5kf" Sep 10 00:40:33.786769 kubelet[1956]: I0910 00:40:33.786631 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/dbcb3f8c-1da8-4226-977e-9eb4d59cd42f-config\") pod \"goldmane-54d579b49d-pbxhz\" (UID: \"dbcb3f8c-1da8-4226-977e-9eb4d59cd42f\") " pod="calico-system/goldmane-54d579b49d-pbxhz" Sep 10 00:40:33.786769 kubelet[1956]: I0910 00:40:33.786656 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8vpzm\" (UniqueName: \"kubernetes.io/projected/70a96d34-f4e7-4ed6-9a70-692bda4903ef-kube-api-access-8vpzm\") pod \"calico-kube-controllers-6dbd5f8568-lbcfq\" (UID: \"70a96d34-f4e7-4ed6-9a70-692bda4903ef\") " pod="calico-system/calico-kube-controllers-6dbd5f8568-lbcfq" Sep 10 00:40:33.786769 kubelet[1956]: I0910 00:40:33.786675 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/dbcb3f8c-1da8-4226-977e-9eb4d59cd42f-goldmane-ca-bundle\") pod \"goldmane-54d579b49d-pbxhz\" (UID: \"dbcb3f8c-1da8-4226-977e-9eb4d59cd42f\") " pod="calico-system/goldmane-54d579b49d-pbxhz" Sep 10 00:40:33.787017 kubelet[1956]: I0910 00:40:33.786690 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/dbcb3f8c-1da8-4226-977e-9eb4d59cd42f-goldmane-key-pair\") pod \"goldmane-54d579b49d-pbxhz\" (UID: \"dbcb3f8c-1da8-4226-977e-9eb4d59cd42f\") " pod="calico-system/goldmane-54d579b49d-pbxhz" Sep 10 00:40:33.787017 kubelet[1956]: I0910 00:40:33.786714 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/e0eb7a77-49bf-46c6-a40a-21241cec7dbe-whisker-backend-key-pair\") pod \"whisker-76b494f845-dpfcm\" (UID: \"e0eb7a77-49bf-46c6-a40a-21241cec7dbe\") " pod="calico-system/whisker-76b494f845-dpfcm" Sep 10 00:40:33.787017 kubelet[1956]: I0910 00:40:33.786730 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e0eb7a77-49bf-46c6-a40a-21241cec7dbe-whisker-ca-bundle\") pod \"whisker-76b494f845-dpfcm\" (UID: \"e0eb7a77-49bf-46c6-a40a-21241cec7dbe\") " pod="calico-system/whisker-76b494f845-dpfcm" Sep 10 00:40:33.787017 kubelet[1956]: I0910 00:40:33.786753 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-flxsv\" (UniqueName: \"kubernetes.io/projected/22301409-d6d8-4292-99ff-10eb88dc10dd-kube-api-access-flxsv\") pod \"coredns-674b8bbfcf-wj5kf\" (UID: \"22301409-d6d8-4292-99ff-10eb88dc10dd\") " pod="kube-system/coredns-674b8bbfcf-wj5kf" Sep 10 00:40:33.787017 kubelet[1956]: I0910 00:40:33.786773 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-x2nr9\" (UniqueName: \"kubernetes.io/projected/e48b1739-8cbf-43e6-b074-f445c5aaa2ae-kube-api-access-x2nr9\") pod \"calico-apiserver-694cb88886-v9hh9\" (UID: \"e48b1739-8cbf-43e6-b074-f445c5aaa2ae\") " pod="calico-apiserver/calico-apiserver-694cb88886-v9hh9" Sep 10 00:40:33.982530 env[1200]: time="2025-09-10T00:40:33.982454692Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-694cb88886-nchgf,Uid:15af17cb-bf28-4fae-bb29-ea2d7f332ad6,Namespace:calico-apiserver,Attempt:0,}" Sep 10 00:40:33.989990 kubelet[1956]: E0910 00:40:33.989926 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:33.990640 env[1200]: time="2025-09-10T00:40:33.990591060Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-wj5kf,Uid:22301409-d6d8-4292-99ff-10eb88dc10dd,Namespace:kube-system,Attempt:0,}" Sep 10 00:40:34.001522 env[1200]: time="2025-09-10T00:40:34.001460904Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-76b494f845-dpfcm,Uid:e0eb7a77-49bf-46c6-a40a-21241cec7dbe,Namespace:calico-system,Attempt:0,}" Sep 10 00:40:34.007753 env[1200]: time="2025-09-10T00:40:34.007709152Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-585fb9d697-fs8cm,Uid:f4d5d37f-4e25-4fb2-8c58-65edfe9c58e9,Namespace:calico-apiserver,Attempt:0,}" Sep 10 00:40:34.014145 kubelet[1956]: E0910 00:40:34.014102 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:34.014735 env[1200]: time="2025-09-10T00:40:34.014620387Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-wcqd5,Uid:72632e3f-7809-4b45-ab8b-6f8e8e8d5c3a,Namespace:kube-system,Attempt:0,}" Sep 10 00:40:34.027084 env[1200]: time="2025-09-10T00:40:34.027022767Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6dbd5f8568-lbcfq,Uid:70a96d34-f4e7-4ed6-9a70-692bda4903ef,Namespace:calico-system,Attempt:0,}" Sep 10 00:40:34.030993 env[1200]: time="2025-09-10T00:40:34.030953642Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-694cb88886-v9hh9,Uid:e48b1739-8cbf-43e6-b074-f445c5aaa2ae,Namespace:calico-apiserver,Attempt:0,}" Sep 10 00:40:34.033817 env[1200]: time="2025-09-10T00:40:34.033757670Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-pbxhz,Uid:dbcb3f8c-1da8-4226-977e-9eb4d59cd42f,Namespace:calico-system,Attempt:0,}" Sep 10 00:40:34.104249 env[1200]: time="2025-09-10T00:40:34.104131641Z" level=error msg="Failed to destroy network for sandbox \"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.104660 env[1200]: time="2025-09-10T00:40:34.104623536Z" level=error msg="encountered an error cleaning up failed sandbox \"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.104732 env[1200]: time="2025-09-10T00:40:34.104688808Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-694cb88886-nchgf,Uid:15af17cb-bf28-4fae-bb29-ea2d7f332ad6,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.105589 kubelet[1956]: E0910 00:40:34.105040 1956 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.105589 kubelet[1956]: E0910 00:40:34.105138 1956 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-694cb88886-nchgf" Sep 10 00:40:34.105589 kubelet[1956]: E0910 00:40:34.105167 1956 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-694cb88886-nchgf" Sep 10 00:40:34.105735 kubelet[1956]: E0910 00:40:34.105247 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-694cb88886-nchgf_calico-apiserver(15af17cb-bf28-4fae-bb29-ea2d7f332ad6)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-694cb88886-nchgf_calico-apiserver(15af17cb-bf28-4fae-bb29-ea2d7f332ad6)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-694cb88886-nchgf" podUID="15af17cb-bf28-4fae-bb29-ea2d7f332ad6" Sep 10 00:40:34.162184 env[1200]: time="2025-09-10T00:40:34.162107380Z" level=error msg="Failed to destroy network for sandbox \"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.162788 env[1200]: time="2025-09-10T00:40:34.162751400Z" level=error msg="encountered an error cleaning up failed sandbox \"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.163020 env[1200]: time="2025-09-10T00:40:34.162989728Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-wj5kf,Uid:22301409-d6d8-4292-99ff-10eb88dc10dd,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.163814 kubelet[1956]: E0910 00:40:34.163337 1956 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.163814 kubelet[1956]: E0910 00:40:34.163403 1956 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-wj5kf" Sep 10 00:40:34.163814 kubelet[1956]: E0910 00:40:34.163431 1956 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-wj5kf" Sep 10 00:40:34.163960 kubelet[1956]: E0910 00:40:34.163513 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-wj5kf_kube-system(22301409-d6d8-4292-99ff-10eb88dc10dd)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-wj5kf_kube-system(22301409-d6d8-4292-99ff-10eb88dc10dd)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-wj5kf" podUID="22301409-d6d8-4292-99ff-10eb88dc10dd" Sep 10 00:40:34.169757 env[1200]: time="2025-09-10T00:40:34.169688312Z" level=error msg="Failed to destroy network for sandbox \"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.170132 env[1200]: time="2025-09-10T00:40:34.170089836Z" level=error msg="encountered an error cleaning up failed sandbox \"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.170410 env[1200]: time="2025-09-10T00:40:34.170376955Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-585fb9d697-fs8cm,Uid:f4d5d37f-4e25-4fb2-8c58-65edfe9c58e9,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.170966 kubelet[1956]: E0910 00:40:34.170741 1956 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.170966 kubelet[1956]: E0910 00:40:34.170813 1956 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-585fb9d697-fs8cm" Sep 10 00:40:34.170966 kubelet[1956]: E0910 00:40:34.170842 1956 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-585fb9d697-fs8cm" Sep 10 00:40:34.171196 kubelet[1956]: E0910 00:40:34.170903 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-585fb9d697-fs8cm_calico-apiserver(f4d5d37f-4e25-4fb2-8c58-65edfe9c58e9)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-585fb9d697-fs8cm_calico-apiserver(f4d5d37f-4e25-4fb2-8c58-65edfe9c58e9)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-585fb9d697-fs8cm" podUID="f4d5d37f-4e25-4fb2-8c58-65edfe9c58e9" Sep 10 00:40:34.182239 env[1200]: time="2025-09-10T00:40:34.182163169Z" level=error msg="Failed to destroy network for sandbox \"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.182571 env[1200]: time="2025-09-10T00:40:34.182528405Z" level=error msg="encountered an error cleaning up failed sandbox \"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.182639 env[1200]: time="2025-09-10T00:40:34.182593156Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-76b494f845-dpfcm,Uid:e0eb7a77-49bf-46c6-a40a-21241cec7dbe,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.182884 kubelet[1956]: E0910 00:40:34.182834 1956 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.182977 kubelet[1956]: E0910 00:40:34.182912 1956 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-76b494f845-dpfcm" Sep 10 00:40:34.182977 kubelet[1956]: E0910 00:40:34.182966 1956 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-76b494f845-dpfcm" Sep 10 00:40:34.183045 kubelet[1956]: E0910 00:40:34.183025 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-76b494f845-dpfcm_calico-system(e0eb7a77-49bf-46c6-a40a-21241cec7dbe)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-76b494f845-dpfcm_calico-system(e0eb7a77-49bf-46c6-a40a-21241cec7dbe)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-76b494f845-dpfcm" podUID="e0eb7a77-49bf-46c6-a40a-21241cec7dbe" Sep 10 00:40:34.186884 env[1200]: time="2025-09-10T00:40:34.186830497Z" level=error msg="Failed to destroy network for sandbox \"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.187319 env[1200]: time="2025-09-10T00:40:34.187278258Z" level=error msg="encountered an error cleaning up failed sandbox \"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.187380 env[1200]: time="2025-09-10T00:40:34.187342659Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-wcqd5,Uid:72632e3f-7809-4b45-ab8b-6f8e8e8d5c3a,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.187622 kubelet[1956]: E0910 00:40:34.187583 1956 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.187696 kubelet[1956]: E0910 00:40:34.187645 1956 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-wcqd5" Sep 10 00:40:34.187696 kubelet[1956]: E0910 00:40:34.187669 1956 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-wcqd5" Sep 10 00:40:34.187752 kubelet[1956]: E0910 00:40:34.187721 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-wcqd5_kube-system(72632e3f-7809-4b45-ab8b-6f8e8e8d5c3a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-wcqd5_kube-system(72632e3f-7809-4b45-ab8b-6f8e8e8d5c3a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-wcqd5" podUID="72632e3f-7809-4b45-ab8b-6f8e8e8d5c3a" Sep 10 00:40:34.194994 env[1200]: time="2025-09-10T00:40:34.194893995Z" level=error msg="Failed to destroy network for sandbox \"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.195512 env[1200]: time="2025-09-10T00:40:34.195469156Z" level=error msg="encountered an error cleaning up failed sandbox \"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.195564 env[1200]: time="2025-09-10T00:40:34.195538757Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6dbd5f8568-lbcfq,Uid:70a96d34-f4e7-4ed6-9a70-692bda4903ef,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.195861 kubelet[1956]: E0910 00:40:34.195804 1956 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.195918 kubelet[1956]: E0910 00:40:34.195880 1956 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6dbd5f8568-lbcfq" Sep 10 00:40:34.195918 kubelet[1956]: E0910 00:40:34.195902 1956 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6dbd5f8568-lbcfq" Sep 10 00:40:34.196024 kubelet[1956]: E0910 00:40:34.195974 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-6dbd5f8568-lbcfq_calico-system(70a96d34-f4e7-4ed6-9a70-692bda4903ef)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-6dbd5f8568-lbcfq_calico-system(70a96d34-f4e7-4ed6-9a70-692bda4903ef)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6dbd5f8568-lbcfq" podUID="70a96d34-f4e7-4ed6-9a70-692bda4903ef" Sep 10 00:40:34.206958 env[1200]: time="2025-09-10T00:40:34.206869544Z" level=error msg="Failed to destroy network for sandbox \"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.207534 env[1200]: time="2025-09-10T00:40:34.207506951Z" level=error msg="encountered an error cleaning up failed sandbox \"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.207670 env[1200]: time="2025-09-10T00:40:34.207639300Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-pbxhz,Uid:dbcb3f8c-1da8-4226-977e-9eb4d59cd42f,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.208158 kubelet[1956]: E0910 00:40:34.208112 1956 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.208259 kubelet[1956]: E0910 00:40:34.208186 1956 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-pbxhz" Sep 10 00:40:34.208259 kubelet[1956]: E0910 00:40:34.208208 1956 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-pbxhz" Sep 10 00:40:34.208355 kubelet[1956]: E0910 00:40:34.208266 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-54d579b49d-pbxhz_calico-system(dbcb3f8c-1da8-4226-977e-9eb4d59cd42f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-54d579b49d-pbxhz_calico-system(dbcb3f8c-1da8-4226-977e-9eb4d59cd42f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-pbxhz" podUID="dbcb3f8c-1da8-4226-977e-9eb4d59cd42f" Sep 10 00:40:34.211063 env[1200]: time="2025-09-10T00:40:34.211025301Z" level=error msg="Failed to destroy network for sandbox \"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.211312 env[1200]: time="2025-09-10T00:40:34.211272486Z" level=error msg="encountered an error cleaning up failed sandbox \"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.211350 env[1200]: time="2025-09-10T00:40:34.211322079Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-694cb88886-v9hh9,Uid:e48b1739-8cbf-43e6-b074-f445c5aaa2ae,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.211621 kubelet[1956]: E0910 00:40:34.211568 1956 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.211674 kubelet[1956]: E0910 00:40:34.211643 1956 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-694cb88886-v9hh9" Sep 10 00:40:34.211674 kubelet[1956]: E0910 00:40:34.211667 1956 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-694cb88886-v9hh9" Sep 10 00:40:34.211775 kubelet[1956]: E0910 00:40:34.211728 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-694cb88886-v9hh9_calico-apiserver(e48b1739-8cbf-43e6-b074-f445c5aaa2ae)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-694cb88886-v9hh9_calico-apiserver(e48b1739-8cbf-43e6-b074-f445c5aaa2ae)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-694cb88886-v9hh9" podUID="e48b1739-8cbf-43e6-b074-f445c5aaa2ae" Sep 10 00:40:34.354541 env[1200]: time="2025-09-10T00:40:34.352950406Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\"" Sep 10 00:40:34.354541 env[1200]: time="2025-09-10T00:40:34.353872618Z" level=info msg="StopPodSandbox for \"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\"" Sep 10 00:40:34.354895 kubelet[1956]: I0910 00:40:34.353036 1956 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Sep 10 00:40:34.354895 kubelet[1956]: I0910 00:40:34.354426 1956 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Sep 10 00:40:34.355296 env[1200]: time="2025-09-10T00:40:34.354863980Z" level=info msg="StopPodSandbox for \"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\"" Sep 10 00:40:34.356515 kubelet[1956]: I0910 00:40:34.356207 1956 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Sep 10 00:40:34.357016 env[1200]: time="2025-09-10T00:40:34.356899635Z" level=info msg="StopPodSandbox for \"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\"" Sep 10 00:40:34.359783 kubelet[1956]: I0910 00:40:34.359659 1956 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Sep 10 00:40:34.360982 env[1200]: time="2025-09-10T00:40:34.360858332Z" level=info msg="StopPodSandbox for \"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\"" Sep 10 00:40:34.362621 kubelet[1956]: I0910 00:40:34.362276 1956 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Sep 10 00:40:34.362956 env[1200]: time="2025-09-10T00:40:34.362838582Z" level=info msg="StopPodSandbox for \"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\"" Sep 10 00:40:34.364155 kubelet[1956]: I0910 00:40:34.364128 1956 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Sep 10 00:40:34.364868 env[1200]: time="2025-09-10T00:40:34.364809575Z" level=info msg="StopPodSandbox for \"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\"" Sep 10 00:40:34.366683 kubelet[1956]: I0910 00:40:34.366628 1956 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Sep 10 00:40:34.367594 env[1200]: time="2025-09-10T00:40:34.367543341Z" level=info msg="StopPodSandbox for \"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\"" Sep 10 00:40:34.368199 kubelet[1956]: I0910 00:40:34.368171 1956 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Sep 10 00:40:34.368917 env[1200]: time="2025-09-10T00:40:34.368866777Z" level=info msg="StopPodSandbox for \"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\"" Sep 10 00:40:34.404140 env[1200]: time="2025-09-10T00:40:34.404066416Z" level=error msg="StopPodSandbox for \"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\" failed" error="failed to destroy network for sandbox \"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.404598 kubelet[1956]: E0910 00:40:34.404513 1956 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Sep 10 00:40:34.404771 kubelet[1956]: E0910 00:40:34.404642 1956 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72"} Sep 10 00:40:34.404828 kubelet[1956]: E0910 00:40:34.404791 1956 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"72632e3f-7809-4b45-ab8b-6f8e8e8d5c3a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 00:40:34.404915 kubelet[1956]: E0910 00:40:34.404827 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"72632e3f-7809-4b45-ab8b-6f8e8e8d5c3a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-wcqd5" podUID="72632e3f-7809-4b45-ab8b-6f8e8e8d5c3a" Sep 10 00:40:34.416125 env[1200]: time="2025-09-10T00:40:34.416061362Z" level=error msg="StopPodSandbox for \"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\" failed" error="failed to destroy network for sandbox \"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.416709 kubelet[1956]: E0910 00:40:34.416649 1956 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Sep 10 00:40:34.416795 kubelet[1956]: E0910 00:40:34.416744 1956 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2"} Sep 10 00:40:34.416828 kubelet[1956]: E0910 00:40:34.416789 1956 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"dbcb3f8c-1da8-4226-977e-9eb4d59cd42f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 00:40:34.416904 kubelet[1956]: E0910 00:40:34.416830 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"dbcb3f8c-1da8-4226-977e-9eb4d59cd42f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-pbxhz" podUID="dbcb3f8c-1da8-4226-977e-9eb4d59cd42f" Sep 10 00:40:34.459666 env[1200]: time="2025-09-10T00:40:34.459577024Z" level=error msg="StopPodSandbox for \"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\" failed" error="failed to destroy network for sandbox \"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.460004 kubelet[1956]: E0910 00:40:34.459925 1956 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Sep 10 00:40:34.460103 kubelet[1956]: E0910 00:40:34.460030 1956 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c"} Sep 10 00:40:34.460103 kubelet[1956]: E0910 00:40:34.460085 1956 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"70a96d34-f4e7-4ed6-9a70-692bda4903ef\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 00:40:34.460256 kubelet[1956]: E0910 00:40:34.460137 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"70a96d34-f4e7-4ed6-9a70-692bda4903ef\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6dbd5f8568-lbcfq" podUID="70a96d34-f4e7-4ed6-9a70-692bda4903ef" Sep 10 00:40:34.461182 env[1200]: time="2025-09-10T00:40:34.461141042Z" level=error msg="StopPodSandbox for \"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\" failed" error="failed to destroy network for sandbox \"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.461632 kubelet[1956]: E0910 00:40:34.461554 1956 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Sep 10 00:40:34.461701 kubelet[1956]: E0910 00:40:34.461635 1956 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326"} Sep 10 00:40:34.461701 kubelet[1956]: E0910 00:40:34.461678 1956 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f4d5d37f-4e25-4fb2-8c58-65edfe9c58e9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 00:40:34.461808 kubelet[1956]: E0910 00:40:34.461711 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f4d5d37f-4e25-4fb2-8c58-65edfe9c58e9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-585fb9d697-fs8cm" podUID="f4d5d37f-4e25-4fb2-8c58-65edfe9c58e9" Sep 10 00:40:34.465644 env[1200]: time="2025-09-10T00:40:34.465426875Z" level=error msg="StopPodSandbox for \"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\" failed" error="failed to destroy network for sandbox \"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.470848 kubelet[1956]: E0910 00:40:34.470627 1956 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Sep 10 00:40:34.470848 kubelet[1956]: E0910 00:40:34.470713 1956 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24"} Sep 10 00:40:34.470848 kubelet[1956]: E0910 00:40:34.470759 1956 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"15af17cb-bf28-4fae-bb29-ea2d7f332ad6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 00:40:34.470848 kubelet[1956]: E0910 00:40:34.470792 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"15af17cb-bf28-4fae-bb29-ea2d7f332ad6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-694cb88886-nchgf" podUID="15af17cb-bf28-4fae-bb29-ea2d7f332ad6" Sep 10 00:40:34.475499 env[1200]: time="2025-09-10T00:40:34.475402445Z" level=error msg="StopPodSandbox for \"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\" failed" error="failed to destroy network for sandbox \"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.476170 kubelet[1956]: E0910 00:40:34.475967 1956 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Sep 10 00:40:34.476170 kubelet[1956]: E0910 00:40:34.476043 1956 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd"} Sep 10 00:40:34.476170 kubelet[1956]: E0910 00:40:34.476084 1956 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"22301409-d6d8-4292-99ff-10eb88dc10dd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 00:40:34.476170 kubelet[1956]: E0910 00:40:34.476114 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"22301409-d6d8-4292-99ff-10eb88dc10dd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-wj5kf" podUID="22301409-d6d8-4292-99ff-10eb88dc10dd" Sep 10 00:40:34.484221 env[1200]: time="2025-09-10T00:40:34.484136283Z" level=error msg="StopPodSandbox for \"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\" failed" error="failed to destroy network for sandbox \"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.484557 kubelet[1956]: E0910 00:40:34.484507 1956 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Sep 10 00:40:34.484654 kubelet[1956]: E0910 00:40:34.484573 1956 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f"} Sep 10 00:40:34.484654 kubelet[1956]: E0910 00:40:34.484611 1956 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e0eb7a77-49bf-46c6-a40a-21241cec7dbe\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 00:40:34.484654 kubelet[1956]: E0910 00:40:34.484637 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e0eb7a77-49bf-46c6-a40a-21241cec7dbe\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-76b494f845-dpfcm" podUID="e0eb7a77-49bf-46c6-a40a-21241cec7dbe" Sep 10 00:40:34.487642 env[1200]: time="2025-09-10T00:40:34.487553293Z" level=error msg="StopPodSandbox for \"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\" failed" error="failed to destroy network for sandbox \"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:34.488034 kubelet[1956]: E0910 00:40:34.487912 1956 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Sep 10 00:40:34.488104 kubelet[1956]: E0910 00:40:34.488054 1956 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881"} Sep 10 00:40:34.488131 kubelet[1956]: E0910 00:40:34.488098 1956 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e48b1739-8cbf-43e6-b074-f445c5aaa2ae\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 00:40:34.488196 kubelet[1956]: E0910 00:40:34.488132 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e48b1739-8cbf-43e6-b074-f445c5aaa2ae\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-694cb88886-v9hh9" podUID="e48b1739-8cbf-43e6-b074-f445c5aaa2ae" Sep 10 00:40:35.272128 systemd[1]: Created slice kubepods-besteffort-pod9d11f211_d02b_4887_86fd_f93a2eb25fc1.slice. Sep 10 00:40:35.274329 env[1200]: time="2025-09-10T00:40:35.274271989Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-tn66z,Uid:9d11f211-d02b-4887-86fd-f93a2eb25fc1,Namespace:calico-system,Attempt:0,}" Sep 10 00:40:35.327422 env[1200]: time="2025-09-10T00:40:35.327331741Z" level=error msg="Failed to destroy network for sandbox \"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:35.327870 env[1200]: time="2025-09-10T00:40:35.327781436Z" level=error msg="encountered an error cleaning up failed sandbox \"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:35.327870 env[1200]: time="2025-09-10T00:40:35.327852619Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-tn66z,Uid:9d11f211-d02b-4887-86fd-f93a2eb25fc1,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:35.329736 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd-shm.mount: Deactivated successfully. Sep 10 00:40:35.330041 kubelet[1956]: E0910 00:40:35.329970 1956 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:35.330138 kubelet[1956]: E0910 00:40:35.330064 1956 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-tn66z" Sep 10 00:40:35.330138 kubelet[1956]: E0910 00:40:35.330092 1956 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-tn66z" Sep 10 00:40:35.330209 kubelet[1956]: E0910 00:40:35.330156 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-tn66z_calico-system(9d11f211-d02b-4887-86fd-f93a2eb25fc1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-tn66z_calico-system(9d11f211-d02b-4887-86fd-f93a2eb25fc1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-tn66z" podUID="9d11f211-d02b-4887-86fd-f93a2eb25fc1" Sep 10 00:40:35.371185 kubelet[1956]: I0910 00:40:35.371140 1956 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Sep 10 00:40:35.371734 env[1200]: time="2025-09-10T00:40:35.371698564Z" level=info msg="StopPodSandbox for \"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\"" Sep 10 00:40:35.398610 env[1200]: time="2025-09-10T00:40:35.398517343Z" level=error msg="StopPodSandbox for \"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\" failed" error="failed to destroy network for sandbox \"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 00:40:35.398943 kubelet[1956]: E0910 00:40:35.398869 1956 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Sep 10 00:40:35.399004 kubelet[1956]: E0910 00:40:35.398975 1956 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd"} Sep 10 00:40:35.399052 kubelet[1956]: E0910 00:40:35.399022 1956 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9d11f211-d02b-4887-86fd-f93a2eb25fc1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 00:40:35.399128 kubelet[1956]: E0910 00:40:35.399053 1956 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9d11f211-d02b-4887-86fd-f93a2eb25fc1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-tn66z" podUID="9d11f211-d02b-4887-86fd-f93a2eb25fc1" Sep 10 00:40:40.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.37:22-10.0.0.1:35338 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:40:40.799490 systemd[1]: Started sshd@7-10.0.0.37:22-10.0.0.1:35338.service. Sep 10 00:40:40.804958 kernel: audit: type=1130 audit(1757464840.798:1008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.37:22-10.0.0.1:35338 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:40:40.847000 audit[3183]: USER_ACCT pid=3183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:40.848596 sshd[3183]: Accepted publickey for core from 10.0.0.1 port 35338 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:40:40.852965 kernel: audit: type=1101 audit(1757464840.847:1009): pid=3183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:40.853031 kernel: audit: type=1103 audit(1757464840.851:1010): pid=3183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:40.851000 audit[3183]: CRED_ACQ pid=3183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:40.853879 sshd[3183]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:40:40.859780 systemd-logind[1188]: New session 8 of user core. Sep 10 00:40:40.860224 systemd[1]: Started session-8.scope. Sep 10 00:40:40.865787 kernel: audit: type=1006 audit(1757464840.852:1011): pid=3183 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Sep 10 00:40:40.865908 kernel: audit: type=1300 audit(1757464840.852:1011): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd824adf70 a2=3 a3=0 items=0 ppid=1 pid=3183 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:40.852000 audit[3183]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd824adf70 a2=3 a3=0 items=0 ppid=1 pid=3183 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:40.873501 kernel: audit: type=1327 audit(1757464840.852:1011): proctitle=737368643A20636F7265205B707269765D Sep 10 00:40:40.873562 kernel: audit: type=1105 audit(1757464840.863:1012): pid=3183 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:40.852000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:40:40.863000 audit[3183]: USER_START pid=3183 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:40.877714 kernel: audit: type=1103 audit(1757464840.865:1013): pid=3185 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:40.865000 audit[3185]: CRED_ACQ pid=3185 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:41.209162 sshd[3183]: pam_unix(sshd:session): session closed for user core Sep 10 00:40:41.219030 kernel: audit: type=1106 audit(1757464841.209:1014): pid=3183 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:41.219199 kernel: audit: type=1104 audit(1757464841.209:1015): pid=3183 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:41.209000 audit[3183]: USER_END pid=3183 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:41.209000 audit[3183]: CRED_DISP pid=3183 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:41.210000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.37:22-10.0.0.1:35338 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:40:41.211626 systemd[1]: sshd@7-10.0.0.37:22-10.0.0.1:35338.service: Deactivated successfully. Sep 10 00:40:41.212379 systemd[1]: session-8.scope: Deactivated successfully. Sep 10 00:40:41.220354 systemd-logind[1188]: Session 8 logged out. Waiting for processes to exit. Sep 10 00:40:41.221059 systemd-logind[1188]: Removed session 8. Sep 10 00:40:43.663767 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2466246309.mount: Deactivated successfully. Sep 10 00:40:44.611321 env[1200]: time="2025-09-10T00:40:44.611233829Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:44.618044 env[1200]: time="2025-09-10T00:40:44.617911825Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ce9c4ac0f175f22c56e80844e65379d9ebe1d8a4e2bbb38dc1db0f53a8826f0f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:44.620266 env[1200]: time="2025-09-10T00:40:44.620078783Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:44.621982 env[1200]: time="2025-09-10T00:40:44.621864755Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:bcb8146fcaeced1e1c88fad3eaa697f1680746bd23c3e7e8d4535bc484c6f2a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:44.622513 env[1200]: time="2025-09-10T00:40:44.622466525Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\" returns image reference \"sha256:ce9c4ac0f175f22c56e80844e65379d9ebe1d8a4e2bbb38dc1db0f53a8826f0f\"" Sep 10 00:40:44.640276 env[1200]: time="2025-09-10T00:40:44.640231151Z" level=info msg="CreateContainer within sandbox \"8e21e077144c7d5d1740fa79d16d716e1f23fd868664f459f687b7fecc42d166\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Sep 10 00:40:44.660724 env[1200]: time="2025-09-10T00:40:44.660641623Z" level=info msg="CreateContainer within sandbox \"8e21e077144c7d5d1740fa79d16d716e1f23fd868664f459f687b7fecc42d166\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"69b43fd0892331cd1f75a59fbd69dc46dd1843983ad09170e41ebbb96fbc13fa\"" Sep 10 00:40:44.661426 env[1200]: time="2025-09-10T00:40:44.661392993Z" level=info msg="StartContainer for \"69b43fd0892331cd1f75a59fbd69dc46dd1843983ad09170e41ebbb96fbc13fa\"" Sep 10 00:40:44.686438 systemd[1]: Started cri-containerd-69b43fd0892331cd1f75a59fbd69dc46dd1843983ad09170e41ebbb96fbc13fa.scope. Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fa0ae02f0a8 items=0 ppid=2460 pid=3207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:44.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639623433666430383932333331636431663735613539666264363964 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit: BPF prog-id=139 op=LOAD Sep 10 00:40:44.705000 audit[3207]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0001f87b8 items=0 ppid=2460 pid=3207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:44.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639623433666430383932333331636431663735613539666264363964 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit: BPF prog-id=140 op=LOAD Sep 10 00:40:44.705000 audit[3207]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0001f8808 items=0 ppid=2460 pid=3207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:44.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639623433666430383932333331636431663735613539666264363964 Sep 10 00:40:44.705000 audit: BPF prog-id=140 op=UNLOAD Sep 10 00:40:44.705000 audit: BPF prog-id=139 op=UNLOAD Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:44.705000 audit: BPF prog-id=141 op=LOAD Sep 10 00:40:44.705000 audit[3207]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0001f8898 items=0 ppid=2460 pid=3207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:44.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639623433666430383932333331636431663735613539666264363964 Sep 10 00:40:44.874749 env[1200]: time="2025-09-10T00:40:44.874596770Z" level=info msg="StartContainer for \"69b43fd0892331cd1f75a59fbd69dc46dd1843983ad09170e41ebbb96fbc13fa\" returns successfully" Sep 10 00:40:44.910246 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Sep 10 00:40:44.910468 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Sep 10 00:40:45.012290 env[1200]: time="2025-09-10T00:40:45.012219972Z" level=info msg="StopPodSandbox for \"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\"" Sep 10 00:40:45.267494 env[1200]: time="2025-09-10T00:40:45.267403601Z" level=info msg="StopPodSandbox for \"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\"" Sep 10 00:40:45.299660 env[1200]: 2025-09-10 00:40:45.094 [INFO][3268] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Sep 10 00:40:45.299660 env[1200]: 2025-09-10 00:40:45.095 [INFO][3268] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" iface="eth0" netns="/var/run/netns/cni-5e41f05e-d83b-d9a6-4258-28948fa2f3b3" Sep 10 00:40:45.299660 env[1200]: 2025-09-10 00:40:45.096 [INFO][3268] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" iface="eth0" netns="/var/run/netns/cni-5e41f05e-d83b-d9a6-4258-28948fa2f3b3" Sep 10 00:40:45.299660 env[1200]: 2025-09-10 00:40:45.097 [INFO][3268] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" iface="eth0" netns="/var/run/netns/cni-5e41f05e-d83b-d9a6-4258-28948fa2f3b3" Sep 10 00:40:45.299660 env[1200]: 2025-09-10 00:40:45.097 [INFO][3268] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Sep 10 00:40:45.299660 env[1200]: 2025-09-10 00:40:45.097 [INFO][3268] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Sep 10 00:40:45.299660 env[1200]: 2025-09-10 00:40:45.273 [INFO][3276] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" HandleID="k8s-pod-network.260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Workload="localhost-k8s-whisker--76b494f845--dpfcm-eth0" Sep 10 00:40:45.299660 env[1200]: 2025-09-10 00:40:45.275 [INFO][3276] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:45.299660 env[1200]: 2025-09-10 00:40:45.276 [INFO][3276] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:45.299660 env[1200]: 2025-09-10 00:40:45.288 [WARNING][3276] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" HandleID="k8s-pod-network.260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Workload="localhost-k8s-whisker--76b494f845--dpfcm-eth0" Sep 10 00:40:45.299660 env[1200]: 2025-09-10 00:40:45.288 [INFO][3276] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" HandleID="k8s-pod-network.260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Workload="localhost-k8s-whisker--76b494f845--dpfcm-eth0" Sep 10 00:40:45.299660 env[1200]: 2025-09-10 00:40:45.291 [INFO][3276] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:45.299660 env[1200]: 2025-09-10 00:40:45.297 [INFO][3268] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Sep 10 00:40:45.300395 env[1200]: time="2025-09-10T00:40:45.300356172Z" level=info msg="TearDown network for sandbox \"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\" successfully" Sep 10 00:40:45.300487 env[1200]: time="2025-09-10T00:40:45.300463163Z" level=info msg="StopPodSandbox for \"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\" returns successfully" Sep 10 00:40:45.303429 systemd[1]: run-netns-cni\x2d5e41f05e\x2dd83b\x2dd9a6\x2d4258\x2d28948fa2f3b3.mount: Deactivated successfully. Sep 10 00:40:45.370520 kubelet[1956]: I0910 00:40:45.370429 1956 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e0eb7a77-49bf-46c6-a40a-21241cec7dbe-whisker-ca-bundle\") pod \"e0eb7a77-49bf-46c6-a40a-21241cec7dbe\" (UID: \"e0eb7a77-49bf-46c6-a40a-21241cec7dbe\") " Sep 10 00:40:45.370520 kubelet[1956]: I0910 00:40:45.370484 1956 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/e0eb7a77-49bf-46c6-a40a-21241cec7dbe-whisker-backend-key-pair\") pod \"e0eb7a77-49bf-46c6-a40a-21241cec7dbe\" (UID: \"e0eb7a77-49bf-46c6-a40a-21241cec7dbe\") " Sep 10 00:40:45.370520 kubelet[1956]: I0910 00:40:45.370513 1956 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-8p6qs\" (UniqueName: \"kubernetes.io/projected/e0eb7a77-49bf-46c6-a40a-21241cec7dbe-kube-api-access-8p6qs\") pod \"e0eb7a77-49bf-46c6-a40a-21241cec7dbe\" (UID: \"e0eb7a77-49bf-46c6-a40a-21241cec7dbe\") " Sep 10 00:40:45.371230 kubelet[1956]: I0910 00:40:45.371187 1956 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/e0eb7a77-49bf-46c6-a40a-21241cec7dbe-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "e0eb7a77-49bf-46c6-a40a-21241cec7dbe" (UID: "e0eb7a77-49bf-46c6-a40a-21241cec7dbe"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Sep 10 00:40:45.375682 kubelet[1956]: I0910 00:40:45.375625 1956 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/e0eb7a77-49bf-46c6-a40a-21241cec7dbe-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "e0eb7a77-49bf-46c6-a40a-21241cec7dbe" (UID: "e0eb7a77-49bf-46c6-a40a-21241cec7dbe"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Sep 10 00:40:45.376980 systemd[1]: var-lib-kubelet-pods-e0eb7a77\x2d49bf\x2d46c6\x2da40a\x2d21241cec7dbe-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d8p6qs.mount: Deactivated successfully. Sep 10 00:40:45.377108 systemd[1]: var-lib-kubelet-pods-e0eb7a77\x2d49bf\x2d46c6\x2da40a\x2d21241cec7dbe-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Sep 10 00:40:45.381542 kubelet[1956]: I0910 00:40:45.381466 1956 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/e0eb7a77-49bf-46c6-a40a-21241cec7dbe-kube-api-access-8p6qs" (OuterVolumeSpecName: "kube-api-access-8p6qs") pod "e0eb7a77-49bf-46c6-a40a-21241cec7dbe" (UID: "e0eb7a77-49bf-46c6-a40a-21241cec7dbe"). InnerVolumeSpecName "kube-api-access-8p6qs". PluginName "kubernetes.io/projected", VolumeGIDValue "" Sep 10 00:40:45.399819 systemd[1]: Removed slice kubepods-besteffort-pode0eb7a77_49bf_46c6_a40a_21241cec7dbe.slice. Sep 10 00:40:45.459148 kubelet[1956]: I0910 00:40:45.458821 1956 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-r5xjm" podStartSLOduration=2.023291056 podStartE2EDuration="26.458768082s" podCreationTimestamp="2025-09-10 00:40:19 +0000 UTC" firstStartedPulling="2025-09-10 00:40:20.188072802 +0000 UTC m=+22.041403216" lastFinishedPulling="2025-09-10 00:40:44.623549828 +0000 UTC m=+46.476880242" observedRunningTime="2025-09-10 00:40:45.444447983 +0000 UTC m=+47.297778427" watchObservedRunningTime="2025-09-10 00:40:45.458768082 +0000 UTC m=+47.312098496" Sep 10 00:40:45.472800 kubelet[1956]: I0910 00:40:45.471412 1956 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e0eb7a77-49bf-46c6-a40a-21241cec7dbe-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Sep 10 00:40:45.472800 kubelet[1956]: I0910 00:40:45.471461 1956 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/e0eb7a77-49bf-46c6-a40a-21241cec7dbe-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Sep 10 00:40:45.472800 kubelet[1956]: I0910 00:40:45.471475 1956 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-8p6qs\" (UniqueName: \"kubernetes.io/projected/e0eb7a77-49bf-46c6-a40a-21241cec7dbe-kube-api-access-8p6qs\") on node \"localhost\" DevicePath \"\"" Sep 10 00:40:45.480994 env[1200]: 2025-09-10 00:40:45.424 [INFO][3295] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Sep 10 00:40:45.480994 env[1200]: 2025-09-10 00:40:45.426 [INFO][3295] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" iface="eth0" netns="/var/run/netns/cni-51a7f3f6-f7f6-c15d-b041-11427bc99d32" Sep 10 00:40:45.480994 env[1200]: 2025-09-10 00:40:45.428 [INFO][3295] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" iface="eth0" netns="/var/run/netns/cni-51a7f3f6-f7f6-c15d-b041-11427bc99d32" Sep 10 00:40:45.480994 env[1200]: 2025-09-10 00:40:45.428 [INFO][3295] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" iface="eth0" netns="/var/run/netns/cni-51a7f3f6-f7f6-c15d-b041-11427bc99d32" Sep 10 00:40:45.480994 env[1200]: 2025-09-10 00:40:45.428 [INFO][3295] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Sep 10 00:40:45.480994 env[1200]: 2025-09-10 00:40:45.428 [INFO][3295] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Sep 10 00:40:45.480994 env[1200]: 2025-09-10 00:40:45.461 [INFO][3334] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" HandleID="k8s-pod-network.2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Workload="localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0" Sep 10 00:40:45.480994 env[1200]: 2025-09-10 00:40:45.462 [INFO][3334] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:45.480994 env[1200]: 2025-09-10 00:40:45.462 [INFO][3334] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:45.480994 env[1200]: 2025-09-10 00:40:45.474 [WARNING][3334] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" HandleID="k8s-pod-network.2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Workload="localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0" Sep 10 00:40:45.480994 env[1200]: 2025-09-10 00:40:45.474 [INFO][3334] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" HandleID="k8s-pod-network.2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Workload="localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0" Sep 10 00:40:45.480994 env[1200]: 2025-09-10 00:40:45.475 [INFO][3334] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:45.480994 env[1200]: 2025-09-10 00:40:45.478 [INFO][3295] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Sep 10 00:40:45.481579 env[1200]: time="2025-09-10T00:40:45.481165261Z" level=info msg="TearDown network for sandbox \"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\" successfully" Sep 10 00:40:45.481579 env[1200]: time="2025-09-10T00:40:45.481211769Z" level=info msg="StopPodSandbox for \"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\" returns successfully" Sep 10 00:40:45.481635 kubelet[1956]: E0910 00:40:45.481574 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:45.482481 env[1200]: time="2025-09-10T00:40:45.482449482Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-wcqd5,Uid:72632e3f-7809-4b45-ab8b-6f8e8e8d5c3a,Namespace:kube-system,Attempt:1,}" Sep 10 00:40:45.569293 systemd[1]: Created slice kubepods-besteffort-pode0e3d7c6_14d8_4ed9_be5e_7842dfc0ee4c.slice. Sep 10 00:40:45.670576 systemd[1]: run-netns-cni\x2d51a7f3f6\x2df7f6\x2dc15d\x2db041\x2d11427bc99d32.mount: Deactivated successfully. Sep 10 00:40:45.673172 kubelet[1956]: I0910 00:40:45.673064 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-k2cvw\" (UniqueName: \"kubernetes.io/projected/e0e3d7c6-14d8-4ed9-be5e-7842dfc0ee4c-kube-api-access-k2cvw\") pod \"whisker-84db459f6d-7clz4\" (UID: \"e0e3d7c6-14d8-4ed9-be5e-7842dfc0ee4c\") " pod="calico-system/whisker-84db459f6d-7clz4" Sep 10 00:40:45.673172 kubelet[1956]: I0910 00:40:45.673115 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e0e3d7c6-14d8-4ed9-be5e-7842dfc0ee4c-whisker-ca-bundle\") pod \"whisker-84db459f6d-7clz4\" (UID: \"e0e3d7c6-14d8-4ed9-be5e-7842dfc0ee4c\") " pod="calico-system/whisker-84db459f6d-7clz4" Sep 10 00:40:45.673172 kubelet[1956]: I0910 00:40:45.673135 1956 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/e0e3d7c6-14d8-4ed9-be5e-7842dfc0ee4c-whisker-backend-key-pair\") pod \"whisker-84db459f6d-7clz4\" (UID: \"e0e3d7c6-14d8-4ed9-be5e-7842dfc0ee4c\") " pod="calico-system/whisker-84db459f6d-7clz4" Sep 10 00:40:45.720780 systemd-networkd[1026]: cali3871e8d5334: Link UP Sep 10 00:40:45.722008 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 10 00:40:45.722066 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3871e8d5334: link becomes ready Sep 10 00:40:45.723140 systemd-networkd[1026]: cali3871e8d5334: Gained carrier Sep 10 00:40:45.737370 env[1200]: 2025-09-10 00:40:45.597 [INFO][3348] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 10 00:40:45.737370 env[1200]: 2025-09-10 00:40:45.611 [INFO][3348] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0 coredns-674b8bbfcf- kube-system 72632e3f-7809-4b45-ab8b-6f8e8e8d5c3a 996 0 2025-09-10 00:40:04 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-wcqd5 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali3871e8d5334 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94" Namespace="kube-system" Pod="coredns-674b8bbfcf-wcqd5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--wcqd5-" Sep 10 00:40:45.737370 env[1200]: 2025-09-10 00:40:45.611 [INFO][3348] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94" Namespace="kube-system" Pod="coredns-674b8bbfcf-wcqd5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0" Sep 10 00:40:45.737370 env[1200]: 2025-09-10 00:40:45.646 [INFO][3363] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94" HandleID="k8s-pod-network.b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94" Workload="localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0" Sep 10 00:40:45.737370 env[1200]: 2025-09-10 00:40:45.647 [INFO][3363] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94" HandleID="k8s-pod-network.b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94" Workload="localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0001394f0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-wcqd5", "timestamp":"2025-09-10 00:40:45.646802732 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 00:40:45.737370 env[1200]: 2025-09-10 00:40:45.647 [INFO][3363] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:45.737370 env[1200]: 2025-09-10 00:40:45.647 [INFO][3363] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:45.737370 env[1200]: 2025-09-10 00:40:45.647 [INFO][3363] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 00:40:45.737370 env[1200]: 2025-09-10 00:40:45.654 [INFO][3363] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94" host="localhost" Sep 10 00:40:45.737370 env[1200]: 2025-09-10 00:40:45.663 [INFO][3363] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 00:40:45.737370 env[1200]: 2025-09-10 00:40:45.671 [INFO][3363] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 00:40:45.737370 env[1200]: 2025-09-10 00:40:45.674 [INFO][3363] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 00:40:45.737370 env[1200]: 2025-09-10 00:40:45.675 [INFO][3363] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 00:40:45.737370 env[1200]: 2025-09-10 00:40:45.675 [INFO][3363] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94" host="localhost" Sep 10 00:40:45.737370 env[1200]: 2025-09-10 00:40:45.676 [INFO][3363] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94 Sep 10 00:40:45.737370 env[1200]: 2025-09-10 00:40:45.703 [INFO][3363] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94" host="localhost" Sep 10 00:40:45.737370 env[1200]: 2025-09-10 00:40:45.709 [INFO][3363] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94" host="localhost" Sep 10 00:40:45.737370 env[1200]: 2025-09-10 00:40:45.709 [INFO][3363] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94" host="localhost" Sep 10 00:40:45.737370 env[1200]: 2025-09-10 00:40:45.709 [INFO][3363] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:45.737370 env[1200]: 2025-09-10 00:40:45.709 [INFO][3363] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94" HandleID="k8s-pod-network.b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94" Workload="localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0" Sep 10 00:40:45.738647 env[1200]: 2025-09-10 00:40:45.712 [INFO][3348] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94" Namespace="kube-system" Pod="coredns-674b8bbfcf-wcqd5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"72632e3f-7809-4b45-ab8b-6f8e8e8d5c3a", ResourceVersion:"996", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-wcqd5", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3871e8d5334", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:45.738647 env[1200]: 2025-09-10 00:40:45.712 [INFO][3348] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94" Namespace="kube-system" Pod="coredns-674b8bbfcf-wcqd5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0" Sep 10 00:40:45.738647 env[1200]: 2025-09-10 00:40:45.712 [INFO][3348] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3871e8d5334 ContainerID="b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94" Namespace="kube-system" Pod="coredns-674b8bbfcf-wcqd5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0" Sep 10 00:40:45.738647 env[1200]: 2025-09-10 00:40:45.723 [INFO][3348] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94" Namespace="kube-system" Pod="coredns-674b8bbfcf-wcqd5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0" Sep 10 00:40:45.738647 env[1200]: 2025-09-10 00:40:45.724 [INFO][3348] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94" Namespace="kube-system" Pod="coredns-674b8bbfcf-wcqd5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"72632e3f-7809-4b45-ab8b-6f8e8e8d5c3a", ResourceVersion:"996", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94", Pod:"coredns-674b8bbfcf-wcqd5", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3871e8d5334", MAC:"6a:f1:da:87:08:c7", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:45.738647 env[1200]: 2025-09-10 00:40:45.732 [INFO][3348] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94" Namespace="kube-system" Pod="coredns-674b8bbfcf-wcqd5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0" Sep 10 00:40:45.749161 env[1200]: time="2025-09-10T00:40:45.749040683Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:40:45.749161 env[1200]: time="2025-09-10T00:40:45.749127325Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:40:45.749161 env[1200]: time="2025-09-10T00:40:45.749151100Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:40:45.749609 env[1200]: time="2025-09-10T00:40:45.749539189Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94 pid=3384 runtime=io.containerd.runc.v2 Sep 10 00:40:45.772565 systemd[1]: Started cri-containerd-b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94.scope. Sep 10 00:40:45.803971 kernel: kauditd_printk_skb: 44 callbacks suppressed Sep 10 00:40:45.804171 kernel: audit: type=1400 audit(1757464845.799:1023): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.808575 kernel: audit: type=1400 audit(1757464845.799:1024): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.812315 kernel: audit: type=1400 audit(1757464845.799:1025): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.815714 kernel: audit: type=1400 audit(1757464845.799:1026): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.815979 systemd-resolved[1141]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 00:40:45.819439 kernel: audit: type=1400 audit(1757464845.799:1027): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.819474 kernel: audit: type=1400 audit(1757464845.799:1028): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.825882 kernel: audit: type=1400 audit(1757464845.799:1029): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.825955 kernel: audit: type=1400 audit(1757464845.799:1030): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.831590 kernel: audit: type=1400 audit(1757464845.799:1031): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.831660 kernel: audit: type=1400 audit(1757464845.803:1032): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.803000 audit: BPF prog-id=142 op=LOAD Sep 10 00:40:45.804000 audit[3396]: AVC avc: denied { bpf } for pid=3396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.804000 audit[3396]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00023dc48 a2=10 a3=1c items=0 ppid=3384 pid=3396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:45.804000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238353536353465653163353961346232356166323533643933386433 Sep 10 00:40:45.804000 audit[3396]: AVC avc: denied { perfmon } for pid=3396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.804000 audit[3396]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00023d6b0 a2=3c a3=c items=0 ppid=3384 pid=3396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:45.804000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238353536353465653163353961346232356166323533643933386433 Sep 10 00:40:45.804000 audit[3396]: AVC avc: denied { bpf } for pid=3396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.804000 audit[3396]: AVC avc: denied { bpf } for pid=3396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.804000 audit[3396]: AVC avc: denied { bpf } for pid=3396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.804000 audit[3396]: AVC avc: denied { perfmon } for pid=3396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.804000 audit[3396]: AVC avc: denied { perfmon } for pid=3396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.804000 audit[3396]: AVC avc: denied { perfmon } for pid=3396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.804000 audit[3396]: AVC avc: denied { perfmon } for pid=3396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.804000 audit[3396]: AVC avc: denied { perfmon } for pid=3396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.804000 audit[3396]: AVC avc: denied { bpf } for pid=3396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.804000 audit[3396]: AVC avc: denied { bpf } for pid=3396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.804000 audit: BPF prog-id=143 op=LOAD Sep 10 00:40:45.804000 audit[3396]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00023d9d8 a2=78 a3=c0002dfef0 items=0 ppid=3384 pid=3396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:45.804000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238353536353465653163353961346232356166323533643933386433 Sep 10 00:40:45.807000 audit[3396]: AVC avc: denied { bpf } for pid=3396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.807000 audit[3396]: AVC avc: denied { bpf } for pid=3396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.807000 audit[3396]: AVC avc: denied { perfmon } for pid=3396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.807000 audit[3396]: AVC avc: denied { perfmon } for pid=3396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.807000 audit[3396]: AVC avc: denied { perfmon } for pid=3396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.807000 audit[3396]: AVC avc: denied { perfmon } for pid=3396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.807000 audit[3396]: AVC avc: denied { perfmon } for pid=3396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.807000 audit[3396]: AVC avc: denied { bpf } for pid=3396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.807000 audit[3396]: AVC avc: denied { bpf } for pid=3396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.807000 audit: BPF prog-id=144 op=LOAD Sep 10 00:40:45.807000 audit[3396]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00023d770 a2=78 a3=c0002dff38 items=0 ppid=3384 pid=3396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:45.807000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238353536353465653163353961346232356166323533643933386433 Sep 10 00:40:45.807000 audit: BPF prog-id=144 op=UNLOAD Sep 10 00:40:45.807000 audit: BPF prog-id=143 op=UNLOAD Sep 10 00:40:45.807000 audit[3396]: AVC avc: denied { bpf } for pid=3396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.807000 audit[3396]: AVC avc: denied { bpf } for pid=3396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.807000 audit[3396]: AVC avc: denied { bpf } for pid=3396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.807000 audit[3396]: AVC avc: denied { perfmon } for pid=3396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.807000 audit[3396]: AVC avc: denied { perfmon } for pid=3396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.807000 audit[3396]: AVC avc: denied { perfmon } for pid=3396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.807000 audit[3396]: AVC avc: denied { perfmon } for pid=3396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.807000 audit[3396]: AVC avc: denied { perfmon } for pid=3396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.807000 audit[3396]: AVC avc: denied { bpf } for pid=3396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.807000 audit[3396]: AVC avc: denied { bpf } for pid=3396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:45.807000 audit: BPF prog-id=145 op=LOAD Sep 10 00:40:45.807000 audit[3396]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00023dc30 a2=78 a3=c0003c6348 items=0 ppid=3384 pid=3396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:45.807000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238353536353465653163353961346232356166323533643933386433 Sep 10 00:40:45.850430 env[1200]: time="2025-09-10T00:40:45.850358626Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-wcqd5,Uid:72632e3f-7809-4b45-ab8b-6f8e8e8d5c3a,Namespace:kube-system,Attempt:1,} returns sandbox id \"b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94\"" Sep 10 00:40:45.851230 kubelet[1956]: E0910 00:40:45.851203 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:45.873369 env[1200]: time="2025-09-10T00:40:45.873286452Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-84db459f6d-7clz4,Uid:e0e3d7c6-14d8-4ed9-be5e-7842dfc0ee4c,Namespace:calico-system,Attempt:0,}" Sep 10 00:40:45.941791 env[1200]: time="2025-09-10T00:40:45.941726052Z" level=info msg="CreateContainer within sandbox \"b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 10 00:40:45.967513 env[1200]: time="2025-09-10T00:40:45.967429648Z" level=info msg="CreateContainer within sandbox \"b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"79277536e72d96c960735e85898447ea52636581185f4f273ed5064ad7868b25\"" Sep 10 00:40:45.968115 env[1200]: time="2025-09-10T00:40:45.968075220Z" level=info msg="StartContainer for \"79277536e72d96c960735e85898447ea52636581185f4f273ed5064ad7868b25\"" Sep 10 00:40:45.985692 systemd[1]: Started cri-containerd-79277536e72d96c960735e85898447ea52636581185f4f273ed5064ad7868b25.scope. Sep 10 00:40:46.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.001000 audit: BPF prog-id=146 op=LOAD Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=3384 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:46.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739323737353336653732643936633936303733356538353839383434 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=8 items=0 ppid=3384 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:46.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739323737353336653732643936633936303733356538353839383434 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit: BPF prog-id=147 op=LOAD Sep 10 00:40:46.002000 audit[3439]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c00028a3a0 items=0 ppid=3384 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:46.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739323737353336653732643936633936303733356538353839383434 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit: BPF prog-id=148 op=LOAD Sep 10 00:40:46.002000 audit[3439]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c00028a3e8 items=0 ppid=3384 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:46.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739323737353336653732643936633936303733356538353839383434 Sep 10 00:40:46.002000 audit: BPF prog-id=148 op=UNLOAD Sep 10 00:40:46.002000 audit: BPF prog-id=147 op=UNLOAD Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.002000 audit: BPF prog-id=149 op=LOAD Sep 10 00:40:46.002000 audit[3439]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c00028a7f8 items=0 ppid=3384 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:46.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739323737353336653732643936633936303733356538353839383434 Sep 10 00:40:46.020307 env[1200]: time="2025-09-10T00:40:46.020229401Z" level=info msg="StartContainer for \"79277536e72d96c960735e85898447ea52636581185f4f273ed5064ad7868b25\" returns successfully" Sep 10 00:40:46.213000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.37:22-10.0.0.1:35352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:40:46.214584 systemd[1]: Started sshd@8-10.0.0.37:22-10.0.0.1:35352.service. Sep 10 00:40:46.259000 audit[3473]: USER_ACCT pid=3473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:46.260771 sshd[3473]: Accepted publickey for core from 10.0.0.1 port 35352 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:40:46.261351 systemd-networkd[1026]: cali4d17ae53ce6: Link UP Sep 10 00:40:46.264000 audit[3473]: CRED_ACQ pid=3473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:46.264000 audit[3473]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4ec29ce0 a2=3 a3=0 items=0 ppid=1 pid=3473 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:46.264000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:40:46.265171 systemd-networkd[1026]: cali4d17ae53ce6: Gained carrier Sep 10 00:40:46.265694 sshd[3473]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:40:46.265955 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4d17ae53ce6: link becomes ready Sep 10 00:40:46.272236 env[1200]: time="2025-09-10T00:40:46.268989969Z" level=info msg="StopPodSandbox for \"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\"" Sep 10 00:40:46.272403 kubelet[1956]: I0910 00:40:46.271127 1956 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="e0eb7a77-49bf-46c6-a40a-21241cec7dbe" path="/var/lib/kubelet/pods/e0eb7a77-49bf-46c6-a40a-21241cec7dbe/volumes" Sep 10 00:40:46.276067 systemd-logind[1188]: New session 9 of user core. Sep 10 00:40:46.277303 systemd[1]: Started session-9.scope. Sep 10 00:40:46.282000 audit[3473]: USER_START pid=3473 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:46.284000 audit[3493]: CRED_ACQ pid=3493 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:46.392836 env[1200]: 2025-09-10 00:40:45.974 [INFO][3420] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 10 00:40:46.392836 env[1200]: 2025-09-10 00:40:45.986 [INFO][3420] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--84db459f6d--7clz4-eth0 whisker-84db459f6d- calico-system e0e3d7c6-14d8-4ed9-be5e-7842dfc0ee4c 1013 0 2025-09-10 00:40:45 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:84db459f6d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-84db459f6d-7clz4 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali4d17ae53ce6 [] [] }} ContainerID="aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c" Namespace="calico-system" Pod="whisker-84db459f6d-7clz4" WorkloadEndpoint="localhost-k8s-whisker--84db459f6d--7clz4-" Sep 10 00:40:46.392836 env[1200]: 2025-09-10 00:40:45.986 [INFO][3420] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c" Namespace="calico-system" Pod="whisker-84db459f6d-7clz4" WorkloadEndpoint="localhost-k8s-whisker--84db459f6d--7clz4-eth0" Sep 10 00:40:46.392836 env[1200]: 2025-09-10 00:40:46.021 [INFO][3459] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c" HandleID="k8s-pod-network.aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c" Workload="localhost-k8s-whisker--84db459f6d--7clz4-eth0" Sep 10 00:40:46.392836 env[1200]: 2025-09-10 00:40:46.021 [INFO][3459] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c" HandleID="k8s-pod-network.aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c" Workload="localhost-k8s-whisker--84db459f6d--7clz4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000135ac0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-84db459f6d-7clz4", "timestamp":"2025-09-10 00:40:46.021217966 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 00:40:46.392836 env[1200]: 2025-09-10 00:40:46.021 [INFO][3459] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:46.392836 env[1200]: 2025-09-10 00:40:46.021 [INFO][3459] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:46.392836 env[1200]: 2025-09-10 00:40:46.021 [INFO][3459] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 00:40:46.392836 env[1200]: 2025-09-10 00:40:46.040 [INFO][3459] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c" host="localhost" Sep 10 00:40:46.392836 env[1200]: 2025-09-10 00:40:46.044 [INFO][3459] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 00:40:46.392836 env[1200]: 2025-09-10 00:40:46.048 [INFO][3459] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 00:40:46.392836 env[1200]: 2025-09-10 00:40:46.049 [INFO][3459] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 00:40:46.392836 env[1200]: 2025-09-10 00:40:46.051 [INFO][3459] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 00:40:46.392836 env[1200]: 2025-09-10 00:40:46.051 [INFO][3459] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c" host="localhost" Sep 10 00:40:46.392836 env[1200]: 2025-09-10 00:40:46.053 [INFO][3459] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c Sep 10 00:40:46.392836 env[1200]: 2025-09-10 00:40:46.219 [INFO][3459] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c" host="localhost" Sep 10 00:40:46.392836 env[1200]: 2025-09-10 00:40:46.257 [INFO][3459] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c" host="localhost" Sep 10 00:40:46.392836 env[1200]: 2025-09-10 00:40:46.257 [INFO][3459] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c" host="localhost" Sep 10 00:40:46.392836 env[1200]: 2025-09-10 00:40:46.257 [INFO][3459] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:46.392836 env[1200]: 2025-09-10 00:40:46.257 [INFO][3459] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c" HandleID="k8s-pod-network.aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c" Workload="localhost-k8s-whisker--84db459f6d--7clz4-eth0" Sep 10 00:40:46.393803 env[1200]: 2025-09-10 00:40:46.259 [INFO][3420] cni-plugin/k8s.go 418: Populated endpoint ContainerID="aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c" Namespace="calico-system" Pod="whisker-84db459f6d-7clz4" WorkloadEndpoint="localhost-k8s-whisker--84db459f6d--7clz4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--84db459f6d--7clz4-eth0", GenerateName:"whisker-84db459f6d-", Namespace:"calico-system", SelfLink:"", UID:"e0e3d7c6-14d8-4ed9-be5e-7842dfc0ee4c", ResourceVersion:"1013", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"84db459f6d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-84db459f6d-7clz4", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali4d17ae53ce6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:46.393803 env[1200]: 2025-09-10 00:40:46.260 [INFO][3420] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c" Namespace="calico-system" Pod="whisker-84db459f6d-7clz4" WorkloadEndpoint="localhost-k8s-whisker--84db459f6d--7clz4-eth0" Sep 10 00:40:46.393803 env[1200]: 2025-09-10 00:40:46.260 [INFO][3420] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali4d17ae53ce6 ContainerID="aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c" Namespace="calico-system" Pod="whisker-84db459f6d-7clz4" WorkloadEndpoint="localhost-k8s-whisker--84db459f6d--7clz4-eth0" Sep 10 00:40:46.393803 env[1200]: 2025-09-10 00:40:46.266 [INFO][3420] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c" Namespace="calico-system" Pod="whisker-84db459f6d-7clz4" WorkloadEndpoint="localhost-k8s-whisker--84db459f6d--7clz4-eth0" Sep 10 00:40:46.393803 env[1200]: 2025-09-10 00:40:46.266 [INFO][3420] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c" Namespace="calico-system" Pod="whisker-84db459f6d-7clz4" WorkloadEndpoint="localhost-k8s-whisker--84db459f6d--7clz4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--84db459f6d--7clz4-eth0", GenerateName:"whisker-84db459f6d-", Namespace:"calico-system", SelfLink:"", UID:"e0e3d7c6-14d8-4ed9-be5e-7842dfc0ee4c", ResourceVersion:"1013", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"84db459f6d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c", Pod:"whisker-84db459f6d-7clz4", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali4d17ae53ce6", MAC:"d2:57:87:6c:7f:84", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:46.393803 env[1200]: 2025-09-10 00:40:46.390 [INFO][3420] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c" Namespace="calico-system" Pod="whisker-84db459f6d-7clz4" WorkloadEndpoint="localhost-k8s-whisker--84db459f6d--7clz4-eth0" Sep 10 00:40:46.400988 kubelet[1956]: E0910 00:40:46.400925 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:46.429000 audit[3580]: AVC avc: denied { write } for pid=3580 comm="tee" name="fd" dev="proc" ino=24550 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 00:40:46.429000 audit[3580]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc4b6e47e1 a2=241 a3=1b6 items=1 ppid=3523 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:46.429000 audit: CWD cwd="/etc/service/enabled/felix/log" Sep 10 00:40:46.429000 audit: PATH item=0 name="/dev/fd/63" inode=23528 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:40:46.429000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 00:40:46.430000 audit[3575]: AVC avc: denied { write } for pid=3575 comm="tee" name="fd" dev="proc" ino=25190 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 00:40:46.430000 audit[3575]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe62ab97d2 a2=241 a3=1b6 items=1 ppid=3520 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:46.430000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Sep 10 00:40:46.430000 audit: PATH item=0 name="/dev/fd/63" inode=24540 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:40:46.430000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 00:40:46.432000 audit[3569]: AVC avc: denied { write } for pid=3569 comm="tee" name="fd" dev="proc" ino=23532 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 00:40:46.432000 audit[3569]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffca02f67e2 a2=241 a3=1b6 items=1 ppid=3518 pid=3569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:46.432000 audit: CWD cwd="/etc/service/enabled/bird/log" Sep 10 00:40:46.432000 audit: PATH item=0 name="/dev/fd/63" inode=25183 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:40:46.432000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 00:40:46.444000 audit[3603]: AVC avc: denied { write } for pid=3603 comm="tee" name="fd" dev="proc" ino=25203 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 00:40:46.444000 audit[3603]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd8b5997d1 a2=241 a3=1b6 items=1 ppid=3526 pid=3603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:46.444000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Sep 10 00:40:46.444000 audit: PATH item=0 name="/dev/fd/63" inode=23529 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:40:46.444000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 00:40:46.455000 audit[3610]: AVC avc: denied { write } for pid=3610 comm="tee" name="fd" dev="proc" ino=25209 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 00:40:46.455000 audit[3610]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc7953a7e3 a2=241 a3=1b6 items=1 ppid=3538 pid=3610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:46.455000 audit: CWD cwd="/etc/service/enabled/cni/log" Sep 10 00:40:46.455000 audit: PATH item=0 name="/dev/fd/63" inode=25200 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:40:46.455000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 00:40:46.473000 audit[3620]: AVC avc: denied { write } for pid=3620 comm="tee" name="fd" dev="proc" ino=26184 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 00:40:46.473000 audit[3620]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff6b3ab7e1 a2=241 a3=1b6 items=1 ppid=3587 pid=3620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:46.473000 audit: CWD cwd="/etc/service/enabled/bird6/log" Sep 10 00:40:46.473000 audit: PATH item=0 name="/dev/fd/63" inode=24556 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:40:46.473000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 00:40:46.501000 audit[3622]: AVC avc: denied { write } for pid=3622 comm="tee" name="fd" dev="proc" ino=24562 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 00:40:46.501000 audit[3622]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdbe2eb7e1 a2=241 a3=1b6 items=1 ppid=3532 pid=3622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:46.501000 audit: CWD cwd="/etc/service/enabled/confd/log" Sep 10 00:40:46.501000 audit: PATH item=0 name="/dev/fd/63" inode=24559 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 00:40:46.501000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 00:40:46.707910 kubelet[1956]: I0910 00:40:46.707160 1956 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-wcqd5" podStartSLOduration=42.707140471 podStartE2EDuration="42.707140471s" podCreationTimestamp="2025-09-10 00:40:04 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-10 00:40:46.706461727 +0000 UTC m=+48.559792131" watchObservedRunningTime="2025-09-10 00:40:46.707140471 +0000 UTC m=+48.560470885" Sep 10 00:40:46.725406 sshd[3473]: pam_unix(sshd:session): session closed for user core Sep 10 00:40:46.726000 audit[3473]: USER_END pid=3473 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:46.726000 audit[3473]: CRED_DISP pid=3473 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:46.728827 systemd[1]: sshd@8-10.0.0.37:22-10.0.0.1:35352.service: Deactivated successfully. Sep 10 00:40:46.728000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.37:22-10.0.0.1:35352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:40:46.729688 systemd[1]: session-9.scope: Deactivated successfully. Sep 10 00:40:46.730676 systemd-logind[1188]: Session 9 logged out. Waiting for processes to exit. Sep 10 00:40:46.731679 systemd-logind[1188]: Removed session 9. Sep 10 00:40:46.748000 audit[3648]: NETFILTER_CFG table=filter:101 family=2 entries=20 op=nft_register_rule pid=3648 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:46.748000 audit[3648]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fff0ae8dbe0 a2=0 a3=7fff0ae8dbcc items=0 ppid=2118 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:46.748000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:46.751101 systemd-networkd[1026]: cali3871e8d5334: Gained IPv6LL Sep 10 00:40:46.753000 audit[3648]: NETFILTER_CFG table=nat:102 family=2 entries=14 op=nft_register_rule pid=3648 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:46.753000 audit[3648]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7fff0ae8dbe0 a2=0 a3=0 items=0 ppid=2118 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:46.753000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:46.771926 env[1200]: time="2025-09-10T00:40:46.771803397Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:40:46.771926 env[1200]: time="2025-09-10T00:40:46.771862798Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:40:46.771926 env[1200]: time="2025-09-10T00:40:46.771889338Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:40:46.772683 env[1200]: time="2025-09-10T00:40:46.772079935Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c pid=3660 runtime=io.containerd.runc.v2 Sep 10 00:40:46.795789 systemd[1]: run-containerd-runc-k8s.io-aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c-runc.B3Tsvz.mount: Deactivated successfully. Sep 10 00:40:46.798025 systemd[1]: Started cri-containerd-aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c.scope. Sep 10 00:40:46.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.810000 audit: BPF prog-id=150 op=LOAD Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3660 pid=3670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:46.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161363734616434303466366332393562393038653430636530356561 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3660 pid=3670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:46.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161363734616434303466366332393562393038653430636530356561 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit: BPF prog-id=151 op=LOAD Sep 10 00:40:46.811000 audit[3670]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002a5d70 items=0 ppid=3660 pid=3670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:46.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161363734616434303466366332393562393038653430636530356561 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit: BPF prog-id=152 op=LOAD Sep 10 00:40:46.811000 audit[3670]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002a5db8 items=0 ppid=3660 pid=3670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:46.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161363734616434303466366332393562393038653430636530356561 Sep 10 00:40:46.811000 audit: BPF prog-id=152 op=UNLOAD Sep 10 00:40:46.811000 audit: BPF prog-id=151 op=UNLOAD Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { perfmon } for pid=3670 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit[3670]: AVC avc: denied { bpf } for pid=3670 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:46.811000 audit: BPF prog-id=153 op=LOAD Sep 10 00:40:46.811000 audit[3670]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003861c8 items=0 ppid=3660 pid=3670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:46.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161363734616434303466366332393562393038653430636530356561 Sep 10 00:40:46.813640 systemd-resolved[1141]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 00:40:46.836226 env[1200]: time="2025-09-10T00:40:46.836178732Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-84db459f6d-7clz4,Uid:e0e3d7c6-14d8-4ed9-be5e-7842dfc0ee4c,Namespace:calico-system,Attempt:0,} returns sandbox id \"aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c\"" Sep 10 00:40:46.838415 env[1200]: time="2025-09-10T00:40:46.838367480Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\"" Sep 10 00:40:46.939194 env[1200]: 2025-09-10 00:40:46.486 [INFO][3488] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Sep 10 00:40:46.939194 env[1200]: 2025-09-10 00:40:46.487 [INFO][3488] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" iface="eth0" netns="/var/run/netns/cni-f9eb1828-a06a-e2c6-597f-b11709df5021" Sep 10 00:40:46.939194 env[1200]: 2025-09-10 00:40:46.487 [INFO][3488] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" iface="eth0" netns="/var/run/netns/cni-f9eb1828-a06a-e2c6-597f-b11709df5021" Sep 10 00:40:46.939194 env[1200]: 2025-09-10 00:40:46.487 [INFO][3488] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" iface="eth0" netns="/var/run/netns/cni-f9eb1828-a06a-e2c6-597f-b11709df5021" Sep 10 00:40:46.939194 env[1200]: 2025-09-10 00:40:46.487 [INFO][3488] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Sep 10 00:40:46.939194 env[1200]: 2025-09-10 00:40:46.487 [INFO][3488] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Sep 10 00:40:46.939194 env[1200]: 2025-09-10 00:40:46.694 [INFO][3633] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" HandleID="k8s-pod-network.c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Workload="localhost-k8s-csi--node--driver--tn66z-eth0" Sep 10 00:40:46.939194 env[1200]: 2025-09-10 00:40:46.695 [INFO][3633] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:46.939194 env[1200]: 2025-09-10 00:40:46.695 [INFO][3633] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:46.939194 env[1200]: 2025-09-10 00:40:46.718 [WARNING][3633] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" HandleID="k8s-pod-network.c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Workload="localhost-k8s-csi--node--driver--tn66z-eth0" Sep 10 00:40:46.939194 env[1200]: 2025-09-10 00:40:46.718 [INFO][3633] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" HandleID="k8s-pod-network.c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Workload="localhost-k8s-csi--node--driver--tn66z-eth0" Sep 10 00:40:46.939194 env[1200]: 2025-09-10 00:40:46.932 [INFO][3633] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:46.939194 env[1200]: 2025-09-10 00:40:46.936 [INFO][3488] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Sep 10 00:40:46.940118 env[1200]: time="2025-09-10T00:40:46.940072360Z" level=info msg="TearDown network for sandbox \"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\" successfully" Sep 10 00:40:46.940248 env[1200]: time="2025-09-10T00:40:46.940205019Z" level=info msg="StopPodSandbox for \"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\" returns successfully" Sep 10 00:40:46.941159 env[1200]: time="2025-09-10T00:40:46.941111180Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-tn66z,Uid:9d11f211-d02b-4887-86fd-f93a2eb25fc1,Namespace:calico-system,Attempt:1,}" Sep 10 00:40:46.943437 systemd[1]: run-netns-cni\x2df9eb1828\x2da06a\x2de2c6\x2d597f\x2db11709df5021.mount: Deactivated successfully. Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { bpf } for pid=3724 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { bpf } for pid=3724 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { perfmon } for pid=3724 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { perfmon } for pid=3724 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { perfmon } for pid=3724 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { perfmon } for pid=3724 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { perfmon } for pid=3724 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { bpf } for pid=3724 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { bpf } for pid=3724 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit: BPF prog-id=154 op=LOAD Sep 10 00:40:47.029000 audit[3724]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe57c01fc0 a2=98 a3=1fffffffffffffff items=0 ppid=3525 pid=3724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.029000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 10 00:40:47.029000 audit: BPF prog-id=154 op=UNLOAD Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { bpf } for pid=3724 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { bpf } for pid=3724 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { perfmon } for pid=3724 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { perfmon } for pid=3724 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { perfmon } for pid=3724 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { perfmon } for pid=3724 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { perfmon } for pid=3724 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { bpf } for pid=3724 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { bpf } for pid=3724 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit: BPF prog-id=155 op=LOAD Sep 10 00:40:47.029000 audit[3724]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe57c01ea0 a2=94 a3=3 items=0 ppid=3525 pid=3724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.029000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 10 00:40:47.029000 audit: BPF prog-id=155 op=UNLOAD Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { bpf } for pid=3724 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { bpf } for pid=3724 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { perfmon } for pid=3724 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { perfmon } for pid=3724 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { perfmon } for pid=3724 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { perfmon } for pid=3724 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { perfmon } for pid=3724 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { bpf } for pid=3724 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { bpf } for pid=3724 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit: BPF prog-id=156 op=LOAD Sep 10 00:40:47.029000 audit[3724]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe57c01ee0 a2=94 a3=7ffe57c020c0 items=0 ppid=3525 pid=3724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.029000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 10 00:40:47.029000 audit: BPF prog-id=156 op=UNLOAD Sep 10 00:40:47.029000 audit[3724]: AVC avc: denied { perfmon } for pid=3724 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.029000 audit[3724]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffe57c01fb0 a2=50 a3=a000000085 items=0 ppid=3525 pid=3724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.029000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 10 00:40:47.030000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.030000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.030000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.030000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.030000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.030000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.030000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.030000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.030000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.030000 audit: BPF prog-id=157 op=LOAD Sep 10 00:40:47.030000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd501ead50 a2=98 a3=3 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.030000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.031000 audit: BPF prog-id=157 op=UNLOAD Sep 10 00:40:47.031000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.031000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.031000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.031000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.031000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.031000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.031000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.031000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.031000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.031000 audit: BPF prog-id=158 op=LOAD Sep 10 00:40:47.031000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd501eab40 a2=94 a3=54428f items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.031000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.031000 audit: BPF prog-id=158 op=UNLOAD Sep 10 00:40:47.031000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.031000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.031000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.031000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.031000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.031000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.031000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.031000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.031000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.031000 audit: BPF prog-id=159 op=LOAD Sep 10 00:40:47.031000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd501eab70 a2=94 a3=2 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.031000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.031000 audit: BPF prog-id=159 op=UNLOAD Sep 10 00:40:47.139000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.139000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.139000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.139000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.139000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.139000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.139000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.139000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.139000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.139000 audit: BPF prog-id=160 op=LOAD Sep 10 00:40:47.139000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd501eaa30 a2=94 a3=1 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.139000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.139000 audit: BPF prog-id=160 op=UNLOAD Sep 10 00:40:47.139000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.139000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffd501eab00 a2=50 a3=7ffd501eabe0 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.139000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.149000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.149000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd501eaa40 a2=28 a3=0 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.149000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.149000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.149000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd501eaa70 a2=28 a3=0 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.149000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.149000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.149000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd501ea980 a2=28 a3=0 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.149000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.149000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.149000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd501eaa90 a2=28 a3=0 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.149000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.149000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.149000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd501eaa70 a2=28 a3=0 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.149000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.149000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.149000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd501eaa60 a2=28 a3=0 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.149000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.149000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.149000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd501eaa90 a2=28 a3=0 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.149000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.149000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.149000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd501eaa70 a2=28 a3=0 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.149000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.149000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.149000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd501eaa90 a2=28 a3=0 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.149000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.149000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.149000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd501eaa60 a2=28 a3=0 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.149000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.149000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.149000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd501eaad0 a2=28 a3=0 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.149000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffd501ea880 a2=50 a3=1 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.150000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit: BPF prog-id=161 op=LOAD Sep 10 00:40:47.150000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd501ea880 a2=94 a3=5 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.150000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.150000 audit: BPF prog-id=161 op=UNLOAD Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffd501ea930 a2=50 a3=1 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.150000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffd501eaa50 a2=4 a3=38 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.150000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { confidentiality } for pid=3725 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 00:40:47.150000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd501eaaa0 a2=94 a3=6 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.150000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.150000 audit[3725]: AVC avc: denied { confidentiality } for pid=3725 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 00:40:47.150000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd501ea250 a2=94 a3=88 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.150000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.151000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.151000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.151000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.151000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.151000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.151000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.151000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.151000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.151000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.151000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.151000 audit[3725]: AVC avc: denied { confidentiality } for pid=3725 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 00:40:47.151000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd501ea250 a2=94 a3=88 items=0 ppid=3525 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.151000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit: BPF prog-id=162 op=LOAD Sep 10 00:40:47.160000 audit[3728]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd026a16b0 a2=98 a3=1999999999999999 items=0 ppid=3525 pid=3728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.160000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 10 00:40:47.160000 audit: BPF prog-id=162 op=UNLOAD Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit: BPF prog-id=163 op=LOAD Sep 10 00:40:47.160000 audit[3728]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd026a1590 a2=94 a3=ffff items=0 ppid=3525 pid=3728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.160000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 10 00:40:47.160000 audit: BPF prog-id=163 op=UNLOAD Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { perfmon } for pid=3728 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit[3728]: AVC avc: denied { bpf } for pid=3728 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.160000 audit: BPF prog-id=164 op=LOAD Sep 10 00:40:47.160000 audit[3728]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd026a15d0 a2=94 a3=7ffd026a17b0 items=0 ppid=3525 pid=3728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.160000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 10 00:40:47.160000 audit: BPF prog-id=164 op=UNLOAD Sep 10 00:40:47.247397 systemd-networkd[1026]: vxlan.calico: Link UP Sep 10 00:40:47.247408 systemd-networkd[1026]: vxlan.calico: Gained carrier Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit: BPF prog-id=165 op=LOAD Sep 10 00:40:47.266000 audit[3752]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd68be73a0 a2=98 a3=0 items=0 ppid=3525 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.266000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:40:47.266000 audit: BPF prog-id=165 op=UNLOAD Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit: BPF prog-id=166 op=LOAD Sep 10 00:40:47.266000 audit[3752]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd68be71b0 a2=94 a3=54428f items=0 ppid=3525 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.266000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:40:47.266000 audit: BPF prog-id=166 op=UNLOAD Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.266000 audit: BPF prog-id=167 op=LOAD Sep 10 00:40:47.266000 audit[3752]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd68be71e0 a2=94 a3=2 items=0 ppid=3525 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.266000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:40:47.267000 audit: BPF prog-id=167 op=UNLOAD Sep 10 00:40:47.267000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.267000 audit[3752]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd68be70b0 a2=28 a3=0 items=0 ppid=3525 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.267000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:40:47.267000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.267000 audit[3752]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd68be70e0 a2=28 a3=0 items=0 ppid=3525 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.267000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:40:47.267000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.267000 audit[3752]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd68be6ff0 a2=28 a3=0 items=0 ppid=3525 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.267000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:40:47.267000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.267000 audit[3752]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd68be7100 a2=28 a3=0 items=0 ppid=3525 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.267000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:40:47.267000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.267000 audit[3752]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd68be70e0 a2=28 a3=0 items=0 ppid=3525 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.267000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:40:47.267000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.267000 audit[3752]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd68be70d0 a2=28 a3=0 items=0 ppid=3525 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.267000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:40:47.267000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.267000 audit[3752]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd68be7100 a2=28 a3=0 items=0 ppid=3525 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.267000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:40:47.267000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.267000 audit[3752]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd68be70e0 a2=28 a3=0 items=0 ppid=3525 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.267000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:40:47.267000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.267000 audit[3752]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd68be7100 a2=28 a3=0 items=0 ppid=3525 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.267000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:40:47.267000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.267000 audit[3752]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd68be70d0 a2=28 a3=0 items=0 ppid=3525 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.267000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:40:47.267000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.267000 audit[3752]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd68be7140 a2=28 a3=0 items=0 ppid=3525 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.267000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:40:47.267000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.267000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.267000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.267000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.267000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.267000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.267000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.267000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.267000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.267000 audit: BPF prog-id=168 op=LOAD Sep 10 00:40:47.267000 audit[3752]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd68be6fb0 a2=94 a3=0 items=0 ppid=3525 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.267000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:40:47.267000 audit: BPF prog-id=168 op=UNLOAD Sep 10 00:40:47.267000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.267000 audit[3752]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffd68be6fa0 a2=50 a3=2800 items=0 ppid=3525 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.267000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:40:47.268000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.268000 audit[3752]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffd68be6fa0 a2=50 a3=2800 items=0 ppid=3525 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.268000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:40:47.268000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.268000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.268000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.268000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.268000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.268000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.268000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.268000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.268000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.268000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.268000 audit: BPF prog-id=169 op=LOAD Sep 10 00:40:47.268000 audit[3752]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd68be67c0 a2=94 a3=2 items=0 ppid=3525 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.268000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:40:47.268000 audit: BPF prog-id=169 op=UNLOAD Sep 10 00:40:47.268000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.268000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.268000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.268000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.268000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.268000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.268000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.268000 audit[3752]: AVC avc: denied { perfmon } for pid=3752 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.268000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.268000 audit[3752]: AVC avc: denied { bpf } for pid=3752 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.268000 audit: BPF prog-id=170 op=LOAD Sep 10 00:40:47.268000 audit[3752]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd68be68c0 a2=94 a3=30 items=0 ppid=3525 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.268000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit: BPF prog-id=171 op=LOAD Sep 10 00:40:47.274000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe0ba0ad70 a2=98 a3=0 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.274000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.274000 audit: BPF prog-id=171 op=UNLOAD Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit: BPF prog-id=172 op=LOAD Sep 10 00:40:47.274000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe0ba0ab60 a2=94 a3=54428f items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.274000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.274000 audit: BPF prog-id=172 op=UNLOAD Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.274000 audit: BPF prog-id=173 op=LOAD Sep 10 00:40:47.274000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe0ba0ab90 a2=94 a3=2 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.274000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.274000 audit: BPF prog-id=173 op=UNLOAD Sep 10 00:40:47.402665 kubelet[1956]: E0910 00:40:47.402614 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:47.403000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.403000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.403000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.403000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.403000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.403000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.403000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.403000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.403000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.403000 audit: BPF prog-id=174 op=LOAD Sep 10 00:40:47.403000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe0ba0aa50 a2=94 a3=1 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.403000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.404000 audit: BPF prog-id=174 op=UNLOAD Sep 10 00:40:47.404000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.404000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffe0ba0ab20 a2=50 a3=7ffe0ba0ac00 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.404000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.415000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.415000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe0ba0aa60 a2=28 a3=0 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.415000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.415000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.415000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe0ba0aa90 a2=28 a3=0 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.415000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.415000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.415000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe0ba0a9a0 a2=28 a3=0 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.415000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.415000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.415000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe0ba0aab0 a2=28 a3=0 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.415000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.415000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.415000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe0ba0aa90 a2=28 a3=0 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.415000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.415000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.415000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe0ba0aa80 a2=28 a3=0 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.415000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.415000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.415000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe0ba0aab0 a2=28 a3=0 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.415000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.415000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.415000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe0ba0aa90 a2=28 a3=0 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.415000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.415000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.415000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe0ba0aab0 a2=28 a3=0 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.415000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.415000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.415000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe0ba0aa80 a2=28 a3=0 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.415000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.415000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.415000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe0ba0aaf0 a2=28 a3=0 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.415000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.415000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.415000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe0ba0a8a0 a2=50 a3=1 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.415000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.415000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.415000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.415000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.415000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.415000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.415000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.415000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.415000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.415000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.415000 audit: BPF prog-id=175 op=LOAD Sep 10 00:40:47.415000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe0ba0a8a0 a2=94 a3=5 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.415000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.416000 audit: BPF prog-id=175 op=UNLOAD Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe0ba0a950 a2=50 a3=1 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.416000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffe0ba0aa70 a2=4 a3=38 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.416000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { confidentiality } for pid=3756 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 00:40:47.416000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe0ba0aac0 a2=94 a3=6 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.416000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { confidentiality } for pid=3756 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 00:40:47.416000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe0ba0a270 a2=94 a3=88 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.416000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { confidentiality } for pid=3756 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 00:40:47.416000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe0ba0a270 a2=94 a3=88 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.416000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.416000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.416000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe0ba0bca0 a2=10 a3=208 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.416000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.417000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.417000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe0ba0bb40 a2=10 a3=3 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.417000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.417000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.417000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe0ba0bae0 a2=10 a3=3 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.417000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.417000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:47.417000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe0ba0bae0 a2=10 a3=7 items=0 ppid=3525 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.417000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 00:40:47.427000 audit: BPF prog-id=170 op=UNLOAD Sep 10 00:40:47.584111 systemd-networkd[1026]: cali4d17ae53ce6: Gained IPv6LL Sep 10 00:40:47.601000 audit[3812]: NETFILTER_CFG table=mangle:103 family=2 entries=16 op=nft_register_chain pid=3812 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:40:47.601000 audit[3812]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffcfc2079c0 a2=0 a3=7ffcfc2079ac items=0 ppid=3525 pid=3812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.601000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:40:47.603000 audit[3808]: NETFILTER_CFG table=raw:104 family=2 entries=21 op=nft_register_chain pid=3808 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:40:47.603000 audit[3808]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffc7a45f900 a2=0 a3=7ffc7a45f8ec items=0 ppid=3525 pid=3808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.603000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:40:47.659000 audit[3809]: NETFILTER_CFG table=nat:105 family=2 entries=15 op=nft_register_chain pid=3809 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:40:47.659000 audit[3809]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffc49ffd670 a2=0 a3=7ffc49ffd65c items=0 ppid=3525 pid=3809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.659000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:40:47.661000 audit[3810]: NETFILTER_CFG table=filter:106 family=2 entries=128 op=nft_register_chain pid=3810 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:40:47.661000 audit[3810]: SYSCALL arch=c000003e syscall=46 success=yes exit=72768 a0=3 a1=7ffc565b6100 a2=0 a3=7ffc565b60ec items=0 ppid=3525 pid=3810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:47.661000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:40:47.743000 audit[3451]: AVC avc: denied { getattr } for pid=3451 comm="coredns" path="cgroup:[4026532797]" dev="nsfs" ino=4026532797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c772,c865 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 10 00:40:47.743000 audit[3451]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c0002ca300 a2=c0001cb898 a3=0 items=0 ppid=3384 pid=3451 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c772,c865 key=(null) Sep 10 00:40:47.743000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 10 00:40:47.854524 systemd-networkd[1026]: cali047615598cf: Link UP Sep 10 00:40:47.856567 systemd-networkd[1026]: cali047615598cf: Gained carrier Sep 10 00:40:47.857174 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali047615598cf: link becomes ready Sep 10 00:40:47.943506 env[1200]: 2025-09-10 00:40:47.422 [INFO][3762] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--tn66z-eth0 csi-node-driver- calico-system 9d11f211-d02b-4887-86fd-f93a2eb25fc1 1026 0 2025-09-10 00:40:19 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:6c96d95cc7 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-tn66z eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali047615598cf [] [] }} ContainerID="89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7" Namespace="calico-system" Pod="csi-node-driver-tn66z" WorkloadEndpoint="localhost-k8s-csi--node--driver--tn66z-" Sep 10 00:40:47.943506 env[1200]: 2025-09-10 00:40:47.422 [INFO][3762] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7" Namespace="calico-system" Pod="csi-node-driver-tn66z" WorkloadEndpoint="localhost-k8s-csi--node--driver--tn66z-eth0" Sep 10 00:40:47.943506 env[1200]: 2025-09-10 00:40:47.464 [INFO][3778] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7" HandleID="k8s-pod-network.89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7" Workload="localhost-k8s-csi--node--driver--tn66z-eth0" Sep 10 00:40:47.943506 env[1200]: 2025-09-10 00:40:47.464 [INFO][3778] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7" HandleID="k8s-pod-network.89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7" Workload="localhost-k8s-csi--node--driver--tn66z-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003bba50), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-tn66z", "timestamp":"2025-09-10 00:40:47.464137571 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 00:40:47.943506 env[1200]: 2025-09-10 00:40:47.464 [INFO][3778] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:47.943506 env[1200]: 2025-09-10 00:40:47.464 [INFO][3778] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:47.943506 env[1200]: 2025-09-10 00:40:47.464 [INFO][3778] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 00:40:47.943506 env[1200]: 2025-09-10 00:40:47.472 [INFO][3778] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7" host="localhost" Sep 10 00:40:47.943506 env[1200]: 2025-09-10 00:40:47.478 [INFO][3778] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 00:40:47.943506 env[1200]: 2025-09-10 00:40:47.483 [INFO][3778] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 00:40:47.943506 env[1200]: 2025-09-10 00:40:47.486 [INFO][3778] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 00:40:47.943506 env[1200]: 2025-09-10 00:40:47.489 [INFO][3778] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 00:40:47.943506 env[1200]: 2025-09-10 00:40:47.489 [INFO][3778] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7" host="localhost" Sep 10 00:40:47.943506 env[1200]: 2025-09-10 00:40:47.491 [INFO][3778] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7 Sep 10 00:40:47.943506 env[1200]: 2025-09-10 00:40:47.676 [INFO][3778] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7" host="localhost" Sep 10 00:40:47.943506 env[1200]: 2025-09-10 00:40:47.847 [INFO][3778] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7" host="localhost" Sep 10 00:40:47.943506 env[1200]: 2025-09-10 00:40:47.847 [INFO][3778] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7" host="localhost" Sep 10 00:40:47.943506 env[1200]: 2025-09-10 00:40:47.848 [INFO][3778] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:47.943506 env[1200]: 2025-09-10 00:40:47.848 [INFO][3778] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7" HandleID="k8s-pod-network.89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7" Workload="localhost-k8s-csi--node--driver--tn66z-eth0" Sep 10 00:40:47.944698 env[1200]: 2025-09-10 00:40:47.851 [INFO][3762] cni-plugin/k8s.go 418: Populated endpoint ContainerID="89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7" Namespace="calico-system" Pod="csi-node-driver-tn66z" WorkloadEndpoint="localhost-k8s-csi--node--driver--tn66z-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--tn66z-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"9d11f211-d02b-4887-86fd-f93a2eb25fc1", ResourceVersion:"1026", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-tn66z", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali047615598cf", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:47.944698 env[1200]: 2025-09-10 00:40:47.851 [INFO][3762] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7" Namespace="calico-system" Pod="csi-node-driver-tn66z" WorkloadEndpoint="localhost-k8s-csi--node--driver--tn66z-eth0" Sep 10 00:40:47.944698 env[1200]: 2025-09-10 00:40:47.851 [INFO][3762] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali047615598cf ContainerID="89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7" Namespace="calico-system" Pod="csi-node-driver-tn66z" WorkloadEndpoint="localhost-k8s-csi--node--driver--tn66z-eth0" Sep 10 00:40:47.944698 env[1200]: 2025-09-10 00:40:47.857 [INFO][3762] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7" Namespace="calico-system" Pod="csi-node-driver-tn66z" WorkloadEndpoint="localhost-k8s-csi--node--driver--tn66z-eth0" Sep 10 00:40:47.944698 env[1200]: 2025-09-10 00:40:47.859 [INFO][3762] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7" Namespace="calico-system" Pod="csi-node-driver-tn66z" WorkloadEndpoint="localhost-k8s-csi--node--driver--tn66z-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--tn66z-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"9d11f211-d02b-4887-86fd-f93a2eb25fc1", ResourceVersion:"1026", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7", Pod:"csi-node-driver-tn66z", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali047615598cf", MAC:"ba:f7:ce:b1:3c:64", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:47.944698 env[1200]: 2025-09-10 00:40:47.940 [INFO][3762] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7" Namespace="calico-system" Pod="csi-node-driver-tn66z" WorkloadEndpoint="localhost-k8s-csi--node--driver--tn66z-eth0" Sep 10 00:40:48.023000 audit[3833]: NETFILTER_CFG table=filter:107 family=2 entries=40 op=nft_register_chain pid=3833 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:40:48.023000 audit[3833]: SYSCALL arch=c000003e syscall=46 success=yes exit=20764 a0=3 a1=7ffe9a734620 a2=0 a3=7ffe9a73460c items=0 ppid=3525 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:48.023000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:40:48.106345 env[1200]: time="2025-09-10T00:40:48.102883600Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:40:48.106345 env[1200]: time="2025-09-10T00:40:48.103319397Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:40:48.106345 env[1200]: time="2025-09-10T00:40:48.103333554Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:40:48.106345 env[1200]: time="2025-09-10T00:40:48.103639729Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7 pid=3840 runtime=io.containerd.runc.v2 Sep 10 00:40:48.134669 systemd[1]: Started cri-containerd-89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7.scope. Sep 10 00:40:48.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.148000 audit: BPF prog-id=176 op=LOAD Sep 10 00:40:48.148000 audit[3851]: AVC avc: denied { bpf } for pid=3851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.148000 audit[3851]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3840 pid=3851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:48.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839303830616236626338326364633464353563376335316239373232 Sep 10 00:40:48.148000 audit[3851]: AVC avc: denied { perfmon } for pid=3851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.148000 audit[3851]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3840 pid=3851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:48.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839303830616236626338326364633464353563376335316239373232 Sep 10 00:40:48.148000 audit[3851]: AVC avc: denied { bpf } for pid=3851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.148000 audit[3851]: AVC avc: denied { bpf } for pid=3851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.148000 audit[3851]: AVC avc: denied { bpf } for pid=3851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.148000 audit[3851]: AVC avc: denied { perfmon } for pid=3851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.148000 audit[3851]: AVC avc: denied { perfmon } for pid=3851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.148000 audit[3851]: AVC avc: denied { perfmon } for pid=3851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.148000 audit[3851]: AVC avc: denied { perfmon } for pid=3851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.148000 audit[3851]: AVC avc: denied { perfmon } for pid=3851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.148000 audit[3851]: AVC avc: denied { bpf } for pid=3851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.148000 audit[3851]: AVC avc: denied { bpf } for pid=3851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.148000 audit: BPF prog-id=177 op=LOAD Sep 10 00:40:48.148000 audit[3851]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c000024b20 items=0 ppid=3840 pid=3851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:48.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839303830616236626338326364633464353563376335316239373232 Sep 10 00:40:48.149000 audit[3851]: AVC avc: denied { bpf } for pid=3851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.149000 audit[3851]: AVC avc: denied { bpf } for pid=3851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.149000 audit[3851]: AVC avc: denied { perfmon } for pid=3851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.149000 audit[3851]: AVC avc: denied { perfmon } for pid=3851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.149000 audit[3851]: AVC avc: denied { perfmon } for pid=3851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.149000 audit[3851]: AVC avc: denied { perfmon } for pid=3851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.149000 audit[3851]: AVC avc: denied { perfmon } for pid=3851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.149000 audit[3851]: AVC avc: denied { bpf } for pid=3851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.149000 audit[3851]: AVC avc: denied { bpf } for pid=3851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.149000 audit: BPF prog-id=178 op=LOAD Sep 10 00:40:48.149000 audit[3851]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000024b68 items=0 ppid=3840 pid=3851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:48.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839303830616236626338326364633464353563376335316239373232 Sep 10 00:40:48.149000 audit: BPF prog-id=178 op=UNLOAD Sep 10 00:40:48.149000 audit: BPF prog-id=177 op=UNLOAD Sep 10 00:40:48.149000 audit[3851]: AVC avc: denied { bpf } for pid=3851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.149000 audit[3851]: AVC avc: denied { bpf } for pid=3851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.149000 audit[3851]: AVC avc: denied { bpf } for pid=3851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.149000 audit[3851]: AVC avc: denied { perfmon } for pid=3851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.149000 audit[3851]: AVC avc: denied { perfmon } for pid=3851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.149000 audit[3851]: AVC avc: denied { perfmon } for pid=3851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.149000 audit[3851]: AVC avc: denied { perfmon } for pid=3851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.149000 audit[3851]: AVC avc: denied { perfmon } for pid=3851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.149000 audit[3851]: AVC avc: denied { bpf } for pid=3851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.149000 audit[3851]: AVC avc: denied { bpf } for pid=3851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.149000 audit: BPF prog-id=179 op=LOAD Sep 10 00:40:48.149000 audit[3851]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c000024f78 items=0 ppid=3840 pid=3851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:48.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839303830616236626338326364633464353563376335316239373232 Sep 10 00:40:48.151370 systemd-resolved[1141]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 00:40:48.162809 env[1200]: time="2025-09-10T00:40:48.162758898Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-tn66z,Uid:9d11f211-d02b-4887-86fd-f93a2eb25fc1,Namespace:calico-system,Attempt:1,} returns sandbox id \"89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7\"" Sep 10 00:40:48.268014 env[1200]: time="2025-09-10T00:40:48.267916748Z" level=info msg="StopPodSandbox for \"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\"" Sep 10 00:40:48.370995 env[1200]: 2025-09-10 00:40:48.324 [INFO][3888] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Sep 10 00:40:48.370995 env[1200]: 2025-09-10 00:40:48.324 [INFO][3888] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" iface="eth0" netns="/var/run/netns/cni-5293a663-36cb-5aad-c514-a49fd35cf530" Sep 10 00:40:48.370995 env[1200]: 2025-09-10 00:40:48.324 [INFO][3888] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" iface="eth0" netns="/var/run/netns/cni-5293a663-36cb-5aad-c514-a49fd35cf530" Sep 10 00:40:48.370995 env[1200]: 2025-09-10 00:40:48.324 [INFO][3888] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" iface="eth0" netns="/var/run/netns/cni-5293a663-36cb-5aad-c514-a49fd35cf530" Sep 10 00:40:48.370995 env[1200]: 2025-09-10 00:40:48.324 [INFO][3888] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Sep 10 00:40:48.370995 env[1200]: 2025-09-10 00:40:48.324 [INFO][3888] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Sep 10 00:40:48.370995 env[1200]: 2025-09-10 00:40:48.351 [INFO][3898] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" HandleID="k8s-pod-network.8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Workload="localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0" Sep 10 00:40:48.370995 env[1200]: 2025-09-10 00:40:48.352 [INFO][3898] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:48.370995 env[1200]: 2025-09-10 00:40:48.352 [INFO][3898] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:48.370995 env[1200]: 2025-09-10 00:40:48.362 [WARNING][3898] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" HandleID="k8s-pod-network.8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Workload="localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0" Sep 10 00:40:48.370995 env[1200]: 2025-09-10 00:40:48.362 [INFO][3898] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" HandleID="k8s-pod-network.8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Workload="localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0" Sep 10 00:40:48.370995 env[1200]: 2025-09-10 00:40:48.365 [INFO][3898] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:48.370995 env[1200]: 2025-09-10 00:40:48.367 [INFO][3888] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Sep 10 00:40:48.373990 env[1200]: time="2025-09-10T00:40:48.371849821Z" level=info msg="TearDown network for sandbox \"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\" successfully" Sep 10 00:40:48.373990 env[1200]: time="2025-09-10T00:40:48.371984644Z" level=info msg="StopPodSandbox for \"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\" returns successfully" Sep 10 00:40:48.373990 env[1200]: time="2025-09-10T00:40:48.372850388Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-585fb9d697-fs8cm,Uid:f4d5d37f-4e25-4fb2-8c58-65edfe9c58e9,Namespace:calico-apiserver,Attempt:1,}" Sep 10 00:40:48.374905 systemd[1]: run-netns-cni\x2d5293a663\x2d36cb\x2d5aad\x2dc514\x2da49fd35cf530.mount: Deactivated successfully. Sep 10 00:40:48.407219 kubelet[1956]: E0910 00:40:48.407177 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:48.434000 audit[3920]: NETFILTER_CFG table=filter:108 family=2 entries=17 op=nft_register_rule pid=3920 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:48.434000 audit[3920]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe5dd022e0 a2=0 a3=7ffe5dd022cc items=0 ppid=2118 pid=3920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:48.434000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:48.441000 audit[3920]: NETFILTER_CFG table=nat:109 family=2 entries=35 op=nft_register_chain pid=3920 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:48.441000 audit[3920]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffe5dd022e0 a2=0 a3=7ffe5dd022cc items=0 ppid=2118 pid=3920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:48.441000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:48.532902 systemd-networkd[1026]: calib229d1e8bb3: Link UP Sep 10 00:40:48.535349 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 10 00:40:48.535451 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib229d1e8bb3: link becomes ready Sep 10 00:40:48.535787 systemd-networkd[1026]: calib229d1e8bb3: Gained carrier Sep 10 00:40:48.552812 env[1200]: 2025-09-10 00:40:48.457 [INFO][3907] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0 calico-apiserver-585fb9d697- calico-apiserver f4d5d37f-4e25-4fb2-8c58-65edfe9c58e9 1055 0 2025-09-10 00:40:16 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:585fb9d697 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-585fb9d697-fs8cm eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calib229d1e8bb3 [] [] }} ContainerID="16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212" Namespace="calico-apiserver" Pod="calico-apiserver-585fb9d697-fs8cm" WorkloadEndpoint="localhost-k8s-calico--apiserver--585fb9d697--fs8cm-" Sep 10 00:40:48.552812 env[1200]: 2025-09-10 00:40:48.457 [INFO][3907] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212" Namespace="calico-apiserver" Pod="calico-apiserver-585fb9d697-fs8cm" WorkloadEndpoint="localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0" Sep 10 00:40:48.552812 env[1200]: 2025-09-10 00:40:48.489 [INFO][3923] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212" HandleID="k8s-pod-network.16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212" Workload="localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0" Sep 10 00:40:48.552812 env[1200]: 2025-09-10 00:40:48.490 [INFO][3923] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212" HandleID="k8s-pod-network.16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212" Workload="localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c9210), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-585fb9d697-fs8cm", "timestamp":"2025-09-10 00:40:48.489594283 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 00:40:48.552812 env[1200]: 2025-09-10 00:40:48.490 [INFO][3923] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:48.552812 env[1200]: 2025-09-10 00:40:48.490 [INFO][3923] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:48.552812 env[1200]: 2025-09-10 00:40:48.490 [INFO][3923] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 00:40:48.552812 env[1200]: 2025-09-10 00:40:48.498 [INFO][3923] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212" host="localhost" Sep 10 00:40:48.552812 env[1200]: 2025-09-10 00:40:48.503 [INFO][3923] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 00:40:48.552812 env[1200]: 2025-09-10 00:40:48.507 [INFO][3923] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 00:40:48.552812 env[1200]: 2025-09-10 00:40:48.509 [INFO][3923] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 00:40:48.552812 env[1200]: 2025-09-10 00:40:48.511 [INFO][3923] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 00:40:48.552812 env[1200]: 2025-09-10 00:40:48.512 [INFO][3923] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212" host="localhost" Sep 10 00:40:48.552812 env[1200]: 2025-09-10 00:40:48.513 [INFO][3923] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212 Sep 10 00:40:48.552812 env[1200]: 2025-09-10 00:40:48.518 [INFO][3923] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212" host="localhost" Sep 10 00:40:48.552812 env[1200]: 2025-09-10 00:40:48.527 [INFO][3923] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212" host="localhost" Sep 10 00:40:48.552812 env[1200]: 2025-09-10 00:40:48.527 [INFO][3923] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212" host="localhost" Sep 10 00:40:48.552812 env[1200]: 2025-09-10 00:40:48.527 [INFO][3923] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:48.552812 env[1200]: 2025-09-10 00:40:48.527 [INFO][3923] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212" HandleID="k8s-pod-network.16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212" Workload="localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0" Sep 10 00:40:48.553681 env[1200]: 2025-09-10 00:40:48.530 [INFO][3907] cni-plugin/k8s.go 418: Populated endpoint ContainerID="16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212" Namespace="calico-apiserver" Pod="calico-apiserver-585fb9d697-fs8cm" WorkloadEndpoint="localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0", GenerateName:"calico-apiserver-585fb9d697-", Namespace:"calico-apiserver", SelfLink:"", UID:"f4d5d37f-4e25-4fb2-8c58-65edfe9c58e9", ResourceVersion:"1055", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"585fb9d697", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-585fb9d697-fs8cm", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib229d1e8bb3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:48.553681 env[1200]: 2025-09-10 00:40:48.530 [INFO][3907] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212" Namespace="calico-apiserver" Pod="calico-apiserver-585fb9d697-fs8cm" WorkloadEndpoint="localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0" Sep 10 00:40:48.553681 env[1200]: 2025-09-10 00:40:48.530 [INFO][3907] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calib229d1e8bb3 ContainerID="16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212" Namespace="calico-apiserver" Pod="calico-apiserver-585fb9d697-fs8cm" WorkloadEndpoint="localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0" Sep 10 00:40:48.553681 env[1200]: 2025-09-10 00:40:48.536 [INFO][3907] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212" Namespace="calico-apiserver" Pod="calico-apiserver-585fb9d697-fs8cm" WorkloadEndpoint="localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0" Sep 10 00:40:48.553681 env[1200]: 2025-09-10 00:40:48.537 [INFO][3907] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212" Namespace="calico-apiserver" Pod="calico-apiserver-585fb9d697-fs8cm" WorkloadEndpoint="localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0", GenerateName:"calico-apiserver-585fb9d697-", Namespace:"calico-apiserver", SelfLink:"", UID:"f4d5d37f-4e25-4fb2-8c58-65edfe9c58e9", ResourceVersion:"1055", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"585fb9d697", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212", Pod:"calico-apiserver-585fb9d697-fs8cm", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib229d1e8bb3", MAC:"e6:b6:30:58:05:dc", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:48.553681 env[1200]: 2025-09-10 00:40:48.548 [INFO][3907] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212" Namespace="calico-apiserver" Pod="calico-apiserver-585fb9d697-fs8cm" WorkloadEndpoint="localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0" Sep 10 00:40:48.563675 env[1200]: time="2025-09-10T00:40:48.563574683Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:40:48.563985 env[1200]: time="2025-09-10T00:40:48.563907407Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:40:48.564149 env[1200]: time="2025-09-10T00:40:48.564122020Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:40:48.564509 env[1200]: time="2025-09-10T00:40:48.564479911Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212 pid=3949 runtime=io.containerd.runc.v2 Sep 10 00:40:48.564000 audit[3953]: NETFILTER_CFG table=filter:110 family=2 entries=58 op=nft_register_chain pid=3953 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:40:48.564000 audit[3953]: SYSCALL arch=c000003e syscall=46 success=yes exit=30584 a0=3 a1=7fff719beef0 a2=0 a3=7fff719beedc items=0 ppid=3525 pid=3953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:48.564000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:40:48.576309 systemd[1]: Started cri-containerd-16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212.scope. Sep 10 00:40:48.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit: BPF prog-id=180 op=LOAD Sep 10 00:40:48.592000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit[3960]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3949 pid=3960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:48.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136623062383362636464386238316539623862623832313132373134 Sep 10 00:40:48.592000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit[3960]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3949 pid=3960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:48.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136623062383362636464386238316539623862623832313132373134 Sep 10 00:40:48.592000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.592000 audit: BPF prog-id=181 op=LOAD Sep 10 00:40:48.592000 audit[3960]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000d7ce0 items=0 ppid=3949 pid=3960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:48.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136623062383362636464386238316539623862623832313132373134 Sep 10 00:40:48.593000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.593000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.593000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.593000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.593000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.593000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.593000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.593000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.593000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.593000 audit: BPF prog-id=182 op=LOAD Sep 10 00:40:48.593000 audit[3960]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000d7d28 items=0 ppid=3949 pid=3960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:48.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136623062383362636464386238316539623862623832313132373134 Sep 10 00:40:48.593000 audit: BPF prog-id=182 op=UNLOAD Sep 10 00:40:48.593000 audit: BPF prog-id=181 op=UNLOAD Sep 10 00:40:48.593000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.593000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.593000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.593000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.593000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.593000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.593000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.593000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.593000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.593000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:48.593000 audit: BPF prog-id=183 op=LOAD Sep 10 00:40:48.593000 audit[3960]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003da138 items=0 ppid=3949 pid=3960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:48.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136623062383362636464386238316539623862623832313132373134 Sep 10 00:40:48.595069 systemd-resolved[1141]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 00:40:48.607162 systemd-networkd[1026]: vxlan.calico: Gained IPv6LL Sep 10 00:40:48.624053 env[1200]: time="2025-09-10T00:40:48.623871882Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-585fb9d697-fs8cm,Uid:f4d5d37f-4e25-4fb2-8c58-65edfe9c58e9,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212\"" Sep 10 00:40:48.958837 env[1200]: time="2025-09-10T00:40:48.958683878Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:48.961354 env[1200]: time="2025-09-10T00:40:48.961309736Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9a4eedeed4a531acefb7f5d0a1b7e3856b1a9a24d9e7d25deef2134d7a734c2d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:48.977920 env[1200]: time="2025-09-10T00:40:48.977858363Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:49.089680 env[1200]: time="2025-09-10T00:40:49.089595974Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:e7113761fc7633d515882f0d48b5c8d0b8e62f3f9d34823f2ee194bb16d2ec44,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:49.090321 env[1200]: time="2025-09-10T00:40:49.090279858Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\" returns image reference \"sha256:9a4eedeed4a531acefb7f5d0a1b7e3856b1a9a24d9e7d25deef2134d7a734c2d\"" Sep 10 00:40:49.091715 env[1200]: time="2025-09-10T00:40:49.091697398Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\"" Sep 10 00:40:49.162256 env[1200]: time="2025-09-10T00:40:49.162198902Z" level=info msg="CreateContainer within sandbox \"aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Sep 10 00:40:49.262188 env[1200]: time="2025-09-10T00:40:49.262119416Z" level=info msg="CreateContainer within sandbox \"aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"e3eed447b32a15f02fc424248659a4a0af8ef109a1a80c19b79b37f6a1c9f509\"" Sep 10 00:40:49.262881 env[1200]: time="2025-09-10T00:40:49.262834578Z" level=info msg="StartContainer for \"e3eed447b32a15f02fc424248659a4a0af8ef109a1a80c19b79b37f6a1c9f509\"" Sep 10 00:40:49.268018 env[1200]: time="2025-09-10T00:40:49.267969765Z" level=info msg="StopPodSandbox for \"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\"" Sep 10 00:40:49.268388 env[1200]: time="2025-09-10T00:40:49.268022875Z" level=info msg="StopPodSandbox for \"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\"" Sep 10 00:40:49.268691 env[1200]: time="2025-09-10T00:40:49.268072588Z" level=info msg="StopPodSandbox for \"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\"" Sep 10 00:40:49.268873 env[1200]: time="2025-09-10T00:40:49.268161906Z" level=info msg="StopPodSandbox for \"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\"" Sep 10 00:40:49.299614 systemd[1]: Started cri-containerd-e3eed447b32a15f02fc424248659a4a0af8ef109a1a80c19b79b37f6a1c9f509.scope. Sep 10 00:40:49.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.324000 audit: BPF prog-id=184 op=LOAD Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3660 pid=4024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:49.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533656564343437623332613135663032666334323432343836353961 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3660 pid=4024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:49.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533656564343437623332613135663032666334323432343836353961 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit: BPF prog-id=185 op=LOAD Sep 10 00:40:49.325000 audit[4024]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000320f00 items=0 ppid=3660 pid=4024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:49.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533656564343437623332613135663032666334323432343836353961 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit: BPF prog-id=186 op=LOAD Sep 10 00:40:49.325000 audit[4024]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000320f48 items=0 ppid=3660 pid=4024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:49.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533656564343437623332613135663032666334323432343836353961 Sep 10 00:40:49.325000 audit: BPF prog-id=186 op=UNLOAD Sep 10 00:40:49.325000 audit: BPF prog-id=185 op=UNLOAD Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:49.325000 audit: BPF prog-id=187 op=LOAD Sep 10 00:40:49.325000 audit[4024]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000321358 items=0 ppid=3660 pid=4024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:49.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533656564343437623332613135663032666334323432343836353961 Sep 10 00:40:49.383459 env[1200]: time="2025-09-10T00:40:49.383344961Z" level=info msg="StartContainer for \"e3eed447b32a15f02fc424248659a4a0af8ef109a1a80c19b79b37f6a1c9f509\" returns successfully" Sep 10 00:40:49.391000 audit[4062]: AVC avc: denied { search } for pid=4062 comm="nginx" name="crypto" dev="proc" ino=28102 scontext=system_u:system_r:svirt_lxc_net_t:s0:c396,c963 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Sep 10 00:40:49.391000 audit[4062]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fa0630d0728 a2=0 a3=0 items=0 ppid=3660 pid=4062 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c396,c963 key=(null) Sep 10 00:40:49.391000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Sep 10 00:40:49.416067 kubelet[1956]: E0910 00:40:49.415390 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:49.462734 env[1200]: 2025-09-10 00:40:49.361 [INFO][4054] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Sep 10 00:40:49.462734 env[1200]: 2025-09-10 00:40:49.361 [INFO][4054] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" iface="eth0" netns="/var/run/netns/cni-8e71d2e6-1001-4103-495f-159592cf9498" Sep 10 00:40:49.462734 env[1200]: 2025-09-10 00:40:49.361 [INFO][4054] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" iface="eth0" netns="/var/run/netns/cni-8e71d2e6-1001-4103-495f-159592cf9498" Sep 10 00:40:49.462734 env[1200]: 2025-09-10 00:40:49.361 [INFO][4054] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" iface="eth0" netns="/var/run/netns/cni-8e71d2e6-1001-4103-495f-159592cf9498" Sep 10 00:40:49.462734 env[1200]: 2025-09-10 00:40:49.361 [INFO][4054] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Sep 10 00:40:49.462734 env[1200]: 2025-09-10 00:40:49.361 [INFO][4054] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Sep 10 00:40:49.462734 env[1200]: 2025-09-10 00:40:49.432 [INFO][4092] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" HandleID="k8s-pod-network.642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Workload="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" Sep 10 00:40:49.462734 env[1200]: 2025-09-10 00:40:49.432 [INFO][4092] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:49.462734 env[1200]: 2025-09-10 00:40:49.432 [INFO][4092] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:49.462734 env[1200]: 2025-09-10 00:40:49.455 [WARNING][4092] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" HandleID="k8s-pod-network.642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Workload="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" Sep 10 00:40:49.462734 env[1200]: 2025-09-10 00:40:49.455 [INFO][4092] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" HandleID="k8s-pod-network.642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Workload="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" Sep 10 00:40:49.462734 env[1200]: 2025-09-10 00:40:49.458 [INFO][4092] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:49.462734 env[1200]: 2025-09-10 00:40:49.460 [INFO][4054] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Sep 10 00:40:49.463448 env[1200]: time="2025-09-10T00:40:49.463254792Z" level=info msg="TearDown network for sandbox \"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\" successfully" Sep 10 00:40:49.463506 env[1200]: time="2025-09-10T00:40:49.463482028Z" level=info msg="StopPodSandbox for \"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\" returns successfully" Sep 10 00:40:49.465363 env[1200]: time="2025-09-10T00:40:49.465316110Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-694cb88886-v9hh9,Uid:e48b1739-8cbf-43e6-b074-f445c5aaa2ae,Namespace:calico-apiserver,Attempt:1,}" Sep 10 00:40:49.473076 env[1200]: 2025-09-10 00:40:49.390 [INFO][4037] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Sep 10 00:40:49.473076 env[1200]: 2025-09-10 00:40:49.390 [INFO][4037] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" iface="eth0" netns="/var/run/netns/cni-c18ed60f-e525-0fee-9ad5-72230098323d" Sep 10 00:40:49.473076 env[1200]: 2025-09-10 00:40:49.390 [INFO][4037] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" iface="eth0" netns="/var/run/netns/cni-c18ed60f-e525-0fee-9ad5-72230098323d" Sep 10 00:40:49.473076 env[1200]: 2025-09-10 00:40:49.390 [INFO][4037] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" iface="eth0" netns="/var/run/netns/cni-c18ed60f-e525-0fee-9ad5-72230098323d" Sep 10 00:40:49.473076 env[1200]: 2025-09-10 00:40:49.390 [INFO][4037] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Sep 10 00:40:49.473076 env[1200]: 2025-09-10 00:40:49.390 [INFO][4037] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Sep 10 00:40:49.473076 env[1200]: 2025-09-10 00:40:49.437 [INFO][4104] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" HandleID="k8s-pod-network.97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Workload="localhost-k8s-goldmane--54d579b49d--pbxhz-eth0" Sep 10 00:40:49.473076 env[1200]: 2025-09-10 00:40:49.437 [INFO][4104] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:49.473076 env[1200]: 2025-09-10 00:40:49.457 [INFO][4104] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:49.473076 env[1200]: 2025-09-10 00:40:49.465 [WARNING][4104] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" HandleID="k8s-pod-network.97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Workload="localhost-k8s-goldmane--54d579b49d--pbxhz-eth0" Sep 10 00:40:49.473076 env[1200]: 2025-09-10 00:40:49.465 [INFO][4104] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" HandleID="k8s-pod-network.97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Workload="localhost-k8s-goldmane--54d579b49d--pbxhz-eth0" Sep 10 00:40:49.473076 env[1200]: 2025-09-10 00:40:49.467 [INFO][4104] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:49.473076 env[1200]: 2025-09-10 00:40:49.470 [INFO][4037] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Sep 10 00:40:49.474207 env[1200]: time="2025-09-10T00:40:49.474154586Z" level=info msg="TearDown network for sandbox \"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\" successfully" Sep 10 00:40:49.474452 env[1200]: time="2025-09-10T00:40:49.474425425Z" level=info msg="StopPodSandbox for \"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\" returns successfully" Sep 10 00:40:49.475688 env[1200]: time="2025-09-10T00:40:49.475640424Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-pbxhz,Uid:dbcb3f8c-1da8-4226-977e-9eb4d59cd42f,Namespace:calico-system,Attempt:1,}" Sep 10 00:40:49.481464 env[1200]: 2025-09-10 00:40:49.409 [INFO][4042] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Sep 10 00:40:49.481464 env[1200]: 2025-09-10 00:40:49.410 [INFO][4042] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" iface="eth0" netns="/var/run/netns/cni-536f2e47-aa51-4af7-e9ea-60005f34da09" Sep 10 00:40:49.481464 env[1200]: 2025-09-10 00:40:49.410 [INFO][4042] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" iface="eth0" netns="/var/run/netns/cni-536f2e47-aa51-4af7-e9ea-60005f34da09" Sep 10 00:40:49.481464 env[1200]: 2025-09-10 00:40:49.410 [INFO][4042] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" iface="eth0" netns="/var/run/netns/cni-536f2e47-aa51-4af7-e9ea-60005f34da09" Sep 10 00:40:49.481464 env[1200]: 2025-09-10 00:40:49.411 [INFO][4042] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Sep 10 00:40:49.481464 env[1200]: 2025-09-10 00:40:49.411 [INFO][4042] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Sep 10 00:40:49.481464 env[1200]: 2025-09-10 00:40:49.455 [INFO][4113] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" HandleID="k8s-pod-network.a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Workload="localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0" Sep 10 00:40:49.481464 env[1200]: 2025-09-10 00:40:49.455 [INFO][4113] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:49.481464 env[1200]: 2025-09-10 00:40:49.467 [INFO][4113] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:49.481464 env[1200]: 2025-09-10 00:40:49.474 [WARNING][4113] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" HandleID="k8s-pod-network.a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Workload="localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0" Sep 10 00:40:49.481464 env[1200]: 2025-09-10 00:40:49.474 [INFO][4113] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" HandleID="k8s-pod-network.a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Workload="localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0" Sep 10 00:40:49.481464 env[1200]: 2025-09-10 00:40:49.476 [INFO][4113] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:49.481464 env[1200]: 2025-09-10 00:40:49.478 [INFO][4042] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Sep 10 00:40:49.482149 env[1200]: time="2025-09-10T00:40:49.482096580Z" level=info msg="TearDown network for sandbox \"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\" successfully" Sep 10 00:40:49.482149 env[1200]: time="2025-09-10T00:40:49.482124623Z" level=info msg="StopPodSandbox for \"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\" returns successfully" Sep 10 00:40:49.482925 env[1200]: time="2025-09-10T00:40:49.482873708Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6dbd5f8568-lbcfq,Uid:70a96d34-f4e7-4ed6-9a70-692bda4903ef,Namespace:calico-system,Attempt:1,}" Sep 10 00:40:49.503196 systemd-networkd[1026]: cali047615598cf: Gained IPv6LL Sep 10 00:40:49.531660 env[1200]: 2025-09-10 00:40:49.419 [INFO][4072] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Sep 10 00:40:49.531660 env[1200]: 2025-09-10 00:40:49.420 [INFO][4072] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" iface="eth0" netns="/var/run/netns/cni-ac1723ac-1b29-bbe5-8a0c-829bcb68badb" Sep 10 00:40:49.531660 env[1200]: 2025-09-10 00:40:49.420 [INFO][4072] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" iface="eth0" netns="/var/run/netns/cni-ac1723ac-1b29-bbe5-8a0c-829bcb68badb" Sep 10 00:40:49.531660 env[1200]: 2025-09-10 00:40:49.421 [INFO][4072] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" iface="eth0" netns="/var/run/netns/cni-ac1723ac-1b29-bbe5-8a0c-829bcb68badb" Sep 10 00:40:49.531660 env[1200]: 2025-09-10 00:40:49.421 [INFO][4072] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Sep 10 00:40:49.531660 env[1200]: 2025-09-10 00:40:49.421 [INFO][4072] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Sep 10 00:40:49.531660 env[1200]: 2025-09-10 00:40:49.460 [INFO][4122] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" HandleID="k8s-pod-network.df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Workload="localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0" Sep 10 00:40:49.531660 env[1200]: 2025-09-10 00:40:49.460 [INFO][4122] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:49.531660 env[1200]: 2025-09-10 00:40:49.476 [INFO][4122] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:49.531660 env[1200]: 2025-09-10 00:40:49.485 [WARNING][4122] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" HandleID="k8s-pod-network.df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Workload="localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0" Sep 10 00:40:49.531660 env[1200]: 2025-09-10 00:40:49.485 [INFO][4122] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" HandleID="k8s-pod-network.df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Workload="localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0" Sep 10 00:40:49.531660 env[1200]: 2025-09-10 00:40:49.524 [INFO][4122] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:49.531660 env[1200]: 2025-09-10 00:40:49.527 [INFO][4072] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Sep 10 00:40:49.531660 env[1200]: time="2025-09-10T00:40:49.529772260Z" level=info msg="TearDown network for sandbox \"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\" successfully" Sep 10 00:40:49.531660 env[1200]: time="2025-09-10T00:40:49.529823446Z" level=info msg="StopPodSandbox for \"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\" returns successfully" Sep 10 00:40:49.531660 env[1200]: time="2025-09-10T00:40:49.531215248Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-wj5kf,Uid:22301409-d6d8-4292-99ff-10eb88dc10dd,Namespace:kube-system,Attempt:1,}" Sep 10 00:40:49.532200 kubelet[1956]: E0910 00:40:49.530472 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:49.673749 systemd[1]: run-containerd-runc-k8s.io-e3eed447b32a15f02fc424248659a4a0af8ef109a1a80c19b79b37f6a1c9f509-runc.12X9R5.mount: Deactivated successfully. Sep 10 00:40:49.673843 systemd[1]: run-netns-cni\x2dc18ed60f\x2de525\x2d0fee\x2d9ad5\x2d72230098323d.mount: Deactivated successfully. Sep 10 00:40:49.673903 systemd[1]: run-netns-cni\x2d536f2e47\x2daa51\x2d4af7\x2de9ea\x2d60005f34da09.mount: Deactivated successfully. Sep 10 00:40:49.673965 systemd[1]: run-netns-cni\x2d8e71d2e6\x2d1001\x2d4103\x2d495f\x2d159592cf9498.mount: Deactivated successfully. Sep 10 00:40:49.674013 systemd[1]: run-netns-cni\x2dac1723ac\x2d1b29\x2dbbe5\x2d8a0c\x2d829bcb68badb.mount: Deactivated successfully. Sep 10 00:40:49.951889 systemd-networkd[1026]: cali961d5ee6476: Link UP Sep 10 00:40:49.954284 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 10 00:40:49.954343 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali961d5ee6476: link becomes ready Sep 10 00:40:49.954419 systemd-networkd[1026]: cali961d5ee6476: Gained carrier Sep 10 00:40:49.967355 env[1200]: 2025-09-10 00:40:49.844 [INFO][4149] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0 calico-apiserver-694cb88886- calico-apiserver e48b1739-8cbf-43e6-b074-f445c5aaa2ae 1079 0 2025-09-10 00:40:15 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:694cb88886 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-694cb88886-v9hh9 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali961d5ee6476 [] [] }} ContainerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" Namespace="calico-apiserver" Pod="calico-apiserver-694cb88886-v9hh9" WorkloadEndpoint="localhost-k8s-calico--apiserver--694cb88886--v9hh9-" Sep 10 00:40:49.967355 env[1200]: 2025-09-10 00:40:49.844 [INFO][4149] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" Namespace="calico-apiserver" Pod="calico-apiserver-694cb88886-v9hh9" WorkloadEndpoint="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" Sep 10 00:40:49.967355 env[1200]: 2025-09-10 00:40:49.884 [INFO][4193] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" HandleID="k8s-pod-network.8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" Workload="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" Sep 10 00:40:49.967355 env[1200]: 2025-09-10 00:40:49.885 [INFO][4193] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" HandleID="k8s-pod-network.8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" Workload="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002df5f0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-694cb88886-v9hh9", "timestamp":"2025-09-10 00:40:49.884764858 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 00:40:49.967355 env[1200]: 2025-09-10 00:40:49.885 [INFO][4193] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:49.967355 env[1200]: 2025-09-10 00:40:49.885 [INFO][4193] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:49.967355 env[1200]: 2025-09-10 00:40:49.885 [INFO][4193] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 00:40:49.967355 env[1200]: 2025-09-10 00:40:49.893 [INFO][4193] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" host="localhost" Sep 10 00:40:49.967355 env[1200]: 2025-09-10 00:40:49.900 [INFO][4193] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 00:40:49.967355 env[1200]: 2025-09-10 00:40:49.914 [INFO][4193] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 00:40:49.967355 env[1200]: 2025-09-10 00:40:49.917 [INFO][4193] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 00:40:49.967355 env[1200]: 2025-09-10 00:40:49.922 [INFO][4193] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 00:40:49.967355 env[1200]: 2025-09-10 00:40:49.922 [INFO][4193] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" host="localhost" Sep 10 00:40:49.967355 env[1200]: 2025-09-10 00:40:49.925 [INFO][4193] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963 Sep 10 00:40:49.967355 env[1200]: 2025-09-10 00:40:49.931 [INFO][4193] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" host="localhost" Sep 10 00:40:49.967355 env[1200]: 2025-09-10 00:40:49.938 [INFO][4193] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" host="localhost" Sep 10 00:40:49.967355 env[1200]: 2025-09-10 00:40:49.938 [INFO][4193] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" host="localhost" Sep 10 00:40:49.967355 env[1200]: 2025-09-10 00:40:49.938 [INFO][4193] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:49.967355 env[1200]: 2025-09-10 00:40:49.938 [INFO][4193] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" HandleID="k8s-pod-network.8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" Workload="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" Sep 10 00:40:49.968246 env[1200]: 2025-09-10 00:40:49.942 [INFO][4149] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" Namespace="calico-apiserver" Pod="calico-apiserver-694cb88886-v9hh9" WorkloadEndpoint="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0", GenerateName:"calico-apiserver-694cb88886-", Namespace:"calico-apiserver", SelfLink:"", UID:"e48b1739-8cbf-43e6-b074-f445c5aaa2ae", ResourceVersion:"1079", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"694cb88886", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-694cb88886-v9hh9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali961d5ee6476", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:49.968246 env[1200]: 2025-09-10 00:40:49.942 [INFO][4149] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" Namespace="calico-apiserver" Pod="calico-apiserver-694cb88886-v9hh9" WorkloadEndpoint="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" Sep 10 00:40:49.968246 env[1200]: 2025-09-10 00:40:49.942 [INFO][4149] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali961d5ee6476 ContainerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" Namespace="calico-apiserver" Pod="calico-apiserver-694cb88886-v9hh9" WorkloadEndpoint="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" Sep 10 00:40:49.968246 env[1200]: 2025-09-10 00:40:49.954 [INFO][4149] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" Namespace="calico-apiserver" Pod="calico-apiserver-694cb88886-v9hh9" WorkloadEndpoint="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" Sep 10 00:40:49.968246 env[1200]: 2025-09-10 00:40:49.955 [INFO][4149] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" Namespace="calico-apiserver" Pod="calico-apiserver-694cb88886-v9hh9" WorkloadEndpoint="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0", GenerateName:"calico-apiserver-694cb88886-", Namespace:"calico-apiserver", SelfLink:"", UID:"e48b1739-8cbf-43e6-b074-f445c5aaa2ae", ResourceVersion:"1079", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"694cb88886", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963", Pod:"calico-apiserver-694cb88886-v9hh9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali961d5ee6476", MAC:"fa:ac:cf:02:fa:25", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:49.968246 env[1200]: 2025-09-10 00:40:49.965 [INFO][4149] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" Namespace="calico-apiserver" Pod="calico-apiserver-694cb88886-v9hh9" WorkloadEndpoint="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" Sep 10 00:40:49.978000 audit[4236]: NETFILTER_CFG table=filter:111 family=2 entries=49 op=nft_register_chain pid=4236 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:40:49.978000 audit[4236]: SYSCALL arch=c000003e syscall=46 success=yes exit=25452 a0=3 a1=7ffde925bcd0 a2=0 a3=7ffde925bcbc items=0 ppid=3525 pid=4236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:49.978000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:40:50.066234 env[1200]: time="2025-09-10T00:40:50.066150726Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:40:50.066465 env[1200]: time="2025-09-10T00:40:50.066198235Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:40:50.066465 env[1200]: time="2025-09-10T00:40:50.066209315Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:40:50.066584 env[1200]: time="2025-09-10T00:40:50.066525108Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963 pid=4243 runtime=io.containerd.runc.v2 Sep 10 00:40:50.087536 systemd[1]: run-containerd-runc-k8s.io-8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963-runc.RH5xU5.mount: Deactivated successfully. Sep 10 00:40:50.090742 systemd[1]: Started cri-containerd-8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963.scope. Sep 10 00:40:50.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit: BPF prog-id=188 op=LOAD Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4243 pid=4254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865396532376664613664363538303563366638653965363032616366 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4243 pid=4254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865396532376664613664363538303563366638653965363032616366 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit: BPF prog-id=189 op=LOAD Sep 10 00:40:50.105000 audit[4254]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000093360 items=0 ppid=4243 pid=4254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865396532376664613664363538303563366638653965363032616366 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit: BPF prog-id=190 op=LOAD Sep 10 00:40:50.105000 audit[4254]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000933a8 items=0 ppid=4243 pid=4254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865396532376664613664363538303563366638653965363032616366 Sep 10 00:40:50.105000 audit: BPF prog-id=190 op=UNLOAD Sep 10 00:40:50.105000 audit: BPF prog-id=189 op=UNLOAD Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.105000 audit: BPF prog-id=191 op=LOAD Sep 10 00:40:50.105000 audit[4254]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000937b8 items=0 ppid=4243 pid=4254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865396532376664613664363538303563366638653965363032616366 Sep 10 00:40:50.107513 systemd-resolved[1141]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 00:40:50.115786 systemd-networkd[1026]: calic8b2a4655f3: Link UP Sep 10 00:40:50.118634 systemd-networkd[1026]: calic8b2a4655f3: Gained carrier Sep 10 00:40:50.119267 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic8b2a4655f3: link becomes ready Sep 10 00:40:50.133856 env[1200]: 2025-09-10 00:40:49.839 [INFO][4137] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--54d579b49d--pbxhz-eth0 goldmane-54d579b49d- calico-system dbcb3f8c-1da8-4226-977e-9eb4d59cd42f 1081 0 2025-09-10 00:40:19 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:54d579b49d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-54d579b49d-pbxhz eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calic8b2a4655f3 [] [] }} ContainerID="47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee" Namespace="calico-system" Pod="goldmane-54d579b49d-pbxhz" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--pbxhz-" Sep 10 00:40:50.133856 env[1200]: 2025-09-10 00:40:49.839 [INFO][4137] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee" Namespace="calico-system" Pod="goldmane-54d579b49d-pbxhz" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--pbxhz-eth0" Sep 10 00:40:50.133856 env[1200]: 2025-09-10 00:40:49.917 [INFO][4203] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee" HandleID="k8s-pod-network.47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee" Workload="localhost-k8s-goldmane--54d579b49d--pbxhz-eth0" Sep 10 00:40:50.133856 env[1200]: 2025-09-10 00:40:49.917 [INFO][4203] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee" HandleID="k8s-pod-network.47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee" Workload="localhost-k8s-goldmane--54d579b49d--pbxhz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000251010), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-54d579b49d-pbxhz", "timestamp":"2025-09-10 00:40:49.917049875 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 00:40:50.133856 env[1200]: 2025-09-10 00:40:49.917 [INFO][4203] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:50.133856 env[1200]: 2025-09-10 00:40:49.938 [INFO][4203] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:50.133856 env[1200]: 2025-09-10 00:40:49.939 [INFO][4203] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 00:40:50.133856 env[1200]: 2025-09-10 00:40:49.994 [INFO][4203] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee" host="localhost" Sep 10 00:40:50.133856 env[1200]: 2025-09-10 00:40:50.043 [INFO][4203] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 00:40:50.133856 env[1200]: 2025-09-10 00:40:50.063 [INFO][4203] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 00:40:50.133856 env[1200]: 2025-09-10 00:40:50.066 [INFO][4203] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 00:40:50.133856 env[1200]: 2025-09-10 00:40:50.071 [INFO][4203] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 00:40:50.133856 env[1200]: 2025-09-10 00:40:50.071 [INFO][4203] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee" host="localhost" Sep 10 00:40:50.133856 env[1200]: 2025-09-10 00:40:50.073 [INFO][4203] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee Sep 10 00:40:50.133856 env[1200]: 2025-09-10 00:40:50.093 [INFO][4203] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee" host="localhost" Sep 10 00:40:50.133856 env[1200]: 2025-09-10 00:40:50.101 [INFO][4203] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee" host="localhost" Sep 10 00:40:50.133856 env[1200]: 2025-09-10 00:40:50.101 [INFO][4203] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee" host="localhost" Sep 10 00:40:50.133856 env[1200]: 2025-09-10 00:40:50.101 [INFO][4203] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:50.133856 env[1200]: 2025-09-10 00:40:50.101 [INFO][4203] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee" HandleID="k8s-pod-network.47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee" Workload="localhost-k8s-goldmane--54d579b49d--pbxhz-eth0" Sep 10 00:40:50.134596 env[1200]: 2025-09-10 00:40:50.111 [INFO][4137] cni-plugin/k8s.go 418: Populated endpoint ContainerID="47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee" Namespace="calico-system" Pod="goldmane-54d579b49d-pbxhz" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--pbxhz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--54d579b49d--pbxhz-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"dbcb3f8c-1da8-4226-977e-9eb4d59cd42f", ResourceVersion:"1081", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-54d579b49d-pbxhz", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic8b2a4655f3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:50.134596 env[1200]: 2025-09-10 00:40:50.111 [INFO][4137] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee" Namespace="calico-system" Pod="goldmane-54d579b49d-pbxhz" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--pbxhz-eth0" Sep 10 00:40:50.134596 env[1200]: 2025-09-10 00:40:50.111 [INFO][4137] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic8b2a4655f3 ContainerID="47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee" Namespace="calico-system" Pod="goldmane-54d579b49d-pbxhz" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--pbxhz-eth0" Sep 10 00:40:50.134596 env[1200]: 2025-09-10 00:40:50.119 [INFO][4137] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee" Namespace="calico-system" Pod="goldmane-54d579b49d-pbxhz" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--pbxhz-eth0" Sep 10 00:40:50.134596 env[1200]: 2025-09-10 00:40:50.119 [INFO][4137] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee" Namespace="calico-system" Pod="goldmane-54d579b49d-pbxhz" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--pbxhz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--54d579b49d--pbxhz-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"dbcb3f8c-1da8-4226-977e-9eb4d59cd42f", ResourceVersion:"1081", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee", Pod:"goldmane-54d579b49d-pbxhz", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic8b2a4655f3", MAC:"42:94:49:11:67:88", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:50.134596 env[1200]: 2025-09-10 00:40:50.132 [INFO][4137] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee" Namespace="calico-system" Pod="goldmane-54d579b49d-pbxhz" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--pbxhz-eth0" Sep 10 00:40:50.138225 env[1200]: time="2025-09-10T00:40:50.138168059Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-694cb88886-v9hh9,Uid:e48b1739-8cbf-43e6-b074-f445c5aaa2ae,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963\"" Sep 10 00:40:50.143169 systemd-networkd[1026]: calib229d1e8bb3: Gained IPv6LL Sep 10 00:40:50.154097 env[1200]: time="2025-09-10T00:40:50.154018623Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:40:50.154400 env[1200]: time="2025-09-10T00:40:50.154100256Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:40:50.154400 env[1200]: time="2025-09-10T00:40:50.154143317Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:40:50.154400 env[1200]: time="2025-09-10T00:40:50.154323606Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee pid=4293 runtime=io.containerd.runc.v2 Sep 10 00:40:50.155000 audit[4298]: NETFILTER_CFG table=filter:112 family=2 entries=60 op=nft_register_chain pid=4298 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:40:50.155000 audit[4298]: SYSCALL arch=c000003e syscall=46 success=yes exit=29932 a0=3 a1=7ffd167b3810 a2=0 a3=7ffd167b37fc items=0 ppid=3525 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.155000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:40:50.169519 systemd[1]: Started cri-containerd-47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee.scope. Sep 10 00:40:50.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.184000 audit: BPF prog-id=192 op=LOAD Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4293 pid=4303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.185000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437636163326664333961643663353864636538313835306465363139 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4293 pid=4303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.185000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437636163326664333961643663353864636538313835306465363139 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit: BPF prog-id=193 op=LOAD Sep 10 00:40:50.185000 audit[4303]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003c2aa0 items=0 ppid=4293 pid=4303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.185000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437636163326664333961643663353864636538313835306465363139 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit: BPF prog-id=194 op=LOAD Sep 10 00:40:50.185000 audit[4303]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003c2ae8 items=0 ppid=4293 pid=4303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.185000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437636163326664333961643663353864636538313835306465363139 Sep 10 00:40:50.185000 audit: BPF prog-id=194 op=UNLOAD Sep 10 00:40:50.185000 audit: BPF prog-id=193 op=UNLOAD Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.185000 audit: BPF prog-id=195 op=LOAD Sep 10 00:40:50.185000 audit[4303]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003c2ef8 items=0 ppid=4293 pid=4303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.185000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437636163326664333961643663353864636538313835306465363139 Sep 10 00:40:50.187261 systemd-resolved[1141]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 00:40:50.197044 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calibdb3e6fe5d6: link becomes ready Sep 10 00:40:50.197005 systemd-networkd[1026]: calibdb3e6fe5d6: Link UP Sep 10 00:40:50.197189 systemd-networkd[1026]: calibdb3e6fe5d6: Gained carrier Sep 10 00:40:50.221999 env[1200]: time="2025-09-10T00:40:50.216061419Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-pbxhz,Uid:dbcb3f8c-1da8-4226-977e-9eb4d59cd42f,Namespace:calico-system,Attempt:1,} returns sandbox id \"47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee\"" Sep 10 00:40:50.221999 env[1200]: 2025-09-10 00:40:49.847 [INFO][4160] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0 calico-kube-controllers-6dbd5f8568- calico-system 70a96d34-f4e7-4ed6-9a70-692bda4903ef 1084 0 2025-09-10 00:40:19 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:6dbd5f8568 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-6dbd5f8568-lbcfq eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calibdb3e6fe5d6 [] [] }} ContainerID="ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48" Namespace="calico-system" Pod="calico-kube-controllers-6dbd5f8568-lbcfq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-" Sep 10 00:40:50.221999 env[1200]: 2025-09-10 00:40:49.847 [INFO][4160] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48" Namespace="calico-system" Pod="calico-kube-controllers-6dbd5f8568-lbcfq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0" Sep 10 00:40:50.221999 env[1200]: 2025-09-10 00:40:49.920 [INFO][4200] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48" HandleID="k8s-pod-network.ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48" Workload="localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0" Sep 10 00:40:50.221999 env[1200]: 2025-09-10 00:40:49.920 [INFO][4200] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48" HandleID="k8s-pod-network.ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48" Workload="localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000250fe0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-6dbd5f8568-lbcfq", "timestamp":"2025-09-10 00:40:49.920374433 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 00:40:50.221999 env[1200]: 2025-09-10 00:40:49.920 [INFO][4200] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:50.221999 env[1200]: 2025-09-10 00:40:50.102 [INFO][4200] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:50.221999 env[1200]: 2025-09-10 00:40:50.102 [INFO][4200] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 00:40:50.221999 env[1200]: 2025-09-10 00:40:50.113 [INFO][4200] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48" host="localhost" Sep 10 00:40:50.221999 env[1200]: 2025-09-10 00:40:50.145 [INFO][4200] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 00:40:50.221999 env[1200]: 2025-09-10 00:40:50.165 [INFO][4200] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 00:40:50.221999 env[1200]: 2025-09-10 00:40:50.167 [INFO][4200] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 00:40:50.221999 env[1200]: 2025-09-10 00:40:50.171 [INFO][4200] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 00:40:50.221999 env[1200]: 2025-09-10 00:40:50.171 [INFO][4200] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48" host="localhost" Sep 10 00:40:50.221999 env[1200]: 2025-09-10 00:40:50.173 [INFO][4200] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48 Sep 10 00:40:50.221999 env[1200]: 2025-09-10 00:40:50.177 [INFO][4200] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48" host="localhost" Sep 10 00:40:50.221999 env[1200]: 2025-09-10 00:40:50.184 [INFO][4200] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48" host="localhost" Sep 10 00:40:50.221999 env[1200]: 2025-09-10 00:40:50.184 [INFO][4200] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48" host="localhost" Sep 10 00:40:50.221999 env[1200]: 2025-09-10 00:40:50.189 [INFO][4200] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:50.221999 env[1200]: 2025-09-10 00:40:50.189 [INFO][4200] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48" HandleID="k8s-pod-network.ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48" Workload="localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0" Sep 10 00:40:50.222858 env[1200]: 2025-09-10 00:40:50.193 [INFO][4160] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48" Namespace="calico-system" Pod="calico-kube-controllers-6dbd5f8568-lbcfq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0", GenerateName:"calico-kube-controllers-6dbd5f8568-", Namespace:"calico-system", SelfLink:"", UID:"70a96d34-f4e7-4ed6-9a70-692bda4903ef", ResourceVersion:"1084", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6dbd5f8568", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-6dbd5f8568-lbcfq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calibdb3e6fe5d6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:50.222858 env[1200]: 2025-09-10 00:40:50.193 [INFO][4160] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48" Namespace="calico-system" Pod="calico-kube-controllers-6dbd5f8568-lbcfq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0" Sep 10 00:40:50.222858 env[1200]: 2025-09-10 00:40:50.193 [INFO][4160] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calibdb3e6fe5d6 ContainerID="ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48" Namespace="calico-system" Pod="calico-kube-controllers-6dbd5f8568-lbcfq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0" Sep 10 00:40:50.222858 env[1200]: 2025-09-10 00:40:50.197 [INFO][4160] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48" Namespace="calico-system" Pod="calico-kube-controllers-6dbd5f8568-lbcfq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0" Sep 10 00:40:50.222858 env[1200]: 2025-09-10 00:40:50.201 [INFO][4160] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48" Namespace="calico-system" Pod="calico-kube-controllers-6dbd5f8568-lbcfq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0", GenerateName:"calico-kube-controllers-6dbd5f8568-", Namespace:"calico-system", SelfLink:"", UID:"70a96d34-f4e7-4ed6-9a70-692bda4903ef", ResourceVersion:"1084", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6dbd5f8568", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48", Pod:"calico-kube-controllers-6dbd5f8568-lbcfq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calibdb3e6fe5d6", MAC:"aa:02:8b:46:19:d6", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:50.222858 env[1200]: 2025-09-10 00:40:50.210 [INFO][4160] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48" Namespace="calico-system" Pod="calico-kube-controllers-6dbd5f8568-lbcfq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0" Sep 10 00:40:50.232011 env[1200]: time="2025-09-10T00:40:50.231908317Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:40:50.232201 env[1200]: time="2025-09-10T00:40:50.232039793Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:40:50.232201 env[1200]: time="2025-09-10T00:40:50.232074428Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:40:50.232307 env[1200]: time="2025-09-10T00:40:50.232269855Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48 pid=4345 runtime=io.containerd.runc.v2 Sep 10 00:40:50.237000 audit[4357]: NETFILTER_CFG table=filter:113 family=2 entries=62 op=nft_register_chain pid=4357 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:40:50.237000 audit[4357]: SYSCALL arch=c000003e syscall=46 success=yes exit=28368 a0=3 a1=7ffefdb9e820 a2=0 a3=7ffefdb9e80c items=0 ppid=3525 pid=4357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.237000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:40:50.244705 systemd[1]: Started cri-containerd-ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48.scope. Sep 10 00:40:50.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.260000 audit: BPF prog-id=196 op=LOAD Sep 10 00:40:50.260000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.260000 audit[4356]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4345 pid=4356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563626562666436613132353061373639653363643034343864626262 Sep 10 00:40:50.260000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.260000 audit[4356]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4345 pid=4356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563626562666436613132353061373639653363643034343864626262 Sep 10 00:40:50.260000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.260000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.260000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.260000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.260000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.260000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.260000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.260000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.260000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.260000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.260000 audit: BPF prog-id=197 op=LOAD Sep 10 00:40:50.260000 audit[4356]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001abc50 items=0 ppid=4345 pid=4356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563626562666436613132353061373639653363643034343864626262 Sep 10 00:40:50.261000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.261000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.261000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.261000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.261000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.261000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.261000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.261000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.261000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.261000 audit: BPF prog-id=198 op=LOAD Sep 10 00:40:50.261000 audit[4356]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001abc98 items=0 ppid=4345 pid=4356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563626562666436613132353061373639653363643034343864626262 Sep 10 00:40:50.261000 audit: BPF prog-id=198 op=UNLOAD Sep 10 00:40:50.261000 audit: BPF prog-id=197 op=UNLOAD Sep 10 00:40:50.261000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.261000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.261000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.261000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.261000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.261000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.261000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.261000 audit[4356]: AVC avc: denied { perfmon } for pid=4356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.261000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.261000 audit[4356]: AVC avc: denied { bpf } for pid=4356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.261000 audit: BPF prog-id=199 op=LOAD Sep 10 00:40:50.261000 audit[4356]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00040c0a8 items=0 ppid=4345 pid=4356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563626562666436613132353061373639653363643034343864626262 Sep 10 00:40:50.263275 systemd-resolved[1141]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 00:40:50.268581 env[1200]: time="2025-09-10T00:40:50.268532304Z" level=info msg="StopPodSandbox for \"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\"" Sep 10 00:40:50.301134 systemd-networkd[1026]: cali2ab136c3588: Link UP Sep 10 00:40:50.304016 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2ab136c3588: link becomes ready Sep 10 00:40:50.303391 systemd-networkd[1026]: cali2ab136c3588: Gained carrier Sep 10 00:40:50.311901 env[1200]: time="2025-09-10T00:40:50.311356155Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6dbd5f8568-lbcfq,Uid:70a96d34-f4e7-4ed6-9a70-692bda4903ef,Namespace:calico-system,Attempt:1,} returns sandbox id \"ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48\"" Sep 10 00:40:50.321912 env[1200]: 2025-09-10 00:40:49.850 [INFO][4172] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0 coredns-674b8bbfcf- kube-system 22301409-d6d8-4292-99ff-10eb88dc10dd 1085 0 2025-09-10 00:40:04 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-wj5kf eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali2ab136c3588 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7" Namespace="kube-system" Pod="coredns-674b8bbfcf-wj5kf" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--wj5kf-" Sep 10 00:40:50.321912 env[1200]: 2025-09-10 00:40:49.850 [INFO][4172] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7" Namespace="kube-system" Pod="coredns-674b8bbfcf-wj5kf" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0" Sep 10 00:40:50.321912 env[1200]: 2025-09-10 00:40:49.927 [INFO][4210] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7" HandleID="k8s-pod-network.0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7" Workload="localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0" Sep 10 00:40:50.321912 env[1200]: 2025-09-10 00:40:49.928 [INFO][4210] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7" HandleID="k8s-pod-network.0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7" Workload="localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004e440), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-wj5kf", "timestamp":"2025-09-10 00:40:49.927808314 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 00:40:50.321912 env[1200]: 2025-09-10 00:40:49.928 [INFO][4210] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:50.321912 env[1200]: 2025-09-10 00:40:50.184 [INFO][4210] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:50.321912 env[1200]: 2025-09-10 00:40:50.184 [INFO][4210] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 00:40:50.321912 env[1200]: 2025-09-10 00:40:50.215 [INFO][4210] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7" host="localhost" Sep 10 00:40:50.321912 env[1200]: 2025-09-10 00:40:50.246 [INFO][4210] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 00:40:50.321912 env[1200]: 2025-09-10 00:40:50.267 [INFO][4210] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 00:40:50.321912 env[1200]: 2025-09-10 00:40:50.269 [INFO][4210] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 00:40:50.321912 env[1200]: 2025-09-10 00:40:50.272 [INFO][4210] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 00:40:50.321912 env[1200]: 2025-09-10 00:40:50.272 [INFO][4210] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7" host="localhost" Sep 10 00:40:50.321912 env[1200]: 2025-09-10 00:40:50.273 [INFO][4210] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7 Sep 10 00:40:50.321912 env[1200]: 2025-09-10 00:40:50.278 [INFO][4210] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7" host="localhost" Sep 10 00:40:50.321912 env[1200]: 2025-09-10 00:40:50.291 [INFO][4210] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7" host="localhost" Sep 10 00:40:50.321912 env[1200]: 2025-09-10 00:40:50.291 [INFO][4210] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7" host="localhost" Sep 10 00:40:50.321912 env[1200]: 2025-09-10 00:40:50.291 [INFO][4210] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:50.321912 env[1200]: 2025-09-10 00:40:50.291 [INFO][4210] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7" HandleID="k8s-pod-network.0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7" Workload="localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0" Sep 10 00:40:50.322813 env[1200]: 2025-09-10 00:40:50.297 [INFO][4172] cni-plugin/k8s.go 418: Populated endpoint ContainerID="0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7" Namespace="kube-system" Pod="coredns-674b8bbfcf-wj5kf" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"22301409-d6d8-4292-99ff-10eb88dc10dd", ResourceVersion:"1085", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-wj5kf", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2ab136c3588", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:50.322813 env[1200]: 2025-09-10 00:40:50.297 [INFO][4172] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7" Namespace="kube-system" Pod="coredns-674b8bbfcf-wj5kf" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0" Sep 10 00:40:50.322813 env[1200]: 2025-09-10 00:40:50.297 [INFO][4172] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali2ab136c3588 ContainerID="0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7" Namespace="kube-system" Pod="coredns-674b8bbfcf-wj5kf" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0" Sep 10 00:40:50.322813 env[1200]: 2025-09-10 00:40:50.304 [INFO][4172] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7" Namespace="kube-system" Pod="coredns-674b8bbfcf-wj5kf" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0" Sep 10 00:40:50.322813 env[1200]: 2025-09-10 00:40:50.304 [INFO][4172] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7" Namespace="kube-system" Pod="coredns-674b8bbfcf-wj5kf" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"22301409-d6d8-4292-99ff-10eb88dc10dd", ResourceVersion:"1085", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7", Pod:"coredns-674b8bbfcf-wj5kf", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2ab136c3588", MAC:"06:13:0e:c6:1f:36", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:50.322813 env[1200]: 2025-09-10 00:40:50.318 [INFO][4172] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7" Namespace="kube-system" Pod="coredns-674b8bbfcf-wj5kf" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0" Sep 10 00:40:50.339488 env[1200]: time="2025-09-10T00:40:50.339397285Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:40:50.339665 env[1200]: time="2025-09-10T00:40:50.339487254Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:40:50.339665 env[1200]: time="2025-09-10T00:40:50.339528080Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:40:50.339852 env[1200]: time="2025-09-10T00:40:50.339813305Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7 pid=4416 runtime=io.containerd.runc.v2 Sep 10 00:40:50.341000 audit[4426]: NETFILTER_CFG table=filter:114 family=2 entries=52 op=nft_register_chain pid=4426 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:40:50.341000 audit[4426]: SYSCALL arch=c000003e syscall=46 success=yes exit=23892 a0=3 a1=7ffe25425ce0 a2=0 a3=7ffe25425ccc items=0 ppid=3525 pid=4426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.341000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:40:50.352387 systemd[1]: Started cri-containerd-0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7.scope. Sep 10 00:40:50.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.366000 audit: BPF prog-id=200 op=LOAD Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4416 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.367000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030353262633364323065376633653839653638376165633963333563 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4416 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.367000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030353262633364323065376633653839653638376165633963333563 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit: BPF prog-id=201 op=LOAD Sep 10 00:40:50.367000 audit[4427]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000305740 items=0 ppid=4416 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.367000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030353262633364323065376633653839653638376165633963333563 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit: BPF prog-id=202 op=LOAD Sep 10 00:40:50.367000 audit[4427]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000305788 items=0 ppid=4416 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.367000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030353262633364323065376633653839653638376165633963333563 Sep 10 00:40:50.367000 audit: BPF prog-id=202 op=UNLOAD Sep 10 00:40:50.367000 audit: BPF prog-id=201 op=UNLOAD Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.367000 audit: BPF prog-id=203 op=LOAD Sep 10 00:40:50.367000 audit[4427]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000305b98 items=0 ppid=4416 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.367000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030353262633364323065376633653839653638376165633963333563 Sep 10 00:40:50.369520 systemd-resolved[1141]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 00:40:50.392451 env[1200]: 2025-09-10 00:40:50.352 [INFO][4386] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Sep 10 00:40:50.392451 env[1200]: 2025-09-10 00:40:50.352 [INFO][4386] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" iface="eth0" netns="/var/run/netns/cni-fcd60262-2d7d-f622-2794-a15c0244c1b6" Sep 10 00:40:50.392451 env[1200]: 2025-09-10 00:40:50.352 [INFO][4386] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" iface="eth0" netns="/var/run/netns/cni-fcd60262-2d7d-f622-2794-a15c0244c1b6" Sep 10 00:40:50.392451 env[1200]: 2025-09-10 00:40:50.352 [INFO][4386] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" iface="eth0" netns="/var/run/netns/cni-fcd60262-2d7d-f622-2794-a15c0244c1b6" Sep 10 00:40:50.392451 env[1200]: 2025-09-10 00:40:50.352 [INFO][4386] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Sep 10 00:40:50.392451 env[1200]: 2025-09-10 00:40:50.352 [INFO][4386] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Sep 10 00:40:50.392451 env[1200]: 2025-09-10 00:40:50.378 [INFO][4438] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" HandleID="k8s-pod-network.47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Workload="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" Sep 10 00:40:50.392451 env[1200]: 2025-09-10 00:40:50.378 [INFO][4438] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:50.392451 env[1200]: 2025-09-10 00:40:50.378 [INFO][4438] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:50.392451 env[1200]: 2025-09-10 00:40:50.385 [WARNING][4438] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" HandleID="k8s-pod-network.47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Workload="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" Sep 10 00:40:50.392451 env[1200]: 2025-09-10 00:40:50.385 [INFO][4438] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" HandleID="k8s-pod-network.47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Workload="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" Sep 10 00:40:50.392451 env[1200]: 2025-09-10 00:40:50.387 [INFO][4438] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:50.392451 env[1200]: 2025-09-10 00:40:50.390 [INFO][4386] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Sep 10 00:40:50.393278 env[1200]: time="2025-09-10T00:40:50.393238580Z" level=info msg="TearDown network for sandbox \"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\" successfully" Sep 10 00:40:50.393382 env[1200]: time="2025-09-10T00:40:50.393353907Z" level=info msg="StopPodSandbox for \"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\" returns successfully" Sep 10 00:40:50.395412 env[1200]: time="2025-09-10T00:40:50.395375321Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-694cb88886-nchgf,Uid:15af17cb-bf28-4fae-bb29-ea2d7f332ad6,Namespace:calico-apiserver,Attempt:1,}" Sep 10 00:40:50.403123 env[1200]: time="2025-09-10T00:40:50.403068697Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-wj5kf,Uid:22301409-d6d8-4292-99ff-10eb88dc10dd,Namespace:kube-system,Attempt:1,} returns sandbox id \"0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7\"" Sep 10 00:40:50.404324 kubelet[1956]: E0910 00:40:50.404284 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:50.413784 env[1200]: time="2025-09-10T00:40:50.413731766Z" level=info msg="CreateContainer within sandbox \"0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 10 00:40:50.466073 env[1200]: time="2025-09-10T00:40:50.466019748Z" level=info msg="CreateContainer within sandbox \"0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"3c4c5eb4204dea58c7aceb021353ab54f80adb64eb7462444bc4bb4a0eb74a55\"" Sep 10 00:40:50.466822 env[1200]: time="2025-09-10T00:40:50.466794923Z" level=info msg="StartContainer for \"3c4c5eb4204dea58c7aceb021353ab54f80adb64eb7462444bc4bb4a0eb74a55\"" Sep 10 00:40:50.493907 systemd[1]: Started cri-containerd-3c4c5eb4204dea58c7aceb021353ab54f80adb64eb7462444bc4bb4a0eb74a55.scope. Sep 10 00:40:50.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.509000 audit: BPF prog-id=204 op=LOAD Sep 10 00:40:50.510000 audit[4481]: AVC avc: denied { bpf } for pid=4481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.510000 audit[4481]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4416 pid=4481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363346335656234323034646561353863376163656230323133353361 Sep 10 00:40:50.510000 audit[4481]: AVC avc: denied { perfmon } for pid=4481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.510000 audit[4481]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4416 pid=4481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363346335656234323034646561353863376163656230323133353361 Sep 10 00:40:50.511000 audit[4481]: AVC avc: denied { bpf } for pid=4481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.511000 audit[4481]: AVC avc: denied { bpf } for pid=4481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.511000 audit[4481]: AVC avc: denied { bpf } for pid=4481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.511000 audit[4481]: AVC avc: denied { perfmon } for pid=4481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.511000 audit[4481]: AVC avc: denied { perfmon } for pid=4481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.511000 audit[4481]: AVC avc: denied { perfmon } for pid=4481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.511000 audit[4481]: AVC avc: denied { perfmon } for pid=4481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.511000 audit[4481]: AVC avc: denied { perfmon } for pid=4481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.511000 audit[4481]: AVC avc: denied { bpf } for pid=4481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.511000 audit[4481]: AVC avc: denied { bpf } for pid=4481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.511000 audit: BPF prog-id=205 op=LOAD Sep 10 00:40:50.511000 audit[4481]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000a9380 items=0 ppid=4416 pid=4481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363346335656234323034646561353863376163656230323133353361 Sep 10 00:40:50.512000 audit[4481]: AVC avc: denied { bpf } for pid=4481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.512000 audit[4481]: AVC avc: denied { bpf } for pid=4481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.512000 audit[4481]: AVC avc: denied { perfmon } for pid=4481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.512000 audit[4481]: AVC avc: denied { perfmon } for pid=4481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.512000 audit[4481]: AVC avc: denied { perfmon } for pid=4481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.512000 audit[4481]: AVC avc: denied { perfmon } for pid=4481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.512000 audit[4481]: AVC avc: denied { perfmon } for pid=4481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.512000 audit[4481]: AVC avc: denied { bpf } for pid=4481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.512000 audit[4481]: AVC avc: denied { bpf } for pid=4481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.512000 audit: BPF prog-id=206 op=LOAD Sep 10 00:40:50.512000 audit[4481]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000a93c8 items=0 ppid=4416 pid=4481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363346335656234323034646561353863376163656230323133353361 Sep 10 00:40:50.512000 audit: BPF prog-id=206 op=UNLOAD Sep 10 00:40:50.513000 audit: BPF prog-id=205 op=UNLOAD Sep 10 00:40:50.513000 audit[4481]: AVC avc: denied { bpf } for pid=4481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.513000 audit[4481]: AVC avc: denied { bpf } for pid=4481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.513000 audit[4481]: AVC avc: denied { bpf } for pid=4481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.513000 audit[4481]: AVC avc: denied { perfmon } for pid=4481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.513000 audit[4481]: AVC avc: denied { perfmon } for pid=4481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.513000 audit[4481]: AVC avc: denied { perfmon } for pid=4481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.513000 audit[4481]: AVC avc: denied { perfmon } for pid=4481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.513000 audit[4481]: AVC avc: denied { perfmon } for pid=4481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.513000 audit[4481]: AVC avc: denied { bpf } for pid=4481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.513000 audit[4481]: AVC avc: denied { bpf } for pid=4481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.513000 audit: BPF prog-id=207 op=LOAD Sep 10 00:40:50.513000 audit[4481]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000a97d8 items=0 ppid=4416 pid=4481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363346335656234323034646561353863376163656230323133353361 Sep 10 00:40:50.558675 env[1200]: time="2025-09-10T00:40:50.558607082Z" level=info msg="StartContainer for \"3c4c5eb4204dea58c7aceb021353ab54f80adb64eb7462444bc4bb4a0eb74a55\" returns successfully" Sep 10 00:40:50.572000 audit[4500]: AVC avc: denied { getattr } for pid=4500 comm="coredns" path="cgroup:[4026532720]" dev="nsfs" ino=4026532720 scontext=system_u:system_r:svirt_lxc_net_t:s0:c571,c740 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 10 00:40:50.572000 audit[4500]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c000058a20 a2=c0005f2fa8 a3=0 items=0 ppid=4416 pid=4500 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c571,c740 key=(null) Sep 10 00:40:50.572000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 10 00:40:50.583297 systemd-networkd[1026]: cali9de38857c6a: Link UP Sep 10 00:40:50.586033 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9de38857c6a: link becomes ready Sep 10 00:40:50.585920 systemd-networkd[1026]: cali9de38857c6a: Gained carrier Sep 10 00:40:50.600239 env[1200]: 2025-09-10 00:40:50.477 [INFO][4459] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0 calico-apiserver-694cb88886- calico-apiserver 15af17cb-bf28-4fae-bb29-ea2d7f332ad6 1108 0 2025-09-10 00:40:15 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:694cb88886 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-694cb88886-nchgf eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali9de38857c6a [] [] }} ContainerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" Namespace="calico-apiserver" Pod="calico-apiserver-694cb88886-nchgf" WorkloadEndpoint="localhost-k8s-calico--apiserver--694cb88886--nchgf-" Sep 10 00:40:50.600239 env[1200]: 2025-09-10 00:40:50.478 [INFO][4459] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" Namespace="calico-apiserver" Pod="calico-apiserver-694cb88886-nchgf" WorkloadEndpoint="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" Sep 10 00:40:50.600239 env[1200]: 2025-09-10 00:40:50.518 [INFO][4488] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" HandleID="k8s-pod-network.ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" Workload="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" Sep 10 00:40:50.600239 env[1200]: 2025-09-10 00:40:50.518 [INFO][4488] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" HandleID="k8s-pod-network.ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" Workload="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00034d5f0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-694cb88886-nchgf", "timestamp":"2025-09-10 00:40:50.517983641 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 00:40:50.600239 env[1200]: 2025-09-10 00:40:50.518 [INFO][4488] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:50.600239 env[1200]: 2025-09-10 00:40:50.519 [INFO][4488] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:50.600239 env[1200]: 2025-09-10 00:40:50.519 [INFO][4488] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 00:40:50.600239 env[1200]: 2025-09-10 00:40:50.528 [INFO][4488] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" host="localhost" Sep 10 00:40:50.600239 env[1200]: 2025-09-10 00:40:50.534 [INFO][4488] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 00:40:50.600239 env[1200]: 2025-09-10 00:40:50.548 [INFO][4488] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 00:40:50.600239 env[1200]: 2025-09-10 00:40:50.550 [INFO][4488] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 00:40:50.600239 env[1200]: 2025-09-10 00:40:50.552 [INFO][4488] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 00:40:50.600239 env[1200]: 2025-09-10 00:40:50.552 [INFO][4488] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" host="localhost" Sep 10 00:40:50.600239 env[1200]: 2025-09-10 00:40:50.554 [INFO][4488] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd Sep 10 00:40:50.600239 env[1200]: 2025-09-10 00:40:50.559 [INFO][4488] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" host="localhost" Sep 10 00:40:50.600239 env[1200]: 2025-09-10 00:40:50.568 [INFO][4488] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.137/26] block=192.168.88.128/26 handle="k8s-pod-network.ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" host="localhost" Sep 10 00:40:50.600239 env[1200]: 2025-09-10 00:40:50.568 [INFO][4488] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.137/26] handle="k8s-pod-network.ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" host="localhost" Sep 10 00:40:50.600239 env[1200]: 2025-09-10 00:40:50.568 [INFO][4488] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:50.600239 env[1200]: 2025-09-10 00:40:50.568 [INFO][4488] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.137/26] IPv6=[] ContainerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" HandleID="k8s-pod-network.ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" Workload="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" Sep 10 00:40:50.600883 env[1200]: 2025-09-10 00:40:50.571 [INFO][4459] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" Namespace="calico-apiserver" Pod="calico-apiserver-694cb88886-nchgf" WorkloadEndpoint="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0", GenerateName:"calico-apiserver-694cb88886-", Namespace:"calico-apiserver", SelfLink:"", UID:"15af17cb-bf28-4fae-bb29-ea2d7f332ad6", ResourceVersion:"1108", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"694cb88886", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-694cb88886-nchgf", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9de38857c6a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:50.600883 env[1200]: 2025-09-10 00:40:50.572 [INFO][4459] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.137/32] ContainerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" Namespace="calico-apiserver" Pod="calico-apiserver-694cb88886-nchgf" WorkloadEndpoint="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" Sep 10 00:40:50.600883 env[1200]: 2025-09-10 00:40:50.572 [INFO][4459] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali9de38857c6a ContainerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" Namespace="calico-apiserver" Pod="calico-apiserver-694cb88886-nchgf" WorkloadEndpoint="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" Sep 10 00:40:50.600883 env[1200]: 2025-09-10 00:40:50.586 [INFO][4459] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" Namespace="calico-apiserver" Pod="calico-apiserver-694cb88886-nchgf" WorkloadEndpoint="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" Sep 10 00:40:50.600883 env[1200]: 2025-09-10 00:40:50.586 [INFO][4459] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" Namespace="calico-apiserver" Pod="calico-apiserver-694cb88886-nchgf" WorkloadEndpoint="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0", GenerateName:"calico-apiserver-694cb88886-", Namespace:"calico-apiserver", SelfLink:"", UID:"15af17cb-bf28-4fae-bb29-ea2d7f332ad6", ResourceVersion:"1108", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"694cb88886", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd", Pod:"calico-apiserver-694cb88886-nchgf", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9de38857c6a", MAC:"16:3b:af:75:66:6e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:50.600883 env[1200]: 2025-09-10 00:40:50.596 [INFO][4459] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" Namespace="calico-apiserver" Pod="calico-apiserver-694cb88886-nchgf" WorkloadEndpoint="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" Sep 10 00:40:50.626000 audit[4543]: NETFILTER_CFG table=filter:115 family=2 entries=67 op=nft_register_chain pid=4543 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:40:50.626000 audit[4543]: SYSCALL arch=c000003e syscall=46 success=yes exit=31852 a0=3 a1=7ffc09a92b00 a2=0 a3=7ffc09a92aec items=0 ppid=3525 pid=4543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.626000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:40:50.634181 env[1200]: time="2025-09-10T00:40:50.634073929Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 00:40:50.634181 env[1200]: time="2025-09-10T00:40:50.634187943Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 00:40:50.634441 env[1200]: time="2025-09-10T00:40:50.634211888Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 00:40:50.634441 env[1200]: time="2025-09-10T00:40:50.634380965Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd pid=4542 runtime=io.containerd.runc.v2 Sep 10 00:40:50.649321 systemd[1]: Started cri-containerd-ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd.scope. Sep 10 00:40:50.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.664000 audit: BPF prog-id=208 op=LOAD Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000119c48 a2=10 a3=1c items=0 ppid=4542 pid=4552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561393936316438393231353631383832306461626465396532373662 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001196b0 a2=3c a3=c items=0 ppid=4542 pid=4552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561393936316438393231353631383832306461626465396532373662 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit: BPF prog-id=209 op=LOAD Sep 10 00:40:50.665000 audit[4552]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001199d8 a2=78 a3=c000309040 items=0 ppid=4542 pid=4552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561393936316438393231353631383832306461626465396532373662 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit: BPF prog-id=210 op=LOAD Sep 10 00:40:50.665000 audit[4552]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000119770 a2=78 a3=c000309088 items=0 ppid=4542 pid=4552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561393936316438393231353631383832306461626465396532373662 Sep 10 00:40:50.665000 audit: BPF prog-id=210 op=UNLOAD Sep 10 00:40:50.665000 audit: BPF prog-id=209 op=UNLOAD Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.665000 audit: BPF prog-id=211 op=LOAD Sep 10 00:40:50.665000 audit[4552]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000119c30 a2=78 a3=c000309498 items=0 ppid=4542 pid=4552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561393936316438393231353631383832306461626465396532373662 Sep 10 00:40:50.667403 systemd-resolved[1141]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 00:40:50.681399 systemd[1]: run-netns-cni\x2dfcd60262\x2d2d7d\x2df622\x2d2794\x2da15c0244c1b6.mount: Deactivated successfully. Sep 10 00:40:50.696205 env[1200]: time="2025-09-10T00:40:50.696159586Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-694cb88886-nchgf,Uid:15af17cb-bf28-4fae-bb29-ea2d7f332ad6,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd\"" Sep 10 00:40:50.715065 env[1200]: time="2025-09-10T00:40:50.715016030Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:50.716920 env[1200]: time="2025-09-10T00:40:50.716851955Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:666f4e02e75c30547109a06ed75b415a990a970811173aa741379cfaac4d9dd7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:50.718324 env[1200]: time="2025-09-10T00:40:50.718296576Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:50.719821 env[1200]: time="2025-09-10T00:40:50.719793846Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:f22c88018d8b58c4ef0052f594b216a13bd6852166ac131a538c5ab2fba23bb2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:50.720382 env[1200]: time="2025-09-10T00:40:50.720321045Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\" returns image reference \"sha256:666f4e02e75c30547109a06ed75b415a990a970811173aa741379cfaac4d9dd7\"" Sep 10 00:40:50.721539 env[1200]: time="2025-09-10T00:40:50.721498575Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 10 00:40:50.726169 env[1200]: time="2025-09-10T00:40:50.726130487Z" level=info msg="CreateContainer within sandbox \"89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Sep 10 00:40:50.745477 env[1200]: time="2025-09-10T00:40:50.745370341Z" level=info msg="CreateContainer within sandbox \"89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"439dff426acf1fa50ba644251c66751abe16b81bed7d4de732cce5caf0fe476b\"" Sep 10 00:40:50.747287 env[1200]: time="2025-09-10T00:40:50.747257122Z" level=info msg="StartContainer for \"439dff426acf1fa50ba644251c66751abe16b81bed7d4de732cce5caf0fe476b\"" Sep 10 00:40:50.766119 systemd[1]: Started cri-containerd-439dff426acf1fa50ba644251c66751abe16b81bed7d4de732cce5caf0fe476b.scope. Sep 10 00:40:50.781000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.781000 audit[4583]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f8ec4138b08 items=0 ppid=3840 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.781000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433396466663432366163663166613530626136343432353163363637 Sep 10 00:40:50.781000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.781000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.781000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.781000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.781000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.781000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.781000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.781000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.781000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.781000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.781000 audit: BPF prog-id=212 op=LOAD Sep 10 00:40:50.781000 audit[4583]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0003b4218 items=0 ppid=3840 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.781000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433396466663432366163663166613530626136343432353163363637 Sep 10 00:40:50.781000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.781000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.781000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.781000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.781000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.781000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.781000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.781000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.781000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.781000 audit: BPF prog-id=213 op=LOAD Sep 10 00:40:50.781000 audit[4583]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0003b4268 items=0 ppid=3840 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.781000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433396466663432366163663166613530626136343432353163363637 Sep 10 00:40:50.782000 audit: BPF prog-id=213 op=UNLOAD Sep 10 00:40:50.782000 audit: BPF prog-id=212 op=UNLOAD Sep 10 00:40:50.782000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.782000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.782000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.782000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.782000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.782000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.782000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.782000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.782000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.782000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:50.782000 audit: BPF prog-id=214 op=LOAD Sep 10 00:40:50.782000 audit[4583]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0003b42f8 items=0 ppid=3840 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:50.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433396466663432366163663166613530626136343432353163363637 Sep 10 00:40:50.800061 env[1200]: time="2025-09-10T00:40:50.800003613Z" level=info msg="StartContainer for \"439dff426acf1fa50ba644251c66751abe16b81bed7d4de732cce5caf0fe476b\" returns successfully" Sep 10 00:40:51.423125 systemd-networkd[1026]: cali961d5ee6476: Gained IPv6LL Sep 10 00:40:51.432718 kubelet[1956]: E0910 00:40:51.432657 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:51.553960 kubelet[1956]: I0910 00:40:51.553853 1956 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-wj5kf" podStartSLOduration=47.553822107 podStartE2EDuration="47.553822107s" podCreationTimestamp="2025-09-10 00:40:04 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-10 00:40:51.553607775 +0000 UTC m=+53.406938189" watchObservedRunningTime="2025-09-10 00:40:51.553822107 +0000 UTC m=+53.407152521" Sep 10 00:40:51.671399 systemd[1]: run-containerd-runc-k8s.io-439dff426acf1fa50ba644251c66751abe16b81bed7d4de732cce5caf0fe476b-runc.LPP3V2.mount: Deactivated successfully. Sep 10 00:40:51.719000 audit[4612]: NETFILTER_CFG table=filter:116 family=2 entries=14 op=nft_register_rule pid=4612 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:51.721448 kernel: kauditd_printk_skb: 1327 callbacks suppressed Sep 10 00:40:51.721521 kernel: audit: type=1325 audit(1757464851.719:1377): table=filter:116 family=2 entries=14 op=nft_register_rule pid=4612 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:51.719000 audit[4612]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffa2228e50 a2=0 a3=7fffa2228e3c items=0 ppid=2118 pid=4612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:51.729315 kernel: audit: type=1300 audit(1757464851.719:1377): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffa2228e50 a2=0 a3=7fffa2228e3c items=0 ppid=2118 pid=4612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:51.719000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:51.731920 kernel: audit: type=1327 audit(1757464851.719:1377): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:51.734000 audit[4612]: NETFILTER_CFG table=nat:117 family=2 entries=44 op=nft_register_rule pid=4612 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:51.736397 systemd[1]: Started sshd@9-10.0.0.37:22-10.0.0.1:52296.service. Sep 10 00:40:51.734000 audit[4612]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7fffa2228e50 a2=0 a3=7fffa2228e3c items=0 ppid=2118 pid=4612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:51.744740 kernel: audit: type=1325 audit(1757464851.734:1378): table=nat:117 family=2 entries=44 op=nft_register_rule pid=4612 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:51.744846 kernel: audit: type=1300 audit(1757464851.734:1378): arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7fffa2228e50 a2=0 a3=7fffa2228e3c items=0 ppid=2118 pid=4612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:51.744875 kernel: audit: type=1327 audit(1757464851.734:1378): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:51.734000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:51.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.37:22-10.0.0.1:52296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:40:51.756473 kernel: audit: type=1130 audit(1757464851.734:1379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.37:22-10.0.0.1:52296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:40:51.785000 audit[4614]: USER_ACCT pid=4614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:51.790368 sshd[4614]: Accepted publickey for core from 10.0.0.1 port 52296 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:40:51.790960 kernel: audit: type=1101 audit(1757464851.785:1380): pid=4614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:51.789000 audit[4614]: CRED_ACQ pid=4614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:51.795599 sshd[4614]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:40:51.799623 kernel: audit: type=1103 audit(1757464851.789:1381): pid=4614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:51.799687 kernel: audit: type=1006 audit(1757464851.789:1382): pid=4614 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Sep 10 00:40:51.789000 audit[4614]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee98f4ad0 a2=3 a3=0 items=0 ppid=1 pid=4614 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:51.789000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:40:51.801106 systemd-logind[1188]: New session 10 of user core. Sep 10 00:40:51.807177 systemd[1]: Started session-10.scope. Sep 10 00:40:51.814000 audit[4614]: USER_START pid=4614 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:51.816000 audit[4617]: CRED_ACQ pid=4617 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:51.871104 systemd-networkd[1026]: calic8b2a4655f3: Gained IPv6LL Sep 10 00:40:51.876000 audit[4618]: NETFILTER_CFG table=filter:118 family=2 entries=14 op=nft_register_rule pid=4618 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:51.876000 audit[4618]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff27eb6140 a2=0 a3=7fff27eb612c items=0 ppid=2118 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:51.876000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:52.000161 systemd-networkd[1026]: cali2ab136c3588: Gained IPv6LL Sep 10 00:40:52.063100 systemd-networkd[1026]: cali9de38857c6a: Gained IPv6LL Sep 10 00:40:52.156000 audit[4618]: NETFILTER_CFG table=nat:119 family=2 entries=56 op=nft_register_chain pid=4618 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:52.156000 audit[4618]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7fff27eb6140 a2=0 a3=7fff27eb612c items=0 ppid=2118 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:52.156000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:52.157000 audit[4614]: USER_END pid=4614 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:52.157000 audit[4614]: CRED_DISP pid=4614 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:52.157296 sshd[4614]: pam_unix(sshd:session): session closed for user core Sep 10 00:40:52.160280 systemd[1]: sshd@9-10.0.0.37:22-10.0.0.1:52296.service: Deactivated successfully. Sep 10 00:40:52.159000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.37:22-10.0.0.1:52296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:40:52.161132 systemd[1]: session-10.scope: Deactivated successfully. Sep 10 00:40:52.161740 systemd-logind[1188]: Session 10 logged out. Waiting for processes to exit. Sep 10 00:40:52.162545 systemd-logind[1188]: Removed session 10. Sep 10 00:40:52.192254 systemd-networkd[1026]: calibdb3e6fe5d6: Gained IPv6LL Sep 10 00:40:52.433986 kubelet[1956]: E0910 00:40:52.433829 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:53.436093 kubelet[1956]: E0910 00:40:53.436058 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:40:55.535000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:40:55.535000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:40:55.535000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c007aa9ac0 a2=fc6 a3=0 items=0 ppid=1667 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 key=(null) Sep 10 00:40:55.535000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c007a487e0 a2=fc6 a3=0 items=0 ppid=1667 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 key=(null) Sep 10 00:40:55.535000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 10 00:40:55.535000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 10 00:40:55.535000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:40:55.535000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c007863470 a2=fc6 a3=0 items=0 ppid=1667 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 key=(null) Sep 10 00:40:55.535000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 10 00:40:55.535000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:40:55.535000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c006b9aac0 a2=fc6 a3=0 items=0 ppid=1667 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 key=(null) Sep 10 00:40:55.535000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 10 00:40:55.563000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:40:55.563000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c004ff55c0 a2=fc6 a3=0 items=0 ppid=1667 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 key=(null) Sep 10 00:40:55.563000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 10 00:40:55.563000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:40:55.563000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c004ff5620 a2=fc6 a3=0 items=0 ppid=1667 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 key=(null) Sep 10 00:40:55.563000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 10 00:40:55.662000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:40:55.662000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:40:55.662000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0027e2270 a2=fc6 a3=0 items=0 ppid=1653 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 key=(null) Sep 10 00:40:55.662000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:40:55.662000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00046d1e0 a2=fc6 a3=0 items=0 ppid=1653 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 key=(null) Sep 10 00:40:55.662000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:40:56.494531 env[1200]: time="2025-09-10T00:40:56.494445873Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:56.496839 env[1200]: time="2025-09-10T00:40:56.496758993Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:56.498876 env[1200]: time="2025-09-10T00:40:56.498832066Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:56.500481 env[1200]: time="2025-09-10T00:40:56.500416942Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:56.500906 env[1200]: time="2025-09-10T00:40:56.500843170Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a\"" Sep 10 00:40:56.504335 env[1200]: time="2025-09-10T00:40:56.504171499Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\"" Sep 10 00:40:56.664468 env[1200]: time="2025-09-10T00:40:56.664419377Z" level=info msg="CreateContainer within sandbox \"16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 10 00:40:57.163254 systemd[1]: Started sshd@10-10.0.0.37:22-10.0.0.1:52312.service. Sep 10 00:40:57.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.37:22-10.0.0.1:52312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:40:57.245243 kernel: kauditd_printk_skb: 37 callbacks suppressed Sep 10 00:40:57.245348 kernel: audit: type=1130 audit(1757464857.162:1398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.37:22-10.0.0.1:52312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:40:57.283000 audit[4640]: USER_ACCT pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:57.284467 sshd[4640]: Accepted publickey for core from 10.0.0.1 port 52312 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:40:57.286663 sshd[4640]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:40:57.285000 audit[4640]: CRED_ACQ pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:57.290748 systemd-logind[1188]: New session 11 of user core. Sep 10 00:40:57.291556 systemd[1]: Started session-11.scope. Sep 10 00:40:57.294366 kernel: audit: type=1101 audit(1757464857.283:1399): pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:57.294437 kernel: audit: type=1103 audit(1757464857.285:1400): pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:57.294466 kernel: audit: type=1006 audit(1757464857.285:1401): pid=4640 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Sep 10 00:40:57.296990 kernel: audit: type=1300 audit(1757464857.285:1401): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbc0eebe0 a2=3 a3=0 items=0 ppid=1 pid=4640 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:57.285000 audit[4640]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbc0eebe0 a2=3 a3=0 items=0 ppid=1 pid=4640 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:57.285000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:40:57.302461 kernel: audit: type=1327 audit(1757464857.285:1401): proctitle=737368643A20636F7265205B707269765D Sep 10 00:40:57.302507 kernel: audit: type=1105 audit(1757464857.295:1402): pid=4640 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:57.295000 audit[4640]: USER_START pid=4640 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:57.306539 kernel: audit: type=1103 audit(1757464857.297:1403): pid=4642 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:57.297000 audit[4642]: CRED_ACQ pid=4642 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:57.337319 env[1200]: time="2025-09-10T00:40:57.337259346Z" level=info msg="CreateContainer within sandbox \"16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"257d606c7769af06d24ed95f13918b5f9b57397dcf393a5fd3755c69c83b8a20\"" Sep 10 00:40:57.338164 env[1200]: time="2025-09-10T00:40:57.338092892Z" level=info msg="StartContainer for \"257d606c7769af06d24ed95f13918b5f9b57397dcf393a5fd3755c69c83b8a20\"" Sep 10 00:40:57.367481 systemd[1]: Started cri-containerd-257d606c7769af06d24ed95f13918b5f9b57397dcf393a5fd3755c69c83b8a20.scope. Sep 10 00:40:57.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.394309 kernel: audit: type=1400 audit(1757464857.386:1404): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.394512 kernel: audit: type=1400 audit(1757464857.386:1405): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.389000 audit: BPF prog-id=215 op=LOAD Sep 10 00:40:57.390000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.390000 audit[4655]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3949 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:57.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235376436303663373736396166303664323465643935663133393138 Sep 10 00:40:57.390000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.390000 audit[4655]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3949 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:57.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235376436303663373736396166303664323465643935663133393138 Sep 10 00:40:57.390000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.390000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.390000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.390000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.390000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.390000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.390000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.390000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.390000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.390000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.390000 audit: BPF prog-id=216 op=LOAD Sep 10 00:40:57.390000 audit[4655]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003cd0d0 items=0 ppid=3949 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:57.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235376436303663373736396166303664323465643935663133393138 Sep 10 00:40:57.393000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.393000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.393000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.393000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.393000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.393000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.393000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.393000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.393000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.393000 audit: BPF prog-id=217 op=LOAD Sep 10 00:40:57.393000 audit[4655]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003cd118 items=0 ppid=3949 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:57.393000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235376436303663373736396166303664323465643935663133393138 Sep 10 00:40:57.393000 audit: BPF prog-id=217 op=UNLOAD Sep 10 00:40:57.393000 audit: BPF prog-id=216 op=UNLOAD Sep 10 00:40:57.393000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.393000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.393000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.393000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.393000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.393000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.393000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.393000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.393000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.393000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:57.393000 audit: BPF prog-id=218 op=LOAD Sep 10 00:40:57.393000 audit[4655]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003cd528 items=0 ppid=3949 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:57.393000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235376436303663373736396166303664323465643935663133393138 Sep 10 00:40:57.518748 env[1200]: time="2025-09-10T00:40:57.518679858Z" level=info msg="StartContainer for \"257d606c7769af06d24ed95f13918b5f9b57397dcf393a5fd3755c69c83b8a20\" returns successfully" Sep 10 00:40:57.605684 sshd[4640]: pam_unix(sshd:session): session closed for user core Sep 10 00:40:57.606000 audit[4640]: USER_END pid=4640 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:57.606000 audit[4640]: CRED_DISP pid=4640 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:40:57.609002 systemd-logind[1188]: Session 11 logged out. Waiting for processes to exit. Sep 10 00:40:57.609190 systemd[1]: sshd@10-10.0.0.37:22-10.0.0.1:52312.service: Deactivated successfully. Sep 10 00:40:57.608000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.37:22-10.0.0.1:52312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:40:57.609965 systemd[1]: session-11.scope: Deactivated successfully. Sep 10 00:40:57.610582 systemd-logind[1188]: Removed session 11. Sep 10 00:40:58.252007 env[1200]: time="2025-09-10T00:40:58.251963030Z" level=info msg="StopPodSandbox for \"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\"" Sep 10 00:40:58.325330 env[1200]: 2025-09-10 00:40:58.286 [WARNING][4712] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"22301409-d6d8-4292-99ff-10eb88dc10dd", ResourceVersion:"1130", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7", Pod:"coredns-674b8bbfcf-wj5kf", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2ab136c3588", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:58.325330 env[1200]: 2025-09-10 00:40:58.287 [INFO][4712] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Sep 10 00:40:58.325330 env[1200]: 2025-09-10 00:40:58.287 [INFO][4712] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" iface="eth0" netns="" Sep 10 00:40:58.325330 env[1200]: 2025-09-10 00:40:58.287 [INFO][4712] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Sep 10 00:40:58.325330 env[1200]: 2025-09-10 00:40:58.287 [INFO][4712] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Sep 10 00:40:58.325330 env[1200]: 2025-09-10 00:40:58.309 [INFO][4723] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" HandleID="k8s-pod-network.df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Workload="localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0" Sep 10 00:40:58.325330 env[1200]: 2025-09-10 00:40:58.309 [INFO][4723] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:58.325330 env[1200]: 2025-09-10 00:40:58.310 [INFO][4723] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:58.325330 env[1200]: 2025-09-10 00:40:58.318 [WARNING][4723] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" HandleID="k8s-pod-network.df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Workload="localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0" Sep 10 00:40:58.325330 env[1200]: 2025-09-10 00:40:58.318 [INFO][4723] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" HandleID="k8s-pod-network.df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Workload="localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0" Sep 10 00:40:58.325330 env[1200]: 2025-09-10 00:40:58.319 [INFO][4723] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:58.325330 env[1200]: 2025-09-10 00:40:58.322 [INFO][4712] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Sep 10 00:40:58.326061 env[1200]: time="2025-09-10T00:40:58.325401646Z" level=info msg="TearDown network for sandbox \"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\" successfully" Sep 10 00:40:58.326061 env[1200]: time="2025-09-10T00:40:58.325485579Z" level=info msg="StopPodSandbox for \"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\" returns successfully" Sep 10 00:40:58.326515 env[1200]: time="2025-09-10T00:40:58.326471709Z" level=info msg="RemovePodSandbox for \"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\"" Sep 10 00:40:58.326622 env[1200]: time="2025-09-10T00:40:58.326528599Z" level=info msg="Forcibly stopping sandbox \"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\"" Sep 10 00:40:58.399781 env[1200]: 2025-09-10 00:40:58.365 [WARNING][4741] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"22301409-d6d8-4292-99ff-10eb88dc10dd", ResourceVersion:"1130", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0052bc3d20e7f3e89e687aec9c35c1e4f935360f9005a3119c9f9eb70f6f68b7", Pod:"coredns-674b8bbfcf-wj5kf", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2ab136c3588", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:58.399781 env[1200]: 2025-09-10 00:40:58.366 [INFO][4741] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Sep 10 00:40:58.399781 env[1200]: 2025-09-10 00:40:58.366 [INFO][4741] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" iface="eth0" netns="" Sep 10 00:40:58.399781 env[1200]: 2025-09-10 00:40:58.366 [INFO][4741] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Sep 10 00:40:58.399781 env[1200]: 2025-09-10 00:40:58.366 [INFO][4741] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Sep 10 00:40:58.399781 env[1200]: 2025-09-10 00:40:58.386 [INFO][4750] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" HandleID="k8s-pod-network.df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Workload="localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0" Sep 10 00:40:58.399781 env[1200]: 2025-09-10 00:40:58.386 [INFO][4750] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:58.399781 env[1200]: 2025-09-10 00:40:58.386 [INFO][4750] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:58.399781 env[1200]: 2025-09-10 00:40:58.393 [WARNING][4750] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" HandleID="k8s-pod-network.df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Workload="localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0" Sep 10 00:40:58.399781 env[1200]: 2025-09-10 00:40:58.393 [INFO][4750] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" HandleID="k8s-pod-network.df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Workload="localhost-k8s-coredns--674b8bbfcf--wj5kf-eth0" Sep 10 00:40:58.399781 env[1200]: 2025-09-10 00:40:58.395 [INFO][4750] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:58.399781 env[1200]: 2025-09-10 00:40:58.397 [INFO][4741] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd" Sep 10 00:40:58.400734 env[1200]: time="2025-09-10T00:40:58.399772197Z" level=info msg="TearDown network for sandbox \"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\" successfully" Sep 10 00:40:58.405494 env[1200]: time="2025-09-10T00:40:58.405437343Z" level=info msg="RemovePodSandbox \"df7d0a520592921f8935e8462b29c9ed579c59af994a517e9de681d382d2c4cd\" returns successfully" Sep 10 00:40:58.406322 env[1200]: time="2025-09-10T00:40:58.406279334Z" level=info msg="StopPodSandbox for \"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\"" Sep 10 00:40:58.484658 env[1200]: 2025-09-10 00:40:58.442 [WARNING][4767] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" WorkloadEndpoint="localhost-k8s-whisker--76b494f845--dpfcm-eth0" Sep 10 00:40:58.484658 env[1200]: 2025-09-10 00:40:58.443 [INFO][4767] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Sep 10 00:40:58.484658 env[1200]: 2025-09-10 00:40:58.443 [INFO][4767] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" iface="eth0" netns="" Sep 10 00:40:58.484658 env[1200]: 2025-09-10 00:40:58.443 [INFO][4767] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Sep 10 00:40:58.484658 env[1200]: 2025-09-10 00:40:58.443 [INFO][4767] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Sep 10 00:40:58.484658 env[1200]: 2025-09-10 00:40:58.466 [INFO][4775] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" HandleID="k8s-pod-network.260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Workload="localhost-k8s-whisker--76b494f845--dpfcm-eth0" Sep 10 00:40:58.484658 env[1200]: 2025-09-10 00:40:58.466 [INFO][4775] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:58.484658 env[1200]: 2025-09-10 00:40:58.467 [INFO][4775] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:58.484658 env[1200]: 2025-09-10 00:40:58.476 [WARNING][4775] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" HandleID="k8s-pod-network.260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Workload="localhost-k8s-whisker--76b494f845--dpfcm-eth0" Sep 10 00:40:58.484658 env[1200]: 2025-09-10 00:40:58.476 [INFO][4775] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" HandleID="k8s-pod-network.260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Workload="localhost-k8s-whisker--76b494f845--dpfcm-eth0" Sep 10 00:40:58.484658 env[1200]: 2025-09-10 00:40:58.479 [INFO][4775] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:58.484658 env[1200]: 2025-09-10 00:40:58.482 [INFO][4767] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Sep 10 00:40:58.485360 env[1200]: time="2025-09-10T00:40:58.484666488Z" level=info msg="TearDown network for sandbox \"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\" successfully" Sep 10 00:40:58.485360 env[1200]: time="2025-09-10T00:40:58.484705753Z" level=info msg="StopPodSandbox for \"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\" returns successfully" Sep 10 00:40:58.485360 env[1200]: time="2025-09-10T00:40:58.485281820Z" level=info msg="RemovePodSandbox for \"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\"" Sep 10 00:40:58.485360 env[1200]: time="2025-09-10T00:40:58.485310325Z" level=info msg="Forcibly stopping sandbox \"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\"" Sep 10 00:40:58.560000 audit[4810]: NETFILTER_CFG table=filter:120 family=2 entries=14 op=nft_register_rule pid=4810 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:58.560000 audit[4810]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffebc8f1270 a2=0 a3=7ffebc8f125c items=0 ppid=2118 pid=4810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:58.560000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:58.564000 audit[4810]: NETFILTER_CFG table=nat:121 family=2 entries=20 op=nft_register_rule pid=4810 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:40:58.564000 audit[4810]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffebc8f1270 a2=0 a3=7ffebc8f125c items=0 ppid=2118 pid=4810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:58.564000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:40:58.597174 env[1200]: 2025-09-10 00:40:58.549 [WARNING][4794] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" WorkloadEndpoint="localhost-k8s-whisker--76b494f845--dpfcm-eth0" Sep 10 00:40:58.597174 env[1200]: 2025-09-10 00:40:58.549 [INFO][4794] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Sep 10 00:40:58.597174 env[1200]: 2025-09-10 00:40:58.549 [INFO][4794] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" iface="eth0" netns="" Sep 10 00:40:58.597174 env[1200]: 2025-09-10 00:40:58.549 [INFO][4794] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Sep 10 00:40:58.597174 env[1200]: 2025-09-10 00:40:58.549 [INFO][4794] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Sep 10 00:40:58.597174 env[1200]: 2025-09-10 00:40:58.576 [INFO][4803] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" HandleID="k8s-pod-network.260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Workload="localhost-k8s-whisker--76b494f845--dpfcm-eth0" Sep 10 00:40:58.597174 env[1200]: 2025-09-10 00:40:58.579 [INFO][4803] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:58.597174 env[1200]: 2025-09-10 00:40:58.579 [INFO][4803] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:58.597174 env[1200]: 2025-09-10 00:40:58.586 [WARNING][4803] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" HandleID="k8s-pod-network.260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Workload="localhost-k8s-whisker--76b494f845--dpfcm-eth0" Sep 10 00:40:58.597174 env[1200]: 2025-09-10 00:40:58.586 [INFO][4803] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" HandleID="k8s-pod-network.260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Workload="localhost-k8s-whisker--76b494f845--dpfcm-eth0" Sep 10 00:40:58.597174 env[1200]: 2025-09-10 00:40:58.591 [INFO][4803] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:58.597174 env[1200]: 2025-09-10 00:40:58.594 [INFO][4794] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f" Sep 10 00:40:58.599197 env[1200]: time="2025-09-10T00:40:58.599114814Z" level=info msg="TearDown network for sandbox \"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\" successfully" Sep 10 00:40:58.652412 env[1200]: time="2025-09-10T00:40:58.652337103Z" level=info msg="RemovePodSandbox \"260789378c9a86671089f89141cd039d7419823261bcecabfd702314b963e85f\" returns successfully" Sep 10 00:40:58.653037 env[1200]: time="2025-09-10T00:40:58.653001280Z" level=info msg="StopPodSandbox for \"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\"" Sep 10 00:40:58.743677 env[1200]: 2025-09-10 00:40:58.687 [WARNING][4822] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"72632e3f-7809-4b45-ab8b-6f8e8e8d5c3a", ResourceVersion:"1057", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94", Pod:"coredns-674b8bbfcf-wcqd5", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3871e8d5334", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:58.743677 env[1200]: 2025-09-10 00:40:58.689 [INFO][4822] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Sep 10 00:40:58.743677 env[1200]: 2025-09-10 00:40:58.689 [INFO][4822] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" iface="eth0" netns="" Sep 10 00:40:58.743677 env[1200]: 2025-09-10 00:40:58.689 [INFO][4822] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Sep 10 00:40:58.743677 env[1200]: 2025-09-10 00:40:58.689 [INFO][4822] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Sep 10 00:40:58.743677 env[1200]: 2025-09-10 00:40:58.727 [INFO][4831] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" HandleID="k8s-pod-network.2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Workload="localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0" Sep 10 00:40:58.743677 env[1200]: 2025-09-10 00:40:58.728 [INFO][4831] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:58.743677 env[1200]: 2025-09-10 00:40:58.728 [INFO][4831] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:58.743677 env[1200]: 2025-09-10 00:40:58.734 [WARNING][4831] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" HandleID="k8s-pod-network.2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Workload="localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0" Sep 10 00:40:58.743677 env[1200]: 2025-09-10 00:40:58.734 [INFO][4831] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" HandleID="k8s-pod-network.2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Workload="localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0" Sep 10 00:40:58.743677 env[1200]: 2025-09-10 00:40:58.737 [INFO][4831] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:58.743677 env[1200]: 2025-09-10 00:40:58.741 [INFO][4822] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Sep 10 00:40:58.743677 env[1200]: time="2025-09-10T00:40:58.743663454Z" level=info msg="TearDown network for sandbox \"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\" successfully" Sep 10 00:40:58.743677 env[1200]: time="2025-09-10T00:40:58.743697700Z" level=info msg="StopPodSandbox for \"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\" returns successfully" Sep 10 00:40:58.744996 env[1200]: time="2025-09-10T00:40:58.744924066Z" level=info msg="RemovePodSandbox for \"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\"" Sep 10 00:40:58.744996 env[1200]: time="2025-09-10T00:40:58.744984243Z" level=info msg="Forcibly stopping sandbox \"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\"" Sep 10 00:40:58.856051 env[1200]: 2025-09-10 00:40:58.808 [WARNING][4848] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"72632e3f-7809-4b45-ab8b-6f8e8e8d5c3a", ResourceVersion:"1057", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b855654ee1c59a4b25af253d938d30280460d36f6d35beba9554c5a2c6d57a94", Pod:"coredns-674b8bbfcf-wcqd5", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3871e8d5334", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:58.856051 env[1200]: 2025-09-10 00:40:58.808 [INFO][4848] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Sep 10 00:40:58.856051 env[1200]: 2025-09-10 00:40:58.808 [INFO][4848] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" iface="eth0" netns="" Sep 10 00:40:58.856051 env[1200]: 2025-09-10 00:40:58.808 [INFO][4848] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Sep 10 00:40:58.856051 env[1200]: 2025-09-10 00:40:58.808 [INFO][4848] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Sep 10 00:40:58.856051 env[1200]: 2025-09-10 00:40:58.836 [INFO][4857] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" HandleID="k8s-pod-network.2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Workload="localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0" Sep 10 00:40:58.856051 env[1200]: 2025-09-10 00:40:58.836 [INFO][4857] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:58.856051 env[1200]: 2025-09-10 00:40:58.836 [INFO][4857] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:58.856051 env[1200]: 2025-09-10 00:40:58.848 [WARNING][4857] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" HandleID="k8s-pod-network.2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Workload="localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0" Sep 10 00:40:58.856051 env[1200]: 2025-09-10 00:40:58.848 [INFO][4857] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" HandleID="k8s-pod-network.2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Workload="localhost-k8s-coredns--674b8bbfcf--wcqd5-eth0" Sep 10 00:40:58.856051 env[1200]: 2025-09-10 00:40:58.849 [INFO][4857] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:58.856051 env[1200]: 2025-09-10 00:40:58.852 [INFO][4848] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72" Sep 10 00:40:58.856051 env[1200]: time="2025-09-10T00:40:58.855103392Z" level=info msg="TearDown network for sandbox \"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\" successfully" Sep 10 00:40:58.860379 env[1200]: time="2025-09-10T00:40:58.860283348Z" level=info msg="RemovePodSandbox \"2ff0f0e461e874ec896d7b6fc8682fdc9871f3996eb26d513486400deb8eea72\" returns successfully" Sep 10 00:40:58.861195 env[1200]: time="2025-09-10T00:40:58.861160757Z" level=info msg="StopPodSandbox for \"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\"" Sep 10 00:40:59.033231 env[1200]: 2025-09-10 00:40:58.901 [WARNING][4876] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0", GenerateName:"calico-apiserver-585fb9d697-", Namespace:"calico-apiserver", SelfLink:"", UID:"f4d5d37f-4e25-4fb2-8c58-65edfe9c58e9", ResourceVersion:"1155", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"585fb9d697", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212", Pod:"calico-apiserver-585fb9d697-fs8cm", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib229d1e8bb3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:59.033231 env[1200]: 2025-09-10 00:40:58.901 [INFO][4876] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Sep 10 00:40:59.033231 env[1200]: 2025-09-10 00:40:58.902 [INFO][4876] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" iface="eth0" netns="" Sep 10 00:40:59.033231 env[1200]: 2025-09-10 00:40:58.902 [INFO][4876] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Sep 10 00:40:59.033231 env[1200]: 2025-09-10 00:40:58.902 [INFO][4876] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Sep 10 00:40:59.033231 env[1200]: 2025-09-10 00:40:58.929 [INFO][4885] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" HandleID="k8s-pod-network.8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Workload="localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0" Sep 10 00:40:59.033231 env[1200]: 2025-09-10 00:40:58.930 [INFO][4885] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:59.033231 env[1200]: 2025-09-10 00:40:58.930 [INFO][4885] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:59.033231 env[1200]: 2025-09-10 00:40:59.022 [WARNING][4885] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" HandleID="k8s-pod-network.8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Workload="localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0" Sep 10 00:40:59.033231 env[1200]: 2025-09-10 00:40:59.023 [INFO][4885] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" HandleID="k8s-pod-network.8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Workload="localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0" Sep 10 00:40:59.033231 env[1200]: 2025-09-10 00:40:59.025 [INFO][4885] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:59.033231 env[1200]: 2025-09-10 00:40:59.031 [INFO][4876] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Sep 10 00:40:59.035134 env[1200]: time="2025-09-10T00:40:59.033266671Z" level=info msg="TearDown network for sandbox \"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\" successfully" Sep 10 00:40:59.035134 env[1200]: time="2025-09-10T00:40:59.033302811Z" level=info msg="StopPodSandbox for \"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\" returns successfully" Sep 10 00:40:59.035134 env[1200]: time="2025-09-10T00:40:59.033870069Z" level=info msg="RemovePodSandbox for \"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\"" Sep 10 00:40:59.035134 env[1200]: time="2025-09-10T00:40:59.033907401Z" level=info msg="Forcibly stopping sandbox \"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\"" Sep 10 00:40:59.334978 env[1200]: 2025-09-10 00:40:59.135 [WARNING][4902] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0", GenerateName:"calico-apiserver-585fb9d697-", Namespace:"calico-apiserver", SelfLink:"", UID:"f4d5d37f-4e25-4fb2-8c58-65edfe9c58e9", ResourceVersion:"1155", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"585fb9d697", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"16b0b83bcdd8b81e9b8bb821127149d287fd5e06d6bff32fcc712ed400795212", Pod:"calico-apiserver-585fb9d697-fs8cm", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib229d1e8bb3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:59.334978 env[1200]: 2025-09-10 00:40:59.135 [INFO][4902] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Sep 10 00:40:59.334978 env[1200]: 2025-09-10 00:40:59.135 [INFO][4902] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" iface="eth0" netns="" Sep 10 00:40:59.334978 env[1200]: 2025-09-10 00:40:59.135 [INFO][4902] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Sep 10 00:40:59.334978 env[1200]: 2025-09-10 00:40:59.135 [INFO][4902] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Sep 10 00:40:59.334978 env[1200]: 2025-09-10 00:40:59.175 [INFO][4911] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" HandleID="k8s-pod-network.8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Workload="localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0" Sep 10 00:40:59.334978 env[1200]: 2025-09-10 00:40:59.175 [INFO][4911] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:59.334978 env[1200]: 2025-09-10 00:40:59.175 [INFO][4911] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:59.334978 env[1200]: 2025-09-10 00:40:59.279 [WARNING][4911] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" HandleID="k8s-pod-network.8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Workload="localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0" Sep 10 00:40:59.334978 env[1200]: 2025-09-10 00:40:59.279 [INFO][4911] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" HandleID="k8s-pod-network.8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Workload="localhost-k8s-calico--apiserver--585fb9d697--fs8cm-eth0" Sep 10 00:40:59.334978 env[1200]: 2025-09-10 00:40:59.319 [INFO][4911] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:59.334978 env[1200]: 2025-09-10 00:40:59.329 [INFO][4902] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326" Sep 10 00:40:59.334978 env[1200]: time="2025-09-10T00:40:59.333231967Z" level=info msg="TearDown network for sandbox \"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\" successfully" Sep 10 00:40:59.337859 env[1200]: time="2025-09-10T00:40:59.337765572Z" level=info msg="RemovePodSandbox \"8fc013fdaeadc62e027714906ceeb6689a7e879f0e0ddc6fad13fe334b17c326\" returns successfully" Sep 10 00:40:59.338593 env[1200]: time="2025-09-10T00:40:59.338531535Z" level=info msg="StopPodSandbox for \"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\"" Sep 10 00:40:59.459201 env[1200]: 2025-09-10 00:40:59.382 [WARNING][4928] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--54d579b49d--pbxhz-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"dbcb3f8c-1da8-4226-977e-9eb4d59cd42f", ResourceVersion:"1095", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee", Pod:"goldmane-54d579b49d-pbxhz", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic8b2a4655f3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:59.459201 env[1200]: 2025-09-10 00:40:59.382 [INFO][4928] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Sep 10 00:40:59.459201 env[1200]: 2025-09-10 00:40:59.382 [INFO][4928] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" iface="eth0" netns="" Sep 10 00:40:59.459201 env[1200]: 2025-09-10 00:40:59.382 [INFO][4928] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Sep 10 00:40:59.459201 env[1200]: 2025-09-10 00:40:59.382 [INFO][4928] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Sep 10 00:40:59.459201 env[1200]: 2025-09-10 00:40:59.438 [INFO][4937] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" HandleID="k8s-pod-network.97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Workload="localhost-k8s-goldmane--54d579b49d--pbxhz-eth0" Sep 10 00:40:59.459201 env[1200]: 2025-09-10 00:40:59.438 [INFO][4937] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:59.459201 env[1200]: 2025-09-10 00:40:59.438 [INFO][4937] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:59.459201 env[1200]: 2025-09-10 00:40:59.450 [WARNING][4937] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" HandleID="k8s-pod-network.97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Workload="localhost-k8s-goldmane--54d579b49d--pbxhz-eth0" Sep 10 00:40:59.459201 env[1200]: 2025-09-10 00:40:59.450 [INFO][4937] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" HandleID="k8s-pod-network.97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Workload="localhost-k8s-goldmane--54d579b49d--pbxhz-eth0" Sep 10 00:40:59.459201 env[1200]: 2025-09-10 00:40:59.454 [INFO][4937] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:59.459201 env[1200]: 2025-09-10 00:40:59.457 [INFO][4928] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Sep 10 00:40:59.460156 env[1200]: time="2025-09-10T00:40:59.459248339Z" level=info msg="TearDown network for sandbox \"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\" successfully" Sep 10 00:40:59.460156 env[1200]: time="2025-09-10T00:40:59.459282556Z" level=info msg="StopPodSandbox for \"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\" returns successfully" Sep 10 00:40:59.460442 env[1200]: time="2025-09-10T00:40:59.460407603Z" level=info msg="RemovePodSandbox for \"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\"" Sep 10 00:40:59.460582 env[1200]: time="2025-09-10T00:40:59.460530762Z" level=info msg="Forcibly stopping sandbox \"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\"" Sep 10 00:40:59.532809 kubelet[1956]: I0910 00:40:59.532750 1956 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 10 00:40:59.538000 audit[4672]: AVC avc: denied { watch } for pid=4672 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_00_40_33.647357831/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c464,c924 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c464,c924 tclass=file permissive=0 Sep 10 00:40:59.538000 audit[4672]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0006d1c40 a2=fc6 a3=0 items=0 ppid=3949 pid=4672 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c464,c924 key=(null) Sep 10 00:40:59.538000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 00:40:59.555509 env[1200]: 2025-09-10 00:40:59.505 [WARNING][4955] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--54d579b49d--pbxhz-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"dbcb3f8c-1da8-4226-977e-9eb4d59cd42f", ResourceVersion:"1095", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee", Pod:"goldmane-54d579b49d-pbxhz", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic8b2a4655f3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:59.555509 env[1200]: 2025-09-10 00:40:59.505 [INFO][4955] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Sep 10 00:40:59.555509 env[1200]: 2025-09-10 00:40:59.505 [INFO][4955] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" iface="eth0" netns="" Sep 10 00:40:59.555509 env[1200]: 2025-09-10 00:40:59.505 [INFO][4955] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Sep 10 00:40:59.555509 env[1200]: 2025-09-10 00:40:59.505 [INFO][4955] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Sep 10 00:40:59.555509 env[1200]: 2025-09-10 00:40:59.540 [INFO][4963] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" HandleID="k8s-pod-network.97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Workload="localhost-k8s-goldmane--54d579b49d--pbxhz-eth0" Sep 10 00:40:59.555509 env[1200]: 2025-09-10 00:40:59.540 [INFO][4963] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:59.555509 env[1200]: 2025-09-10 00:40:59.540 [INFO][4963] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:59.555509 env[1200]: 2025-09-10 00:40:59.548 [WARNING][4963] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" HandleID="k8s-pod-network.97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Workload="localhost-k8s-goldmane--54d579b49d--pbxhz-eth0" Sep 10 00:40:59.555509 env[1200]: 2025-09-10 00:40:59.548 [INFO][4963] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" HandleID="k8s-pod-network.97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Workload="localhost-k8s-goldmane--54d579b49d--pbxhz-eth0" Sep 10 00:40:59.555509 env[1200]: 2025-09-10 00:40:59.550 [INFO][4963] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:59.555509 env[1200]: 2025-09-10 00:40:59.553 [INFO][4955] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2" Sep 10 00:40:59.556361 env[1200]: time="2025-09-10T00:40:59.556313223Z" level=info msg="TearDown network for sandbox \"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\" successfully" Sep 10 00:40:59.560729 env[1200]: time="2025-09-10T00:40:59.560689954Z" level=info msg="RemovePodSandbox \"97646c3aea204ded38f65d6c7a7fe2b51c5a313d2331f063295e23d4b98ab4c2\" returns successfully" Sep 10 00:40:59.561479 env[1200]: time="2025-09-10T00:40:59.561442622Z" level=info msg="StopPodSandbox for \"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\"" Sep 10 00:40:59.636943 env[1200]: 2025-09-10 00:40:59.602 [WARNING][4980] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0", GenerateName:"calico-kube-controllers-6dbd5f8568-", Namespace:"calico-system", SelfLink:"", UID:"70a96d34-f4e7-4ed6-9a70-692bda4903ef", ResourceVersion:"1099", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6dbd5f8568", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48", Pod:"calico-kube-controllers-6dbd5f8568-lbcfq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calibdb3e6fe5d6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:59.636943 env[1200]: 2025-09-10 00:40:59.602 [INFO][4980] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Sep 10 00:40:59.636943 env[1200]: 2025-09-10 00:40:59.602 [INFO][4980] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" iface="eth0" netns="" Sep 10 00:40:59.636943 env[1200]: 2025-09-10 00:40:59.602 [INFO][4980] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Sep 10 00:40:59.636943 env[1200]: 2025-09-10 00:40:59.602 [INFO][4980] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Sep 10 00:40:59.636943 env[1200]: 2025-09-10 00:40:59.623 [INFO][4990] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" HandleID="k8s-pod-network.a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Workload="localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0" Sep 10 00:40:59.636943 env[1200]: 2025-09-10 00:40:59.623 [INFO][4990] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:59.636943 env[1200]: 2025-09-10 00:40:59.623 [INFO][4990] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:59.636943 env[1200]: 2025-09-10 00:40:59.629 [WARNING][4990] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" HandleID="k8s-pod-network.a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Workload="localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0" Sep 10 00:40:59.636943 env[1200]: 2025-09-10 00:40:59.630 [INFO][4990] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" HandleID="k8s-pod-network.a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Workload="localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0" Sep 10 00:40:59.636943 env[1200]: 2025-09-10 00:40:59.631 [INFO][4990] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:59.636943 env[1200]: 2025-09-10 00:40:59.634 [INFO][4980] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Sep 10 00:40:59.638086 env[1200]: time="2025-09-10T00:40:59.638035488Z" level=info msg="TearDown network for sandbox \"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\" successfully" Sep 10 00:40:59.638195 env[1200]: time="2025-09-10T00:40:59.638162765Z" level=info msg="StopPodSandbox for \"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\" returns successfully" Sep 10 00:40:59.639025 env[1200]: time="2025-09-10T00:40:59.638983613Z" level=info msg="RemovePodSandbox for \"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\"" Sep 10 00:40:59.639103 env[1200]: time="2025-09-10T00:40:59.639032097Z" level=info msg="Forcibly stopping sandbox \"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\"" Sep 10 00:40:59.714406 env[1200]: 2025-09-10 00:40:59.677 [WARNING][5007] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0", GenerateName:"calico-kube-controllers-6dbd5f8568-", Namespace:"calico-system", SelfLink:"", UID:"70a96d34-f4e7-4ed6-9a70-692bda4903ef", ResourceVersion:"1099", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6dbd5f8568", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48", Pod:"calico-kube-controllers-6dbd5f8568-lbcfq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calibdb3e6fe5d6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:59.714406 env[1200]: 2025-09-10 00:40:59.678 [INFO][5007] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Sep 10 00:40:59.714406 env[1200]: 2025-09-10 00:40:59.678 [INFO][5007] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" iface="eth0" netns="" Sep 10 00:40:59.714406 env[1200]: 2025-09-10 00:40:59.678 [INFO][5007] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Sep 10 00:40:59.714406 env[1200]: 2025-09-10 00:40:59.678 [INFO][5007] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Sep 10 00:40:59.714406 env[1200]: 2025-09-10 00:40:59.699 [INFO][5015] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" HandleID="k8s-pod-network.a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Workload="localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0" Sep 10 00:40:59.714406 env[1200]: 2025-09-10 00:40:59.700 [INFO][5015] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:59.714406 env[1200]: 2025-09-10 00:40:59.700 [INFO][5015] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:59.714406 env[1200]: 2025-09-10 00:40:59.707 [WARNING][5015] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" HandleID="k8s-pod-network.a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Workload="localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0" Sep 10 00:40:59.714406 env[1200]: 2025-09-10 00:40:59.707 [INFO][5015] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" HandleID="k8s-pod-network.a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Workload="localhost-k8s-calico--kube--controllers--6dbd5f8568--lbcfq-eth0" Sep 10 00:40:59.714406 env[1200]: 2025-09-10 00:40:59.709 [INFO][5015] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:59.714406 env[1200]: 2025-09-10 00:40:59.712 [INFO][5007] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c" Sep 10 00:40:59.715137 env[1200]: time="2025-09-10T00:40:59.715093204Z" level=info msg="TearDown network for sandbox \"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\" successfully" Sep 10 00:40:59.719095 env[1200]: time="2025-09-10T00:40:59.719027149Z" level=info msg="RemovePodSandbox \"a78759b5e14aa9f4215f4cb66b1fb03d0f06a3e325033939f20a0b3d373cbf7c\" returns successfully" Sep 10 00:40:59.719720 env[1200]: time="2025-09-10T00:40:59.719674282Z" level=info msg="StopPodSandbox for \"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\"" Sep 10 00:40:59.799061 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1335752389.mount: Deactivated successfully. Sep 10 00:40:59.812353 env[1200]: 2025-09-10 00:40:59.764 [WARNING][5033] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0", GenerateName:"calico-apiserver-694cb88886-", Namespace:"calico-apiserver", SelfLink:"", UID:"15af17cb-bf28-4fae-bb29-ea2d7f332ad6", ResourceVersion:"1115", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"694cb88886", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd", Pod:"calico-apiserver-694cb88886-nchgf", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9de38857c6a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:59.812353 env[1200]: 2025-09-10 00:40:59.764 [INFO][5033] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Sep 10 00:40:59.812353 env[1200]: 2025-09-10 00:40:59.764 [INFO][5033] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" iface="eth0" netns="" Sep 10 00:40:59.812353 env[1200]: 2025-09-10 00:40:59.764 [INFO][5033] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Sep 10 00:40:59.812353 env[1200]: 2025-09-10 00:40:59.764 [INFO][5033] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Sep 10 00:40:59.812353 env[1200]: 2025-09-10 00:40:59.790 [INFO][5043] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" HandleID="k8s-pod-network.47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Workload="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" Sep 10 00:40:59.812353 env[1200]: 2025-09-10 00:40:59.790 [INFO][5043] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:59.812353 env[1200]: 2025-09-10 00:40:59.790 [INFO][5043] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:59.812353 env[1200]: 2025-09-10 00:40:59.802 [WARNING][5043] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" HandleID="k8s-pod-network.47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Workload="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" Sep 10 00:40:59.812353 env[1200]: 2025-09-10 00:40:59.802 [INFO][5043] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" HandleID="k8s-pod-network.47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Workload="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" Sep 10 00:40:59.812353 env[1200]: 2025-09-10 00:40:59.805 [INFO][5043] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:59.812353 env[1200]: 2025-09-10 00:40:59.808 [INFO][5033] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Sep 10 00:40:59.813187 env[1200]: time="2025-09-10T00:40:59.813107815Z" level=info msg="TearDown network for sandbox \"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\" successfully" Sep 10 00:40:59.813187 env[1200]: time="2025-09-10T00:40:59.813167722Z" level=info msg="StopPodSandbox for \"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\" returns successfully" Sep 10 00:40:59.814014 env[1200]: time="2025-09-10T00:40:59.813913625Z" level=info msg="RemovePodSandbox for \"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\"" Sep 10 00:40:59.814014 env[1200]: time="2025-09-10T00:40:59.813980455Z" level=info msg="Forcibly stopping sandbox \"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\"" Sep 10 00:40:59.821003 env[1200]: time="2025-09-10T00:40:59.820942851Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:59.824401 env[1200]: time="2025-09-10T00:40:59.824336760Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7e29b0984d517678aab6ca138482c318989f6f28daf9d3b5dd6e4a5a3115ac16,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:59.826076 env[1200]: time="2025-09-10T00:40:59.826015480Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:59.827901 env[1200]: time="2025-09-10T00:40:59.827853247Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:29becebc47401da9997a2a30f4c25c511a5f379d17275680b048224829af71a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:40:59.828751 env[1200]: time="2025-09-10T00:40:59.828698944Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\" returns image reference \"sha256:7e29b0984d517678aab6ca138482c318989f6f28daf9d3b5dd6e4a5a3115ac16\"" Sep 10 00:40:59.831564 env[1200]: time="2025-09-10T00:40:59.831521938Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 10 00:40:59.836761 env[1200]: time="2025-09-10T00:40:59.836686014Z" level=info msg="CreateContainer within sandbox \"aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Sep 10 00:40:59.856803 env[1200]: time="2025-09-10T00:40:59.856727758Z" level=info msg="CreateContainer within sandbox \"aa674ad404f6c295b908e40ce05ea091c858563fc9dce7e820aec6fe9cbe3a2c\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"dadcdc3a49e3e3add3669616bee713238cb71885735f9d80b53e89547c7930bb\"" Sep 10 00:40:59.856853 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1240057194.mount: Deactivated successfully. Sep 10 00:40:59.861883 env[1200]: time="2025-09-10T00:40:59.861829453Z" level=info msg="StartContainer for \"dadcdc3a49e3e3add3669616bee713238cb71885735f9d80b53e89547c7930bb\"" Sep 10 00:40:59.882428 systemd[1]: Started cri-containerd-dadcdc3a49e3e3add3669616bee713238cb71885735f9d80b53e89547c7930bb.scope. Sep 10 00:40:59.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.900000 audit: BPF prog-id=219 op=LOAD Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3660 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:59.901000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461646364633361343965336533616464333636393631366265653731 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3660 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:59.901000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461646364633361343965336533616464333636393631366265653731 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit: BPF prog-id=220 op=LOAD Sep 10 00:40:59.901000 audit[5084]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0002aad60 items=0 ppid=3660 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:59.901000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461646364633361343965336533616464333636393631366265653731 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit: BPF prog-id=221 op=LOAD Sep 10 00:40:59.901000 audit[5084]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0002aada8 items=0 ppid=3660 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:59.901000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461646364633361343965336533616464333636393631366265653731 Sep 10 00:40:59.901000 audit: BPF prog-id=221 op=UNLOAD Sep 10 00:40:59.901000 audit: BPF prog-id=220 op=UNLOAD Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:40:59.901000 audit: BPF prog-id=222 op=LOAD Sep 10 00:40:59.901000 audit[5084]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0002ab1b8 items=0 ppid=3660 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:40:59.901000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461646364633361343965336533616464333636393631366265653731 Sep 10 00:40:59.945019 env[1200]: 2025-09-10 00:40:59.860 [WARNING][5062] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0", GenerateName:"calico-apiserver-694cb88886-", Namespace:"calico-apiserver", SelfLink:"", UID:"15af17cb-bf28-4fae-bb29-ea2d7f332ad6", ResourceVersion:"1115", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"694cb88886", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd", Pod:"calico-apiserver-694cb88886-nchgf", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9de38857c6a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:40:59.945019 env[1200]: 2025-09-10 00:40:59.861 [INFO][5062] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Sep 10 00:40:59.945019 env[1200]: 2025-09-10 00:40:59.861 [INFO][5062] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" iface="eth0" netns="" Sep 10 00:40:59.945019 env[1200]: 2025-09-10 00:40:59.861 [INFO][5062] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Sep 10 00:40:59.945019 env[1200]: 2025-09-10 00:40:59.861 [INFO][5062] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Sep 10 00:40:59.945019 env[1200]: 2025-09-10 00:40:59.896 [INFO][5071] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" HandleID="k8s-pod-network.47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Workload="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" Sep 10 00:40:59.945019 env[1200]: 2025-09-10 00:40:59.896 [INFO][5071] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:40:59.945019 env[1200]: 2025-09-10 00:40:59.897 [INFO][5071] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:40:59.945019 env[1200]: 2025-09-10 00:40:59.904 [WARNING][5071] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" HandleID="k8s-pod-network.47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Workload="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" Sep 10 00:40:59.945019 env[1200]: 2025-09-10 00:40:59.905 [INFO][5071] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" HandleID="k8s-pod-network.47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Workload="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" Sep 10 00:40:59.945019 env[1200]: 2025-09-10 00:40:59.907 [INFO][5071] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:40:59.945019 env[1200]: 2025-09-10 00:40:59.909 [INFO][5062] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24" Sep 10 00:40:59.945019 env[1200]: time="2025-09-10T00:40:59.911647854Z" level=info msg="TearDown network for sandbox \"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\" successfully" Sep 10 00:41:00.141271 env[1200]: time="2025-09-10T00:41:00.141192339Z" level=info msg="StartContainer for \"dadcdc3a49e3e3add3669616bee713238cb71885735f9d80b53e89547c7930bb\" returns successfully" Sep 10 00:41:00.142779 env[1200]: time="2025-09-10T00:41:00.142739171Z" level=info msg="RemovePodSandbox \"47c8d0e3311fc72bfcf9755f4169d20124478edee256535659b244f5e8f83c24\" returns successfully" Sep 10 00:41:00.143416 env[1200]: time="2025-09-10T00:41:00.143364940Z" level=info msg="StopPodSandbox for \"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\"" Sep 10 00:41:00.215009 env[1200]: time="2025-09-10T00:41:00.214779386Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:41:00.221596 env[1200]: time="2025-09-10T00:41:00.221539129Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:41:00.225041 env[1200]: time="2025-09-10T00:41:00.225014300Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:41:00.227636 env[1200]: time="2025-09-10T00:41:00.227580333Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:41:00.228165 env[1200]: time="2025-09-10T00:41:00.228125056Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a\"" Sep 10 00:41:00.229686 env[1200]: time="2025-09-10T00:41:00.229481138Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\"" Sep 10 00:41:00.230617 env[1200]: 2025-09-10 00:41:00.187 [WARNING][5127] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--tn66z-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"9d11f211-d02b-4887-86fd-f93a2eb25fc1", ResourceVersion:"1048", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7", Pod:"csi-node-driver-tn66z", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali047615598cf", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:41:00.230617 env[1200]: 2025-09-10 00:41:00.188 [INFO][5127] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Sep 10 00:41:00.230617 env[1200]: 2025-09-10 00:41:00.188 [INFO][5127] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" iface="eth0" netns="" Sep 10 00:41:00.230617 env[1200]: 2025-09-10 00:41:00.188 [INFO][5127] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Sep 10 00:41:00.230617 env[1200]: 2025-09-10 00:41:00.188 [INFO][5127] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Sep 10 00:41:00.230617 env[1200]: 2025-09-10 00:41:00.210 [INFO][5135] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" HandleID="k8s-pod-network.c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Workload="localhost-k8s-csi--node--driver--tn66z-eth0" Sep 10 00:41:00.230617 env[1200]: 2025-09-10 00:41:00.211 [INFO][5135] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:41:00.230617 env[1200]: 2025-09-10 00:41:00.211 [INFO][5135] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:41:00.230617 env[1200]: 2025-09-10 00:41:00.221 [WARNING][5135] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" HandleID="k8s-pod-network.c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Workload="localhost-k8s-csi--node--driver--tn66z-eth0" Sep 10 00:41:00.230617 env[1200]: 2025-09-10 00:41:00.221 [INFO][5135] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" HandleID="k8s-pod-network.c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Workload="localhost-k8s-csi--node--driver--tn66z-eth0" Sep 10 00:41:00.230617 env[1200]: 2025-09-10 00:41:00.224 [INFO][5135] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:41:00.230617 env[1200]: 2025-09-10 00:41:00.227 [INFO][5127] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Sep 10 00:41:00.230617 env[1200]: time="2025-09-10T00:41:00.230320903Z" level=info msg="TearDown network for sandbox \"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\" successfully" Sep 10 00:41:00.230617 env[1200]: time="2025-09-10T00:41:00.230345991Z" level=info msg="StopPodSandbox for \"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\" returns successfully" Sep 10 00:41:00.231144 env[1200]: time="2025-09-10T00:41:00.230662153Z" level=info msg="RemovePodSandbox for \"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\"" Sep 10 00:41:00.231144 env[1200]: time="2025-09-10T00:41:00.230694265Z" level=info msg="Forcibly stopping sandbox \"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\"" Sep 10 00:41:00.234770 env[1200]: time="2025-09-10T00:41:00.234685674Z" level=info msg="CreateContainer within sandbox \"8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 10 00:41:00.248613 env[1200]: time="2025-09-10T00:41:00.247861035Z" level=info msg="CreateContainer within sandbox \"8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"e60970de81662f7fd5c11d44c67058f69576818f9136314f192afed2ed5b2745\"" Sep 10 00:41:00.249723 env[1200]: time="2025-09-10T00:41:00.249559941Z" level=info msg="StartContainer for \"e60970de81662f7fd5c11d44c67058f69576818f9136314f192afed2ed5b2745\"" Sep 10 00:41:00.290622 systemd[1]: Started cri-containerd-e60970de81662f7fd5c11d44c67058f69576818f9136314f192afed2ed5b2745.scope. Sep 10 00:41:00.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.304000 audit: BPF prog-id=223 op=LOAD Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { bpf } for pid=5168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4243 pid=5168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:00.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536303937306465383136363266376664356331316434346336373035 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { perfmon } for pid=5168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=4243 pid=5168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:00.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536303937306465383136363266376664356331316434346336373035 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { bpf } for pid=5168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { bpf } for pid=5168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { bpf } for pid=5168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { perfmon } for pid=5168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { perfmon } for pid=5168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { perfmon } for pid=5168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { perfmon } for pid=5168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { perfmon } for pid=5168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { bpf } for pid=5168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { bpf } for pid=5168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit: BPF prog-id=224 op=LOAD Sep 10 00:41:00.305000 audit[5168]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003847c0 items=0 ppid=4243 pid=5168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:00.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536303937306465383136363266376664356331316434346336373035 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { bpf } for pid=5168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { bpf } for pid=5168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { perfmon } for pid=5168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { perfmon } for pid=5168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { perfmon } for pid=5168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { perfmon } for pid=5168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { perfmon } for pid=5168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { bpf } for pid=5168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { bpf } for pid=5168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit: BPF prog-id=225 op=LOAD Sep 10 00:41:00.305000 audit[5168]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000384808 items=0 ppid=4243 pid=5168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:00.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536303937306465383136363266376664356331316434346336373035 Sep 10 00:41:00.305000 audit: BPF prog-id=225 op=UNLOAD Sep 10 00:41:00.305000 audit: BPF prog-id=224 op=UNLOAD Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { bpf } for pid=5168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { bpf } for pid=5168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { bpf } for pid=5168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { perfmon } for pid=5168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { perfmon } for pid=5168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { perfmon } for pid=5168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { perfmon } for pid=5168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { perfmon } for pid=5168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { bpf } for pid=5168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit[5168]: AVC avc: denied { bpf } for pid=5168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:00.305000 audit: BPF prog-id=226 op=LOAD Sep 10 00:41:00.305000 audit[5168]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000384c18 items=0 ppid=4243 pid=5168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:00.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536303937306465383136363266376664356331316434346336373035 Sep 10 00:41:00.524789 env[1200]: time="2025-09-10T00:41:00.524666907Z" level=info msg="StartContainer for \"e60970de81662f7fd5c11d44c67058f69576818f9136314f192afed2ed5b2745\" returns successfully" Sep 10 00:41:00.538520 env[1200]: 2025-09-10 00:41:00.278 [WARNING][5154] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--tn66z-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"9d11f211-d02b-4887-86fd-f93a2eb25fc1", ResourceVersion:"1048", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7", Pod:"csi-node-driver-tn66z", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali047615598cf", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:41:00.538520 env[1200]: 2025-09-10 00:41:00.278 [INFO][5154] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Sep 10 00:41:00.538520 env[1200]: 2025-09-10 00:41:00.278 [INFO][5154] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" iface="eth0" netns="" Sep 10 00:41:00.538520 env[1200]: 2025-09-10 00:41:00.278 [INFO][5154] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Sep 10 00:41:00.538520 env[1200]: 2025-09-10 00:41:00.278 [INFO][5154] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Sep 10 00:41:00.538520 env[1200]: 2025-09-10 00:41:00.380 [INFO][5179] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" HandleID="k8s-pod-network.c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Workload="localhost-k8s-csi--node--driver--tn66z-eth0" Sep 10 00:41:00.538520 env[1200]: 2025-09-10 00:41:00.380 [INFO][5179] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:41:00.538520 env[1200]: 2025-09-10 00:41:00.380 [INFO][5179] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:41:00.538520 env[1200]: 2025-09-10 00:41:00.525 [WARNING][5179] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" HandleID="k8s-pod-network.c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Workload="localhost-k8s-csi--node--driver--tn66z-eth0" Sep 10 00:41:00.538520 env[1200]: 2025-09-10 00:41:00.525 [INFO][5179] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" HandleID="k8s-pod-network.c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Workload="localhost-k8s-csi--node--driver--tn66z-eth0" Sep 10 00:41:00.538520 env[1200]: 2025-09-10 00:41:00.529 [INFO][5179] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:41:00.538520 env[1200]: 2025-09-10 00:41:00.533 [INFO][5154] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd" Sep 10 00:41:00.539878 env[1200]: time="2025-09-10T00:41:00.539812889Z" level=info msg="TearDown network for sandbox \"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\" successfully" Sep 10 00:41:00.549859 env[1200]: time="2025-09-10T00:41:00.549784433Z" level=info msg="RemovePodSandbox \"c6119e22298fea910595c91fc1725e448ddb68b4cdc1255a43629711d53236fd\" returns successfully" Sep 10 00:41:00.554139 env[1200]: time="2025-09-10T00:41:00.550808815Z" level=info msg="StopPodSandbox for \"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\"" Sep 10 00:41:00.566408 kubelet[1956]: I0910 00:41:00.566284 1956 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-694cb88886-v9hh9" podStartSLOduration=35.476783552 podStartE2EDuration="45.566233536s" podCreationTimestamp="2025-09-10 00:40:15 +0000 UTC" firstStartedPulling="2025-09-10 00:40:50.139849494 +0000 UTC m=+51.993179918" lastFinishedPulling="2025-09-10 00:41:00.229299488 +0000 UTC m=+62.082629902" observedRunningTime="2025-09-10 00:41:00.561945122 +0000 UTC m=+62.415275536" watchObservedRunningTime="2025-09-10 00:41:00.566233536 +0000 UTC m=+62.419563950" Sep 10 00:41:00.567125 kubelet[1956]: I0910 00:41:00.567076 1956 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-585fb9d697-fs8cm" podStartSLOduration=36.692231415 podStartE2EDuration="44.567066407s" podCreationTimestamp="2025-09-10 00:40:16 +0000 UTC" firstStartedPulling="2025-09-10 00:40:48.628412895 +0000 UTC m=+50.481743299" lastFinishedPulling="2025-09-10 00:40:56.503247877 +0000 UTC m=+58.356578291" observedRunningTime="2025-09-10 00:40:58.542562071 +0000 UTC m=+60.395892515" watchObservedRunningTime="2025-09-10 00:41:00.567066407 +0000 UTC m=+62.420396821" Sep 10 00:41:00.578000 audit[5233]: NETFILTER_CFG table=filter:122 family=2 entries=14 op=nft_register_rule pid=5233 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:00.578000 audit[5233]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffd484ffe0 a2=0 a3=7fffd484ffcc items=0 ppid=2118 pid=5233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:00.578000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:00.582000 audit[5233]: NETFILTER_CFG table=nat:123 family=2 entries=20 op=nft_register_rule pid=5233 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:00.582000 audit[5233]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fffd484ffe0 a2=0 a3=7fffd484ffcc items=0 ppid=2118 pid=5233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:00.582000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:00.599000 audit[5235]: NETFILTER_CFG table=filter:124 family=2 entries=13 op=nft_register_rule pid=5235 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:00.599000 audit[5235]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffd01bf8d90 a2=0 a3=7ffd01bf8d7c items=0 ppid=2118 pid=5235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:00.599000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:00.605000 audit[5235]: NETFILTER_CFG table=nat:125 family=2 entries=27 op=nft_register_chain pid=5235 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:00.605000 audit[5235]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffd01bf8d90 a2=0 a3=7ffd01bf8d7c items=0 ppid=2118 pid=5235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:00.605000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:00.655899 env[1200]: 2025-09-10 00:41:00.616 [WARNING][5226] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0", GenerateName:"calico-apiserver-694cb88886-", Namespace:"calico-apiserver", SelfLink:"", UID:"e48b1739-8cbf-43e6-b074-f445c5aaa2ae", ResourceVersion:"1175", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"694cb88886", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963", Pod:"calico-apiserver-694cb88886-v9hh9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali961d5ee6476", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:41:00.655899 env[1200]: 2025-09-10 00:41:00.616 [INFO][5226] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Sep 10 00:41:00.655899 env[1200]: 2025-09-10 00:41:00.616 [INFO][5226] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" iface="eth0" netns="" Sep 10 00:41:00.655899 env[1200]: 2025-09-10 00:41:00.616 [INFO][5226] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Sep 10 00:41:00.655899 env[1200]: 2025-09-10 00:41:00.616 [INFO][5226] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Sep 10 00:41:00.655899 env[1200]: 2025-09-10 00:41:00.639 [INFO][5238] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" HandleID="k8s-pod-network.642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Workload="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" Sep 10 00:41:00.655899 env[1200]: 2025-09-10 00:41:00.639 [INFO][5238] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:41:00.655899 env[1200]: 2025-09-10 00:41:00.639 [INFO][5238] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:41:00.655899 env[1200]: 2025-09-10 00:41:00.647 [WARNING][5238] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" HandleID="k8s-pod-network.642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Workload="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" Sep 10 00:41:00.655899 env[1200]: 2025-09-10 00:41:00.647 [INFO][5238] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" HandleID="k8s-pod-network.642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Workload="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" Sep 10 00:41:00.655899 env[1200]: 2025-09-10 00:41:00.650 [INFO][5238] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:41:00.655899 env[1200]: 2025-09-10 00:41:00.652 [INFO][5226] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Sep 10 00:41:00.655899 env[1200]: time="2025-09-10T00:41:00.655768336Z" level=info msg="TearDown network for sandbox \"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\" successfully" Sep 10 00:41:00.655899 env[1200]: time="2025-09-10T00:41:00.655808303Z" level=info msg="StopPodSandbox for \"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\" returns successfully" Sep 10 00:41:00.657077 env[1200]: time="2025-09-10T00:41:00.656531392Z" level=info msg="RemovePodSandbox for \"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\"" Sep 10 00:41:00.657077 env[1200]: time="2025-09-10T00:41:00.656564596Z" level=info msg="Forcibly stopping sandbox \"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\"" Sep 10 00:41:00.740005 env[1200]: 2025-09-10 00:41:00.695 [WARNING][5257] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0", GenerateName:"calico-apiserver-694cb88886-", Namespace:"calico-apiserver", SelfLink:"", UID:"e48b1739-8cbf-43e6-b074-f445c5aaa2ae", ResourceVersion:"1175", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 0, 40, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"694cb88886", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963", Pod:"calico-apiserver-694cb88886-v9hh9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali961d5ee6476", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 00:41:00.740005 env[1200]: 2025-09-10 00:41:00.695 [INFO][5257] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Sep 10 00:41:00.740005 env[1200]: 2025-09-10 00:41:00.695 [INFO][5257] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" iface="eth0" netns="" Sep 10 00:41:00.740005 env[1200]: 2025-09-10 00:41:00.695 [INFO][5257] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Sep 10 00:41:00.740005 env[1200]: 2025-09-10 00:41:00.695 [INFO][5257] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Sep 10 00:41:00.740005 env[1200]: 2025-09-10 00:41:00.721 [INFO][5265] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" HandleID="k8s-pod-network.642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Workload="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" Sep 10 00:41:00.740005 env[1200]: 2025-09-10 00:41:00.721 [INFO][5265] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:41:00.740005 env[1200]: 2025-09-10 00:41:00.721 [INFO][5265] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:41:00.740005 env[1200]: 2025-09-10 00:41:00.729 [WARNING][5265] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" HandleID="k8s-pod-network.642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Workload="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" Sep 10 00:41:00.740005 env[1200]: 2025-09-10 00:41:00.733 [INFO][5265] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" HandleID="k8s-pod-network.642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Workload="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" Sep 10 00:41:00.740005 env[1200]: 2025-09-10 00:41:00.734 [INFO][5265] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:41:00.740005 env[1200]: 2025-09-10 00:41:00.737 [INFO][5257] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881" Sep 10 00:41:00.740689 env[1200]: time="2025-09-10T00:41:00.740067410Z" level=info msg="TearDown network for sandbox \"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\" successfully" Sep 10 00:41:00.809746 env[1200]: time="2025-09-10T00:41:00.809674399Z" level=info msg="RemovePodSandbox \"642b90525d6790c3fe7c68f6f71a0bd33f8b6b18e3eef91b132cc71df47ea881\" returns successfully" Sep 10 00:41:01.029612 systemd[1]: run-containerd-runc-k8s.io-e60970de81662f7fd5c11d44c67058f69576818f9136314f192afed2ed5b2745-runc.N8DKDO.mount: Deactivated successfully. Sep 10 00:41:01.755000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:41:01.755000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0015b7520 a2=fc6 a3=0 items=0 ppid=1653 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 key=(null) Sep 10 00:41:01.755000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:41:01.757000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:41:01.757000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002f36be0 a2=fc6 a3=0 items=0 ppid=1653 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 key=(null) Sep 10 00:41:01.757000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:41:01.757000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:41:01.757000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00133f9c0 a2=fc6 a3=0 items=0 ppid=1653 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 key=(null) Sep 10 00:41:01.757000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:41:01.773000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:41:01.773000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002f36c40 a2=fc6 a3=0 items=0 ppid=1653 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 key=(null) Sep 10 00:41:01.773000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:41:02.312994 kernel: kauditd_printk_skb: 205 callbacks suppressed Sep 10 00:41:02.313169 kernel: audit: type=1400 audit(1757464862.308:1472): avc: denied { watch } for pid=5187 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_00_40_33.325110392/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c21,c176 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c21,c176 tclass=file permissive=0 Sep 10 00:41:02.308000 audit[5187]: AVC avc: denied { watch } for pid=5187 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_00_40_33.325110392/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c21,c176 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c21,c176 tclass=file permissive=0 Sep 10 00:41:02.308000 audit[5187]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00065a640 a2=fc6 a3=0 items=0 ppid=4243 pid=5187 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c21,c176 key=(null) Sep 10 00:41:02.319630 kernel: audit: type=1300 audit(1757464862.308:1472): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00065a640 a2=fc6 a3=0 items=0 ppid=4243 pid=5187 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c21,c176 key=(null) Sep 10 00:41:02.308000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 00:41:02.324651 kernel: audit: type=1327 audit(1757464862.308:1472): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 00:41:02.334586 kubelet[1956]: I0910 00:41:02.334514 1956 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-84db459f6d-7clz4" podStartSLOduration=4.342580878 podStartE2EDuration="17.334495066s" podCreationTimestamp="2025-09-10 00:40:45 +0000 UTC" firstStartedPulling="2025-09-10 00:40:46.838048923 +0000 UTC m=+48.691379347" lastFinishedPulling="2025-09-10 00:40:59.829963121 +0000 UTC m=+61.683293535" observedRunningTime="2025-09-10 00:41:00.579245401 +0000 UTC m=+62.432575825" watchObservedRunningTime="2025-09-10 00:41:02.334495066 +0000 UTC m=+64.187825470" Sep 10 00:41:02.351000 audit[5275]: NETFILTER_CFG table=filter:126 family=2 entries=11 op=nft_register_rule pid=5275 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:02.351000 audit[5275]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffcdda87f10 a2=0 a3=7ffcdda87efc items=0 ppid=2118 pid=5275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:02.360698 kernel: audit: type=1325 audit(1757464862.351:1473): table=filter:126 family=2 entries=11 op=nft_register_rule pid=5275 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:02.360805 kernel: audit: type=1300 audit(1757464862.351:1473): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffcdda87f10 a2=0 a3=7ffcdda87efc items=0 ppid=2118 pid=5275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:02.360847 kernel: audit: type=1327 audit(1757464862.351:1473): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:02.351000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:02.368000 audit[5275]: NETFILTER_CFG table=nat:127 family=2 entries=29 op=nft_register_chain pid=5275 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:02.368000 audit[5275]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffcdda87f10 a2=0 a3=7ffcdda87efc items=0 ppid=2118 pid=5275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:02.378292 kernel: audit: type=1325 audit(1757464862.368:1474): table=nat:127 family=2 entries=29 op=nft_register_chain pid=5275 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:02.378374 kernel: audit: type=1300 audit(1757464862.368:1474): arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffcdda87f10 a2=0 a3=7ffcdda87efc items=0 ppid=2118 pid=5275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:02.378433 kernel: audit: type=1327 audit(1757464862.368:1474): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:02.368000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:02.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.37:22-10.0.0.1:50798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:02.611353 systemd[1]: Started sshd@11-10.0.0.37:22-10.0.0.1:50798.service. Sep 10 00:41:02.618058 kernel: audit: type=1130 audit(1757464862.610:1475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.37:22-10.0.0.1:50798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:02.653000 audit[5277]: USER_ACCT pid=5277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:02.654743 sshd[5277]: Accepted publickey for core from 10.0.0.1 port 50798 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:41:02.654000 audit[5277]: CRED_ACQ pid=5277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:02.654000 audit[5277]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd09ad3b0 a2=3 a3=0 items=0 ppid=1 pid=5277 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:02.654000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:02.655836 sshd[5277]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:41:02.660680 systemd-logind[1188]: New session 12 of user core. Sep 10 00:41:02.660778 systemd[1]: Started session-12.scope. Sep 10 00:41:02.673000 audit[5277]: USER_START pid=5277 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:02.674000 audit[5279]: CRED_ACQ pid=5279 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:02.972000 audit[5277]: USER_END pid=5277 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:02.972000 audit[5277]: CRED_DISP pid=5277 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:02.972563 sshd[5277]: pam_unix(sshd:session): session closed for user core Sep 10 00:41:02.975736 systemd[1]: sshd@11-10.0.0.37:22-10.0.0.1:50798.service: Deactivated successfully. Sep 10 00:41:02.975000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.37:22-10.0.0.1:50798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:02.976353 systemd[1]: session-12.scope: Deactivated successfully. Sep 10 00:41:02.977975 systemd-logind[1188]: Session 12 logged out. Waiting for processes to exit. Sep 10 00:41:02.978885 systemd[1]: Started sshd@12-10.0.0.37:22-10.0.0.1:50812.service. Sep 10 00:41:02.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.37:22-10.0.0.1:50812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:02.980212 systemd-logind[1188]: Removed session 12. Sep 10 00:41:03.016000 audit[5292]: USER_ACCT pid=5292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:03.017418 sshd[5292]: Accepted publickey for core from 10.0.0.1 port 50812 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:41:03.017000 audit[5292]: CRED_ACQ pid=5292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:03.017000 audit[5292]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2a22aa00 a2=3 a3=0 items=0 ppid=1 pid=5292 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:03.017000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:03.019521 sshd[5292]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:41:03.025504 systemd-logind[1188]: New session 13 of user core. Sep 10 00:41:03.026290 systemd[1]: Started session-13.scope. Sep 10 00:41:03.030000 audit[5292]: USER_START pid=5292 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:03.031000 audit[5294]: CRED_ACQ pid=5294 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:03.323142 sshd[5292]: pam_unix(sshd:session): session closed for user core Sep 10 00:41:03.327349 systemd[1]: Started sshd@13-10.0.0.37:22-10.0.0.1:50822.service. Sep 10 00:41:03.323000 audit[5292]: USER_END pid=5292 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:03.323000 audit[5292]: CRED_DISP pid=5292 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:03.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.37:22-10.0.0.1:50822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:03.339000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.37:22-10.0.0.1:50812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:03.340375 systemd[1]: sshd@12-10.0.0.37:22-10.0.0.1:50812.service: Deactivated successfully. Sep 10 00:41:03.341542 systemd[1]: session-13.scope: Deactivated successfully. Sep 10 00:41:03.353508 systemd-logind[1188]: Session 13 logged out. Waiting for processes to exit. Sep 10 00:41:03.354761 systemd-logind[1188]: Removed session 13. Sep 10 00:41:03.382000 audit[5302]: USER_ACCT pid=5302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:03.385906 sshd[5302]: Accepted publickey for core from 10.0.0.1 port 50822 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:41:03.385000 audit[5302]: CRED_ACQ pid=5302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:03.385000 audit[5302]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc86340b20 a2=3 a3=0 items=0 ppid=1 pid=5302 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:03.385000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:03.387375 sshd[5302]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:41:03.400292 systemd[1]: Started session-14.scope. Sep 10 00:41:03.402132 systemd-logind[1188]: New session 14 of user core. Sep 10 00:41:03.408000 audit[5302]: USER_START pid=5302 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:03.410000 audit[5305]: CRED_ACQ pid=5305 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:03.701503 sshd[5302]: pam_unix(sshd:session): session closed for user core Sep 10 00:41:03.701000 audit[5302]: USER_END pid=5302 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:03.702000 audit[5302]: CRED_DISP pid=5302 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:03.703000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.37:22-10.0.0.1:50822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:03.704317 systemd[1]: sshd@13-10.0.0.37:22-10.0.0.1:50822.service: Deactivated successfully. Sep 10 00:41:03.705164 systemd[1]: session-14.scope: Deactivated successfully. Sep 10 00:41:03.706241 systemd-logind[1188]: Session 14 logged out. Waiting for processes to exit. Sep 10 00:41:03.707247 systemd-logind[1188]: Removed session 14. Sep 10 00:41:04.006973 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2638677408.mount: Deactivated successfully. Sep 10 00:41:05.298120 env[1200]: time="2025-09-10T00:41:05.298026416Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:41:05.300787 env[1200]: time="2025-09-10T00:41:05.300757908Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a7d029fd8f6be94c26af980675c1650818e1e6e19dbd2f8c13e6e61963f021e8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:41:05.302801 env[1200]: time="2025-09-10T00:41:05.302767159Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:41:05.304602 env[1200]: time="2025-09-10T00:41:05.304528913Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:46297703ab3739331a00a58f0d6a5498c8d3b6523ad947eed68592ee0f3e79f0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:41:05.305222 env[1200]: time="2025-09-10T00:41:05.305174608Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\" returns image reference \"sha256:a7d029fd8f6be94c26af980675c1650818e1e6e19dbd2f8c13e6e61963f021e8\"" Sep 10 00:41:05.306629 env[1200]: time="2025-09-10T00:41:05.306587359Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\"" Sep 10 00:41:05.312959 env[1200]: time="2025-09-10T00:41:05.312876194Z" level=info msg="CreateContainer within sandbox \"47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Sep 10 00:41:05.330176 env[1200]: time="2025-09-10T00:41:05.330089926Z" level=info msg="CreateContainer within sandbox \"47cac2fd39ad6c58dce81850de6192c7e7007aceb45396cfb2f6b38f30ffd9ee\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"fcc27cc27fa7fd17336b37a71f2505e21b9ad1fa63acd1585355f2b241e3159d\"" Sep 10 00:41:05.330951 env[1200]: time="2025-09-10T00:41:05.330885810Z" level=info msg="StartContainer for \"fcc27cc27fa7fd17336b37a71f2505e21b9ad1fa63acd1585355f2b241e3159d\"" Sep 10 00:41:05.357802 systemd[1]: run-containerd-runc-k8s.io-fcc27cc27fa7fd17336b37a71f2505e21b9ad1fa63acd1585355f2b241e3159d-runc.oa5CIU.mount: Deactivated successfully. Sep 10 00:41:05.360493 systemd[1]: Started cri-containerd-fcc27cc27fa7fd17336b37a71f2505e21b9ad1fa63acd1585355f2b241e3159d.scope. Sep 10 00:41:05.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit: BPF prog-id=227 op=LOAD Sep 10 00:41:05.377000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit[5325]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4293 pid=5325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:05.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663633237636332376661376664313733333662333761373166323530 Sep 10 00:41:05.377000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit[5325]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=4293 pid=5325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:05.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663633237636332376661376664313733333662333761373166323530 Sep 10 00:41:05.377000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.377000 audit: BPF prog-id=228 op=LOAD Sep 10 00:41:05.377000 audit[5325]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003052e0 items=0 ppid=4293 pid=5325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:05.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663633237636332376661376664313733333662333761373166323530 Sep 10 00:41:05.378000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.378000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.378000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.378000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.378000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.378000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.378000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.378000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.378000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.378000 audit: BPF prog-id=229 op=LOAD Sep 10 00:41:05.378000 audit[5325]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000305328 items=0 ppid=4293 pid=5325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:05.378000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663633237636332376661376664313733333662333761373166323530 Sep 10 00:41:05.378000 audit: BPF prog-id=229 op=UNLOAD Sep 10 00:41:05.378000 audit: BPF prog-id=228 op=UNLOAD Sep 10 00:41:05.378000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.378000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.378000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.378000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.378000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.378000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.378000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.378000 audit[5325]: AVC avc: denied { perfmon } for pid=5325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.378000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.378000 audit[5325]: AVC avc: denied { bpf } for pid=5325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:05.378000 audit: BPF prog-id=230 op=LOAD Sep 10 00:41:05.378000 audit[5325]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000305738 items=0 ppid=4293 pid=5325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:05.378000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663633237636332376661376664313733333662333761373166323530 Sep 10 00:41:05.408247 env[1200]: time="2025-09-10T00:41:05.408172772Z" level=info msg="StartContainer for \"fcc27cc27fa7fd17336b37a71f2505e21b9ad1fa63acd1585355f2b241e3159d\" returns successfully" Sep 10 00:41:05.591979 kubelet[1956]: I0910 00:41:05.590827 1956 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-54d579b49d-pbxhz" podStartSLOduration=31.502162604 podStartE2EDuration="46.590803477s" podCreationTimestamp="2025-09-10 00:40:19 +0000 UTC" firstStartedPulling="2025-09-10 00:40:50.217759185 +0000 UTC m=+52.071089599" lastFinishedPulling="2025-09-10 00:41:05.306400068 +0000 UTC m=+67.159730472" observedRunningTime="2025-09-10 00:41:05.587164347 +0000 UTC m=+67.440494791" watchObservedRunningTime="2025-09-10 00:41:05.590803477 +0000 UTC m=+67.444133891" Sep 10 00:41:05.606000 audit[5373]: NETFILTER_CFG table=filter:128 family=2 entries=10 op=nft_register_rule pid=5373 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:05.606000 audit[5373]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffe5b5b16f0 a2=0 a3=7ffe5b5b16dc items=0 ppid=2118 pid=5373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:05.606000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:05.612000 audit[5373]: NETFILTER_CFG table=nat:129 family=2 entries=24 op=nft_register_rule pid=5373 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:05.612000 audit[5373]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffe5b5b16f0 a2=0 a3=7ffe5b5b16dc items=0 ppid=2118 pid=5373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:05.612000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:08.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.37:22-10.0.0.1:50826 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:08.708223 systemd[1]: Started sshd@14-10.0.0.37:22-10.0.0.1:50826.service. Sep 10 00:41:08.709829 kernel: kauditd_printk_skb: 95 callbacks suppressed Sep 10 00:41:08.709908 kernel: audit: type=1130 audit(1757464868.707:1522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.37:22-10.0.0.1:50826 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:08.756150 sshd[5410]: Accepted publickey for core from 10.0.0.1 port 50826 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:41:08.755000 audit[5410]: USER_ACCT pid=5410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:08.760000 audit[5410]: CRED_ACQ pid=5410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:08.762503 sshd[5410]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:41:08.766273 kernel: audit: type=1101 audit(1757464868.755:1523): pid=5410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:08.766444 kernel: audit: type=1103 audit(1757464868.760:1524): pid=5410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:08.771702 kernel: audit: type=1006 audit(1757464868.760:1525): pid=5410 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Sep 10 00:41:08.771869 kernel: audit: type=1300 audit(1757464868.760:1525): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffede8fa380 a2=3 a3=0 items=0 ppid=1 pid=5410 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:08.760000 audit[5410]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffede8fa380 a2=3 a3=0 items=0 ppid=1 pid=5410 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:08.773197 systemd[1]: Started session-15.scope. Sep 10 00:41:08.773822 systemd-logind[1188]: New session 15 of user core. Sep 10 00:41:08.760000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:08.782939 kernel: audit: type=1327 audit(1757464868.760:1525): proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:08.778000 audit[5410]: USER_START pid=5410 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:08.791060 kernel: audit: type=1105 audit(1757464868.778:1526): pid=5410 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:08.791287 kernel: audit: type=1103 audit(1757464868.780:1527): pid=5412 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:08.780000 audit[5412]: CRED_ACQ pid=5412 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:09.071000 audit[5422]: NETFILTER_CFG table=filter:130 family=2 entries=10 op=nft_register_rule pid=5422 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:09.080549 kernel: audit: type=1325 audit(1757464869.071:1528): table=filter:130 family=2 entries=10 op=nft_register_rule pid=5422 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:09.080721 kernel: audit: type=1300 audit(1757464869.071:1528): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffe18059cd0 a2=0 a3=7ffe18059cbc items=0 ppid=2118 pid=5422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:09.071000 audit[5422]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffe18059cd0 a2=0 a3=7ffe18059cbc items=0 ppid=2118 pid=5422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:09.071000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:09.091000 audit[5422]: NETFILTER_CFG table=nat:131 family=2 entries=36 op=nft_register_chain pid=5422 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:09.091000 audit[5422]: SYSCALL arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7ffe18059cd0 a2=0 a3=7ffe18059cbc items=0 ppid=2118 pid=5422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:09.091000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:09.153298 sshd[5410]: pam_unix(sshd:session): session closed for user core Sep 10 00:41:09.154000 audit[5410]: USER_END pid=5410 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:09.154000 audit[5410]: CRED_DISP pid=5410 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:09.158893 systemd-logind[1188]: Session 15 logged out. Waiting for processes to exit. Sep 10 00:41:09.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.37:22-10.0.0.1:50826 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:09.161048 systemd[1]: sshd@14-10.0.0.37:22-10.0.0.1:50826.service: Deactivated successfully. Sep 10 00:41:09.162016 systemd[1]: session-15.scope: Deactivated successfully. Sep 10 00:41:09.164057 systemd-logind[1188]: Removed session 15. Sep 10 00:41:10.573196 env[1200]: time="2025-09-10T00:41:10.573094716Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:41:10.580658 env[1200]: time="2025-09-10T00:41:10.580515545Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:df191a54fb79de3c693f8b1b864a1bd3bd14f63b3fff9d5fa4869c471ce3cd37,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:41:10.583233 env[1200]: time="2025-09-10T00:41:10.583186313Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:41:10.585491 env[1200]: time="2025-09-10T00:41:10.585429350Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:27c4187717f08f0a5727019d8beb7597665eb47e69eaa1d7d091a7e28913e577,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:41:10.586069 env[1200]: time="2025-09-10T00:41:10.586022569Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\" returns image reference \"sha256:df191a54fb79de3c693f8b1b864a1bd3bd14f63b3fff9d5fa4869c471ce3cd37\"" Sep 10 00:41:10.587415 env[1200]: time="2025-09-10T00:41:10.587384143Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 10 00:41:10.617206 env[1200]: time="2025-09-10T00:41:10.617138294Z" level=info msg="CreateContainer within sandbox \"ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Sep 10 00:41:10.640687 env[1200]: time="2025-09-10T00:41:10.640615402Z" level=info msg="CreateContainer within sandbox \"ecbebfd6a1250a769e3cd0448dbbb8f6275fe28c757ffa06c0a574674107ce48\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"8673d45abb68389609b9f1a665b4bb7263e2b0dc27566a5e41c8aafd331e46e8\"" Sep 10 00:41:10.641708 env[1200]: time="2025-09-10T00:41:10.641323071Z" level=info msg="StartContainer for \"8673d45abb68389609b9f1a665b4bb7263e2b0dc27566a5e41c8aafd331e46e8\"" Sep 10 00:41:10.669730 systemd[1]: Started cri-containerd-8673d45abb68389609b9f1a665b4bb7263e2b0dc27566a5e41c8aafd331e46e8.scope. Sep 10 00:41:10.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit: BPF prog-id=231 op=LOAD Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { bpf } for pid=5434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4345 pid=5434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:10.683000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836373364343561626236383338393630396239663161363635623462 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { perfmon } for pid=5434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4345 pid=5434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:10.683000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836373364343561626236383338393630396239663161363635623462 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { bpf } for pid=5434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { bpf } for pid=5434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { bpf } for pid=5434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { perfmon } for pid=5434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { perfmon } for pid=5434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { perfmon } for pid=5434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { perfmon } for pid=5434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { perfmon } for pid=5434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { bpf } for pid=5434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { bpf } for pid=5434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit: BPF prog-id=232 op=LOAD Sep 10 00:41:10.683000 audit[5434]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00030d980 items=0 ppid=4345 pid=5434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:10.683000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836373364343561626236383338393630396239663161363635623462 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { bpf } for pid=5434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { bpf } for pid=5434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { perfmon } for pid=5434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { perfmon } for pid=5434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { perfmon } for pid=5434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { perfmon } for pid=5434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { perfmon } for pid=5434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { bpf } for pid=5434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { bpf } for pid=5434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit: BPF prog-id=233 op=LOAD Sep 10 00:41:10.683000 audit[5434]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00030d9c8 items=0 ppid=4345 pid=5434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:10.683000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836373364343561626236383338393630396239663161363635623462 Sep 10 00:41:10.683000 audit: BPF prog-id=233 op=UNLOAD Sep 10 00:41:10.683000 audit: BPF prog-id=232 op=UNLOAD Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { bpf } for pid=5434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { bpf } for pid=5434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { bpf } for pid=5434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { perfmon } for pid=5434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { perfmon } for pid=5434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { perfmon } for pid=5434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { perfmon } for pid=5434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { perfmon } for pid=5434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { bpf } for pid=5434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit[5434]: AVC avc: denied { bpf } for pid=5434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:10.683000 audit: BPF prog-id=234 op=LOAD Sep 10 00:41:10.683000 audit[5434]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00030ddd8 items=0 ppid=4345 pid=5434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:10.683000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836373364343561626236383338393630396239663161363635623462 Sep 10 00:41:10.768513 env[1200]: time="2025-09-10T00:41:10.768427060Z" level=info msg="StartContainer for \"8673d45abb68389609b9f1a665b4bb7263e2b0dc27566a5e41c8aafd331e46e8\" returns successfully" Sep 10 00:41:11.162893 env[1200]: time="2025-09-10T00:41:11.162799930Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:41:11.165316 env[1200]: time="2025-09-10T00:41:11.165257857Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:41:11.167443 env[1200]: time="2025-09-10T00:41:11.167367264Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:41:11.169192 env[1200]: time="2025-09-10T00:41:11.169139867Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:41:11.169684 env[1200]: time="2025-09-10T00:41:11.169640015Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a\"" Sep 10 00:41:11.171245 env[1200]: time="2025-09-10T00:41:11.171202595Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\"" Sep 10 00:41:11.177058 env[1200]: time="2025-09-10T00:41:11.177015318Z" level=info msg="CreateContainer within sandbox \"ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 10 00:41:11.194777 env[1200]: time="2025-09-10T00:41:11.194689424Z" level=info msg="CreateContainer within sandbox \"ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"72fbaee3ec9107128bfe3201a0074bc542bab6955c5ade1f41c328755505fb2d\"" Sep 10 00:41:11.195390 env[1200]: time="2025-09-10T00:41:11.195355322Z" level=info msg="StartContainer for \"72fbaee3ec9107128bfe3201a0074bc542bab6955c5ade1f41c328755505fb2d\"" Sep 10 00:41:11.213527 systemd[1]: Started cri-containerd-72fbaee3ec9107128bfe3201a0074bc542bab6955c5ade1f41c328755505fb2d.scope. Sep 10 00:41:11.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.228000 audit: BPF prog-id=235 op=LOAD Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { bpf } for pid=5482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4542 pid=5482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:11.229000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732666261656533656339313037313238626665333230316130303734 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { perfmon } for pid=5482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4542 pid=5482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:11.229000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732666261656533656339313037313238626665333230316130303734 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { bpf } for pid=5482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { bpf } for pid=5482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { bpf } for pid=5482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { perfmon } for pid=5482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { perfmon } for pid=5482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { perfmon } for pid=5482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { perfmon } for pid=5482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { perfmon } for pid=5482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { bpf } for pid=5482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { bpf } for pid=5482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit: BPF prog-id=236 op=LOAD Sep 10 00:41:11.229000 audit[5482]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00028d2d0 items=0 ppid=4542 pid=5482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:11.229000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732666261656533656339313037313238626665333230316130303734 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { bpf } for pid=5482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { bpf } for pid=5482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { perfmon } for pid=5482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { perfmon } for pid=5482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { perfmon } for pid=5482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { perfmon } for pid=5482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { perfmon } for pid=5482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { bpf } for pid=5482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { bpf } for pid=5482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit: BPF prog-id=237 op=LOAD Sep 10 00:41:11.229000 audit[5482]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00028d318 items=0 ppid=4542 pid=5482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:11.229000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732666261656533656339313037313238626665333230316130303734 Sep 10 00:41:11.229000 audit: BPF prog-id=237 op=UNLOAD Sep 10 00:41:11.229000 audit: BPF prog-id=236 op=UNLOAD Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { bpf } for pid=5482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { bpf } for pid=5482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { bpf } for pid=5482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { perfmon } for pid=5482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { perfmon } for pid=5482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { perfmon } for pid=5482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { perfmon } for pid=5482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { perfmon } for pid=5482 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { bpf } for pid=5482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit[5482]: AVC avc: denied { bpf } for pid=5482 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:11.229000 audit: BPF prog-id=238 op=LOAD Sep 10 00:41:11.229000 audit[5482]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00028d728 items=0 ppid=4542 pid=5482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:11.229000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732666261656533656339313037313238626665333230316130303734 Sep 10 00:41:11.266521 env[1200]: time="2025-09-10T00:41:11.266429437Z" level=info msg="StartContainer for \"72fbaee3ec9107128bfe3201a0074bc542bab6955c5ade1f41c328755505fb2d\" returns successfully" Sep 10 00:41:11.607958 env[1200]: time="2025-09-10T00:41:11.607028138Z" level=info msg="StopContainer for \"72fbaee3ec9107128bfe3201a0074bc542bab6955c5ade1f41c328755505fb2d\" with timeout 30 (s)" Sep 10 00:41:11.607958 env[1200]: time="2025-09-10T00:41:11.607548386Z" level=info msg="Stop container \"72fbaee3ec9107128bfe3201a0074bc542bab6955c5ade1f41c328755505fb2d\" with signal terminated" Sep 10 00:41:11.625627 systemd[1]: run-containerd-runc-k8s.io-8673d45abb68389609b9f1a665b4bb7263e2b0dc27566a5e41c8aafd331e46e8-runc.6HQz1Y.mount: Deactivated successfully. Sep 10 00:41:11.644000 audit: BPF prog-id=235 op=UNLOAD Sep 10 00:41:11.644669 systemd[1]: cri-containerd-72fbaee3ec9107128bfe3201a0074bc542bab6955c5ade1f41c328755505fb2d.scope: Deactivated successfully. Sep 10 00:41:11.648000 audit: BPF prog-id=238 op=UNLOAD Sep 10 00:41:11.655503 kubelet[1956]: I0910 00:41:11.655400 1956 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-694cb88886-nchgf" podStartSLOduration=36.182244917 podStartE2EDuration="56.655366084s" podCreationTimestamp="2025-09-10 00:40:15 +0000 UTC" firstStartedPulling="2025-09-10 00:40:50.697719122 +0000 UTC m=+52.551049536" lastFinishedPulling="2025-09-10 00:41:11.170840259 +0000 UTC m=+73.024170703" observedRunningTime="2025-09-10 00:41:11.655068263 +0000 UTC m=+73.508398687" watchObservedRunningTime="2025-09-10 00:41:11.655366084 +0000 UTC m=+73.508696509" Sep 10 00:41:11.656305 kubelet[1956]: I0910 00:41:11.655581 1956 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-6dbd5f8568-lbcfq" podStartSLOduration=32.381391074 podStartE2EDuration="52.655575376s" podCreationTimestamp="2025-09-10 00:40:19 +0000 UTC" firstStartedPulling="2025-09-10 00:40:50.313028192 +0000 UTC m=+52.166358606" lastFinishedPulling="2025-09-10 00:41:10.587212494 +0000 UTC m=+72.440542908" observedRunningTime="2025-09-10 00:41:11.630709771 +0000 UTC m=+73.484040215" watchObservedRunningTime="2025-09-10 00:41:11.655575376 +0000 UTC m=+73.508905790" Sep 10 00:41:11.674901 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-72fbaee3ec9107128bfe3201a0074bc542bab6955c5ade1f41c328755505fb2d-rootfs.mount: Deactivated successfully. Sep 10 00:41:11.678000 audit[5554]: NETFILTER_CFG table=filter:132 family=2 entries=10 op=nft_register_rule pid=5554 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:11.678000 audit[5554]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd4813b370 a2=0 a3=7ffd4813b35c items=0 ppid=2118 pid=5554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:11.678000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:11.685000 audit[5554]: NETFILTER_CFG table=nat:133 family=2 entries=38 op=nft_register_rule pid=5554 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:11.685000 audit[5554]: SYSCALL arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7ffd4813b370 a2=0 a3=7ffd4813b35c items=0 ppid=2118 pid=5554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:11.685000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:11.797786 env[1200]: time="2025-09-10T00:41:11.797710773Z" level=info msg="shim disconnected" id=72fbaee3ec9107128bfe3201a0074bc542bab6955c5ade1f41c328755505fb2d Sep 10 00:41:11.797786 env[1200]: time="2025-09-10T00:41:11.797774115Z" level=warning msg="cleaning up after shim disconnected" id=72fbaee3ec9107128bfe3201a0074bc542bab6955c5ade1f41c328755505fb2d namespace=k8s.io Sep 10 00:41:11.797786 env[1200]: time="2025-09-10T00:41:11.797785226Z" level=info msg="cleaning up dead shim" Sep 10 00:41:11.805710 env[1200]: time="2025-09-10T00:41:11.805643615Z" level=warning msg="cleanup warnings time=\"2025-09-10T00:41:11Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5557 runtime=io.containerd.runc.v2\n" Sep 10 00:41:11.970771 env[1200]: time="2025-09-10T00:41:11.970622977Z" level=info msg="StopContainer for \"72fbaee3ec9107128bfe3201a0074bc542bab6955c5ade1f41c328755505fb2d\" returns successfully" Sep 10 00:41:11.972619 env[1200]: time="2025-09-10T00:41:11.972580263Z" level=info msg="StopPodSandbox for \"ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd\"" Sep 10 00:41:11.972686 env[1200]: time="2025-09-10T00:41:11.972670967Z" level=info msg="Container to stop \"72fbaee3ec9107128bfe3201a0074bc542bab6955c5ade1f41c328755505fb2d\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Sep 10 00:41:11.980835 systemd[1]: cri-containerd-ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd.scope: Deactivated successfully. Sep 10 00:41:11.980000 audit: BPF prog-id=208 op=UNLOAD Sep 10 00:41:11.985000 audit: BPF prog-id=211 op=UNLOAD Sep 10 00:41:12.000153 env[1200]: time="2025-09-10T00:41:12.000077518Z" level=info msg="shim disconnected" id=ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd Sep 10 00:41:12.000153 env[1200]: time="2025-09-10T00:41:12.000157862Z" level=warning msg="cleaning up after shim disconnected" id=ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd namespace=k8s.io Sep 10 00:41:12.000421 env[1200]: time="2025-09-10T00:41:12.000183793Z" level=info msg="cleaning up dead shim" Sep 10 00:41:12.008246 env[1200]: time="2025-09-10T00:41:12.008188725Z" level=warning msg="cleanup warnings time=\"2025-09-10T00:41:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5588 runtime=io.containerd.runc.v2\n" Sep 10 00:41:12.592438 kubelet[1956]: I0910 00:41:12.592366 1956 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" Sep 10 00:41:12.604119 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd-rootfs.mount: Deactivated successfully. Sep 10 00:41:12.604267 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd-shm.mount: Deactivated successfully. Sep 10 00:41:12.657280 systemd-networkd[1026]: cali9de38857c6a: Link DOWN Sep 10 00:41:12.657292 systemd-networkd[1026]: cali9de38857c6a: Lost carrier Sep 10 00:41:12.665000 audit[5624]: NETFILTER_CFG table=filter:134 family=2 entries=63 op=nft_register_rule pid=5624 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:41:12.665000 audit[5624]: SYSCALL arch=c000003e syscall=46 success=yes exit=10252 a0=3 a1=7fff1ab52be0 a2=0 a3=7fff1ab52bcc items=0 ppid=3525 pid=5624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:12.665000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:41:12.665000 audit[5624]: NETFILTER_CFG table=filter:135 family=2 entries=4 op=nft_unregister_chain pid=5624 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:41:12.665000 audit[5624]: SYSCALL arch=c000003e syscall=46 success=yes exit=560 a0=3 a1=7fff1ab52be0 a2=0 a3=55ab19289000 items=0 ppid=3525 pid=5624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:12.665000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:41:13.846528 env[1200]: 2025-09-10 00:41:12.641 [INFO][5611] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" Sep 10 00:41:13.846528 env[1200]: 2025-09-10 00:41:12.656 [INFO][5611] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" iface="eth0" netns="/var/run/netns/cni-cd6de520-fb19-9d14-9573-baae30b5f358" Sep 10 00:41:13.846528 env[1200]: 2025-09-10 00:41:12.656 [INFO][5611] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" iface="eth0" netns="/var/run/netns/cni-cd6de520-fb19-9d14-9573-baae30b5f358" Sep 10 00:41:13.846528 env[1200]: 2025-09-10 00:41:12.667 [INFO][5611] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" after=10.945251ms iface="eth0" netns="/var/run/netns/cni-cd6de520-fb19-9d14-9573-baae30b5f358" Sep 10 00:41:13.846528 env[1200]: 2025-09-10 00:41:12.667 [INFO][5611] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" Sep 10 00:41:13.846528 env[1200]: 2025-09-10 00:41:12.667 [INFO][5611] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" Sep 10 00:41:13.846528 env[1200]: 2025-09-10 00:41:13.409 [INFO][5626] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" HandleID="k8s-pod-network.ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" Workload="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" Sep 10 00:41:13.846528 env[1200]: 2025-09-10 00:41:13.410 [INFO][5626] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:41:13.846528 env[1200]: 2025-09-10 00:41:13.410 [INFO][5626] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:41:13.846528 env[1200]: 2025-09-10 00:41:13.819 [INFO][5626] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" HandleID="k8s-pod-network.ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" Workload="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" Sep 10 00:41:13.846528 env[1200]: 2025-09-10 00:41:13.819 [INFO][5626] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" HandleID="k8s-pod-network.ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" Workload="localhost-k8s-calico--apiserver--694cb88886--nchgf-eth0" Sep 10 00:41:13.846528 env[1200]: 2025-09-10 00:41:13.821 [INFO][5626] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:41:13.846528 env[1200]: 2025-09-10 00:41:13.823 [INFO][5611] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd" Sep 10 00:41:13.847630 env[1200]: time="2025-09-10T00:41:13.847583154Z" level=info msg="TearDown network for sandbox \"ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd\" successfully" Sep 10 00:41:13.847630 env[1200]: time="2025-09-10T00:41:13.847621749Z" level=info msg="StopPodSandbox for \"ea9961d89215618820dabde9e276b25e964a2172492213e0c33ddb29c4b085bd\" returns successfully" Sep 10 00:41:13.850310 systemd[1]: run-netns-cni\x2dcd6de520\x2dfb19\x2d9d14\x2d9573\x2dbaae30b5f358.mount: Deactivated successfully. Sep 10 00:41:13.891098 kubelet[1956]: I0910 00:41:13.891038 1956 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/15af17cb-bf28-4fae-bb29-ea2d7f332ad6-calico-apiserver-certs\") pod \"15af17cb-bf28-4fae-bb29-ea2d7f332ad6\" (UID: \"15af17cb-bf28-4fae-bb29-ea2d7f332ad6\") " Sep 10 00:41:13.891098 kubelet[1956]: I0910 00:41:13.891101 1956 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-6fsgw\" (UniqueName: \"kubernetes.io/projected/15af17cb-bf28-4fae-bb29-ea2d7f332ad6-kube-api-access-6fsgw\") pod \"15af17cb-bf28-4fae-bb29-ea2d7f332ad6\" (UID: \"15af17cb-bf28-4fae-bb29-ea2d7f332ad6\") " Sep 10 00:41:13.896655 systemd[1]: var-lib-kubelet-pods-15af17cb\x2dbf28\x2d4fae\x2dbb29\x2dea2d7f332ad6-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d6fsgw.mount: Deactivated successfully. Sep 10 00:41:13.896759 systemd[1]: var-lib-kubelet-pods-15af17cb\x2dbf28\x2d4fae\x2dbb29\x2dea2d7f332ad6-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Sep 10 00:41:13.900114 kubelet[1956]: I0910 00:41:13.899286 1956 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/15af17cb-bf28-4fae-bb29-ea2d7f332ad6-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "15af17cb-bf28-4fae-bb29-ea2d7f332ad6" (UID: "15af17cb-bf28-4fae-bb29-ea2d7f332ad6"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGIDValue "" Sep 10 00:41:13.900188 kubelet[1956]: I0910 00:41:13.899285 1956 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/15af17cb-bf28-4fae-bb29-ea2d7f332ad6-kube-api-access-6fsgw" (OuterVolumeSpecName: "kube-api-access-6fsgw") pod "15af17cb-bf28-4fae-bb29-ea2d7f332ad6" (UID: "15af17cb-bf28-4fae-bb29-ea2d7f332ad6"). InnerVolumeSpecName "kube-api-access-6fsgw". PluginName "kubernetes.io/projected", VolumeGIDValue "" Sep 10 00:41:13.991610 kubelet[1956]: I0910 00:41:13.991550 1956 reconciler_common.go:299] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/15af17cb-bf28-4fae-bb29-ea2d7f332ad6-calico-apiserver-certs\") on node \"localhost\" DevicePath \"\"" Sep 10 00:41:13.991610 kubelet[1956]: I0910 00:41:13.991587 1956 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-6fsgw\" (UniqueName: \"kubernetes.io/projected/15af17cb-bf28-4fae-bb29-ea2d7f332ad6-kube-api-access-6fsgw\") on node \"localhost\" DevicePath \"\"" Sep 10 00:41:14.157731 systemd[1]: Started sshd@15-10.0.0.37:22-10.0.0.1:36618.service. Sep 10 00:41:14.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.37:22-10.0.0.1:36618 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:14.173637 kernel: kauditd_printk_skb: 137 callbacks suppressed Sep 10 00:41:14.173723 kernel: audit: type=1130 audit(1757464874.156:1577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.37:22-10.0.0.1:36618 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:14.200000 audit[5637]: NETFILTER_CFG table=filter:136 family=2 entries=10 op=nft_register_rule pid=5637 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:14.200000 audit[5637]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fffae7968d0 a2=0 a3=7fffae7968bc items=0 ppid=2118 pid=5637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:14.212636 kernel: audit: type=1325 audit(1757464874.200:1578): table=filter:136 family=2 entries=10 op=nft_register_rule pid=5637 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:14.215094 kernel: audit: type=1300 audit(1757464874.200:1578): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fffae7968d0 a2=0 a3=7fffae7968bc items=0 ppid=2118 pid=5637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:14.215171 kernel: audit: type=1327 audit(1757464874.200:1578): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:14.200000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:14.220000 audit[5637]: NETFILTER_CFG table=nat:137 family=2 entries=38 op=nft_register_rule pid=5637 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:14.220000 audit[5637]: SYSCALL arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7fffae7968d0 a2=0 a3=7fffae7968bc items=0 ppid=2118 pid=5637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:14.232967 kernel: audit: type=1325 audit(1757464874.220:1579): table=nat:137 family=2 entries=38 op=nft_register_rule pid=5637 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:14.233108 kernel: audit: type=1300 audit(1757464874.220:1579): arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7fffae7968d0 a2=0 a3=7fffae7968bc items=0 ppid=2118 pid=5637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:14.233130 kernel: audit: type=1327 audit(1757464874.220:1579): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:14.220000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:14.245000 audit[5639]: USER_ACCT pid=5639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:14.247071 sshd[5639]: Accepted publickey for core from 10.0.0.1 port 36618 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:41:14.249660 sshd[5639]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:41:14.248000 audit[5639]: CRED_ACQ pid=5639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:14.256263 systemd-logind[1188]: New session 16 of user core. Sep 10 00:41:14.257383 systemd[1]: Started session-16.scope. Sep 10 00:41:14.257594 kernel: audit: type=1101 audit(1757464874.245:1580): pid=5639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:14.257648 kernel: audit: type=1103 audit(1757464874.248:1581): pid=5639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:14.257680 kernel: audit: type=1006 audit(1757464874.248:1582): pid=5639 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Sep 10 00:41:14.248000 audit[5639]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd95f51400 a2=3 a3=0 items=0 ppid=1 pid=5639 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:14.248000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:14.262000 audit[5639]: USER_START pid=5639 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:14.264000 audit[5641]: CRED_ACQ pid=5641 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:14.271660 kubelet[1956]: E0910 00:41:14.271601 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:41:14.276705 systemd[1]: Removed slice kubepods-besteffort-pod15af17cb_bf28_4fae_bb29_ea2d7f332ad6.slice. Sep 10 00:41:14.862107 sshd[5639]: pam_unix(sshd:session): session closed for user core Sep 10 00:41:14.862000 audit[5639]: USER_END pid=5639 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:14.862000 audit[5639]: CRED_DISP pid=5639 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:14.865635 systemd[1]: sshd@15-10.0.0.37:22-10.0.0.1:36618.service: Deactivated successfully. Sep 10 00:41:14.866439 systemd[1]: session-16.scope: Deactivated successfully. Sep 10 00:41:14.864000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.37:22-10.0.0.1:36618 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:14.867168 systemd-logind[1188]: Session 16 logged out. Waiting for processes to exit. Sep 10 00:41:14.868240 systemd-logind[1188]: Removed session 16. Sep 10 00:41:15.163102 env[1200]: time="2025-09-10T00:41:15.162915957Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:41:15.167223 env[1200]: time="2025-09-10T00:41:15.167148220Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b8f31c4fdaed3fa08af64de3d37d65a4c2ea0d9f6f522cb60d2e0cb424f8dd8a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:41:15.171313 env[1200]: time="2025-09-10T00:41:15.171225947Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:41:15.174626 env[1200]: time="2025-09-10T00:41:15.174577394Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:731ab232ca708102ab332340b1274d5cd656aa896ecc5368ee95850b811df86f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 00:41:15.175154 env[1200]: time="2025-09-10T00:41:15.175113330Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\" returns image reference \"sha256:b8f31c4fdaed3fa08af64de3d37d65a4c2ea0d9f6f522cb60d2e0cb424f8dd8a\"" Sep 10 00:41:15.184610 env[1200]: time="2025-09-10T00:41:15.184536862Z" level=info msg="CreateContainer within sandbox \"89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Sep 10 00:41:15.205110 env[1200]: time="2025-09-10T00:41:15.205031832Z" level=info msg="CreateContainer within sandbox \"89080ab6bc82cdc4d55c7c51b9722133ff43d447e1d2ae139e4f887cc2d717c7\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"1bfe284cef4bfde1eabb41497aac8e6f9b3b7e8b092e93c34f2774c8ee8c9804\"" Sep 10 00:41:15.205718 env[1200]: time="2025-09-10T00:41:15.205686917Z" level=info msg="StartContainer for \"1bfe284cef4bfde1eabb41497aac8e6f9b3b7e8b092e93c34f2774c8ee8c9804\"" Sep 10 00:41:15.234497 systemd[1]: Started cri-containerd-1bfe284cef4bfde1eabb41497aac8e6f9b3b7e8b092e93c34f2774c8ee8c9804.scope. Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7fdb07e10088 items=0 ppid=3840 pid=5662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:15.257000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162666532383463656634626664653165616262343134393761616338 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit: BPF prog-id=239 op=LOAD Sep 10 00:41:15.257000 audit[5662]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0001b7f98 items=0 ppid=3840 pid=5662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:15.257000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162666532383463656634626664653165616262343134393761616338 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit: BPF prog-id=240 op=LOAD Sep 10 00:41:15.257000 audit[5662]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0001b7fe8 items=0 ppid=3840 pid=5662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:15.257000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162666532383463656634626664653165616262343134393761616338 Sep 10 00:41:15.257000 audit: BPF prog-id=240 op=UNLOAD Sep 10 00:41:15.257000 audit: BPF prog-id=239 op=UNLOAD Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { perfmon } for pid=5662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit[5662]: AVC avc: denied { bpf } for pid=5662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 00:41:15.257000 audit: BPF prog-id=241 op=LOAD Sep 10 00:41:15.257000 audit[5662]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0003a4078 items=0 ppid=3840 pid=5662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:15.257000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162666532383463656634626664653165616262343134393761616338 Sep 10 00:41:15.275350 env[1200]: time="2025-09-10T00:41:15.275287466Z" level=info msg="StartContainer for \"1bfe284cef4bfde1eabb41497aac8e6f9b3b7e8b092e93c34f2774c8ee8c9804\" returns successfully" Sep 10 00:41:15.456720 kubelet[1956]: I0910 00:41:15.456580 1956 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Sep 10 00:41:15.457684 kubelet[1956]: I0910 00:41:15.457653 1956 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Sep 10 00:41:15.623548 kubelet[1956]: I0910 00:41:15.623477 1956 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-tn66z" podStartSLOduration=29.610680284 podStartE2EDuration="56.62345865s" podCreationTimestamp="2025-09-10 00:40:19 +0000 UTC" firstStartedPulling="2025-09-10 00:40:48.164682569 +0000 UTC m=+50.018012983" lastFinishedPulling="2025-09-10 00:41:15.177460935 +0000 UTC m=+77.030791349" observedRunningTime="2025-09-10 00:41:15.622511897 +0000 UTC m=+77.475842311" watchObservedRunningTime="2025-09-10 00:41:15.62345865 +0000 UTC m=+77.476789064" Sep 10 00:41:16.271758 kubelet[1956]: I0910 00:41:16.271706 1956 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="15af17cb-bf28-4fae-bb29-ea2d7f332ad6" path="/var/lib/kubelet/pods/15af17cb-bf28-4fae-bb29-ea2d7f332ad6/volumes" Sep 10 00:41:16.433728 systemd[1]: run-containerd-runc-k8s.io-69b43fd0892331cd1f75a59fbd69dc46dd1843983ad09170e41ebbb96fbc13fa-runc.MsDqii.mount: Deactivated successfully. Sep 10 00:41:18.268209 kubelet[1956]: E0910 00:41:18.268111 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:41:19.869471 systemd[1]: Started sshd@16-10.0.0.37:22-10.0.0.1:36634.service. Sep 10 00:41:19.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.37:22-10.0.0.1:36634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:19.870881 kernel: kauditd_printk_skb: 50 callbacks suppressed Sep 10 00:41:19.870966 kernel: audit: type=1130 audit(1757464879.868:1594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.37:22-10.0.0.1:36634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:19.913000 audit[5719]: USER_ACCT pid=5719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:19.915024 sshd[5719]: Accepted publickey for core from 10.0.0.1 port 36634 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:41:19.917600 sshd[5719]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:41:19.915000 audit[5719]: CRED_ACQ pid=5719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:19.922178 systemd-logind[1188]: New session 17 of user core. Sep 10 00:41:19.923118 systemd[1]: Started session-17.scope. Sep 10 00:41:19.923871 kernel: audit: type=1101 audit(1757464879.913:1595): pid=5719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:19.923945 kernel: audit: type=1103 audit(1757464879.915:1596): pid=5719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:19.923970 kernel: audit: type=1006 audit(1757464879.915:1597): pid=5719 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Sep 10 00:41:19.915000 audit[5719]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2c9a5c50 a2=3 a3=0 items=0 ppid=1 pid=5719 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:19.931434 kernel: audit: type=1300 audit(1757464879.915:1597): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2c9a5c50 a2=3 a3=0 items=0 ppid=1 pid=5719 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:19.931532 kernel: audit: type=1327 audit(1757464879.915:1597): proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:19.915000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:19.927000 audit[5719]: USER_START pid=5719 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:19.938232 kernel: audit: type=1105 audit(1757464879.927:1598): pid=5719 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:19.938380 kernel: audit: type=1103 audit(1757464879.929:1599): pid=5721 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:19.929000 audit[5721]: CRED_ACQ pid=5721 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:20.122264 sshd[5719]: pam_unix(sshd:session): session closed for user core Sep 10 00:41:20.132769 kernel: audit: type=1106 audit(1757464880.122:1600): pid=5719 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:20.132929 kernel: audit: type=1104 audit(1757464880.123:1601): pid=5719 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:20.122000 audit[5719]: USER_END pid=5719 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:20.123000 audit[5719]: CRED_DISP pid=5719 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:20.125000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.37:22-10.0.0.1:36634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:20.125928 systemd[1]: sshd@16-10.0.0.37:22-10.0.0.1:36634.service: Deactivated successfully. Sep 10 00:41:20.127550 systemd[1]: session-17.scope: Deactivated successfully. Sep 10 00:41:20.128298 systemd-logind[1188]: Session 17 logged out. Waiting for processes to exit. Sep 10 00:41:20.129382 systemd-logind[1188]: Removed session 17. Sep 10 00:41:21.267275 kubelet[1956]: E0910 00:41:21.267200 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:41:23.267604 kubelet[1956]: E0910 00:41:23.267529 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:41:25.128024 systemd[1]: Started sshd@17-10.0.0.37:22-10.0.0.1:57190.service. Sep 10 00:41:25.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.37:22-10.0.0.1:57190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:25.130020 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 10 00:41:25.130103 kernel: audit: type=1130 audit(1757464885.127:1603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.37:22-10.0.0.1:57190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:25.173000 audit[5734]: USER_ACCT pid=5734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:25.174515 sshd[5734]: Accepted publickey for core from 10.0.0.1 port 57190 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:41:25.176720 sshd[5734]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:41:25.175000 audit[5734]: CRED_ACQ pid=5734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:25.181733 systemd-logind[1188]: New session 18 of user core. Sep 10 00:41:25.182648 systemd[1]: Started session-18.scope. Sep 10 00:41:25.184177 kernel: audit: type=1101 audit(1757464885.173:1604): pid=5734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:25.184231 kernel: audit: type=1103 audit(1757464885.175:1605): pid=5734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:25.193534 kernel: audit: type=1006 audit(1757464885.175:1606): pid=5734 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Sep 10 00:41:25.193611 kernel: audit: type=1300 audit(1757464885.175:1606): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc0d12f570 a2=3 a3=0 items=0 ppid=1 pid=5734 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:25.193637 kernel: audit: type=1327 audit(1757464885.175:1606): proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:25.193661 kernel: audit: type=1105 audit(1757464885.187:1607): pid=5734 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:25.175000 audit[5734]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc0d12f570 a2=3 a3=0 items=0 ppid=1 pid=5734 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:25.175000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:25.187000 audit[5734]: USER_START pid=5734 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:25.196803 kernel: audit: type=1103 audit(1757464885.189:1608): pid=5736 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:25.189000 audit[5736]: CRED_ACQ pid=5736 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:25.378089 sshd[5734]: pam_unix(sshd:session): session closed for user core Sep 10 00:41:25.378000 audit[5734]: USER_END pid=5734 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:25.380726 systemd[1]: sshd@17-10.0.0.37:22-10.0.0.1:57190.service: Deactivated successfully. Sep 10 00:41:25.381506 systemd[1]: session-18.scope: Deactivated successfully. Sep 10 00:41:25.382155 systemd-logind[1188]: Session 18 logged out. Waiting for processes to exit. Sep 10 00:41:25.382911 systemd-logind[1188]: Removed session 18. Sep 10 00:41:25.378000 audit[5734]: CRED_DISP pid=5734 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:25.430599 kernel: audit: type=1106 audit(1757464885.378:1609): pid=5734 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:25.430670 kernel: audit: type=1104 audit(1757464885.378:1610): pid=5734 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:25.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.37:22-10.0.0.1:57190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:28.269004 kubelet[1956]: E0910 00:41:28.268961 1956 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Sep 10 00:41:30.383806 systemd[1]: Started sshd@18-10.0.0.37:22-10.0.0.1:60598.service. Sep 10 00:41:30.383000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.37:22-10.0.0.1:60598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:30.385090 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 10 00:41:30.385230 kernel: audit: type=1130 audit(1757464890.383:1612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.37:22-10.0.0.1:60598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:30.426000 audit[5753]: USER_ACCT pid=5753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:30.427772 sshd[5753]: Accepted publickey for core from 10.0.0.1 port 60598 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:41:30.431039 sshd[5753]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:41:30.429000 audit[5753]: CRED_ACQ pid=5753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:30.436112 kernel: audit: type=1101 audit(1757464890.426:1613): pid=5753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:30.436178 kernel: audit: type=1103 audit(1757464890.429:1614): pid=5753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:30.436207 kernel: audit: type=1006 audit(1757464890.429:1615): pid=5753 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Sep 10 00:41:30.435644 systemd-logind[1188]: New session 19 of user core. Sep 10 00:41:30.436469 systemd[1]: Started session-19.scope. Sep 10 00:41:30.429000 audit[5753]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5c0b2540 a2=3 a3=0 items=0 ppid=1 pid=5753 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:30.442902 kernel: audit: type=1300 audit(1757464890.429:1615): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5c0b2540 a2=3 a3=0 items=0 ppid=1 pid=5753 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:30.443072 kernel: audit: type=1327 audit(1757464890.429:1615): proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:30.429000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:30.441000 audit[5753]: USER_START pid=5753 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:30.449366 kernel: audit: type=1105 audit(1757464890.441:1616): pid=5753 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:30.449449 kernel: audit: type=1103 audit(1757464890.443:1617): pid=5755 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:30.443000 audit[5755]: CRED_ACQ pid=5755 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:30.580476 sshd[5753]: pam_unix(sshd:session): session closed for user core Sep 10 00:41:30.580000 audit[5753]: USER_END pid=5753 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:30.584292 systemd[1]: sshd@18-10.0.0.37:22-10.0.0.1:60598.service: Deactivated successfully. Sep 10 00:41:30.585139 systemd[1]: session-19.scope: Deactivated successfully. Sep 10 00:41:30.580000 audit[5753]: CRED_DISP pid=5753 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:30.586368 systemd-logind[1188]: Session 19 logged out. Waiting for processes to exit. Sep 10 00:41:30.587944 systemd[1]: Started sshd@19-10.0.0.37:22-10.0.0.1:60600.service. Sep 10 00:41:30.589716 kernel: audit: type=1106 audit(1757464890.580:1618): pid=5753 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:30.589784 kernel: audit: type=1104 audit(1757464890.580:1619): pid=5753 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:30.589707 systemd-logind[1188]: Removed session 19. Sep 10 00:41:30.583000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.37:22-10.0.0.1:60598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:30.587000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.37:22-10.0.0.1:60600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:30.627000 audit[5768]: USER_ACCT pid=5768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:30.628406 sshd[5768]: Accepted publickey for core from 10.0.0.1 port 60600 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:41:30.628000 audit[5768]: CRED_ACQ pid=5768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:30.628000 audit[5768]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffccb32d5e0 a2=3 a3=0 items=0 ppid=1 pid=5768 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:30.628000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:30.630094 sshd[5768]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:41:30.636638 systemd-logind[1188]: New session 20 of user core. Sep 10 00:41:30.637746 systemd[1]: Started session-20.scope. Sep 10 00:41:30.641000 audit[5768]: USER_START pid=5768 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:30.643000 audit[5770]: CRED_ACQ pid=5770 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:31.090433 sshd[5768]: pam_unix(sshd:session): session closed for user core Sep 10 00:41:31.090000 audit[5768]: USER_END pid=5768 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:31.090000 audit[5768]: CRED_DISP pid=5768 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:31.094252 systemd[1]: sshd@19-10.0.0.37:22-10.0.0.1:60600.service: Deactivated successfully. Sep 10 00:41:31.093000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.37:22-10.0.0.1:60600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:31.095174 systemd[1]: session-20.scope: Deactivated successfully. Sep 10 00:41:31.095873 systemd-logind[1188]: Session 20 logged out. Waiting for processes to exit. Sep 10 00:41:31.097645 systemd[1]: Started sshd@20-10.0.0.37:22-10.0.0.1:60616.service. Sep 10 00:41:31.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.37:22-10.0.0.1:60616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:31.098853 systemd-logind[1188]: Removed session 20. Sep 10 00:41:31.139000 audit[5780]: USER_ACCT pid=5780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:31.141437 sshd[5780]: Accepted publickey for core from 10.0.0.1 port 60616 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:41:31.141000 audit[5780]: CRED_ACQ pid=5780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:31.141000 audit[5780]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5940de20 a2=3 a3=0 items=0 ppid=1 pid=5780 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:31.141000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:31.142644 sshd[5780]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:41:31.147072 systemd-logind[1188]: New session 21 of user core. Sep 10 00:41:31.148339 systemd[1]: Started session-21.scope. Sep 10 00:41:31.153000 audit[5780]: USER_START pid=5780 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:31.154000 audit[5782]: CRED_ACQ pid=5782 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:31.874000 audit[5798]: NETFILTER_CFG table=filter:138 family=2 entries=22 op=nft_register_rule pid=5798 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:31.874000 audit[5798]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7fff1bfe2480 a2=0 a3=7fff1bfe246c items=0 ppid=2118 pid=5798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:31.874000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:31.880000 audit[5798]: NETFILTER_CFG table=nat:139 family=2 entries=24 op=nft_register_rule pid=5798 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:31.880000 audit[5798]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7fff1bfe2480 a2=0 a3=0 items=0 ppid=2118 pid=5798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:31.880000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:31.911044 sshd[5780]: pam_unix(sshd:session): session closed for user core Sep 10 00:41:31.911000 audit[5780]: USER_END pid=5780 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:31.912000 audit[5780]: CRED_DISP pid=5780 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:31.915989 systemd[1]: Started sshd@21-10.0.0.37:22-10.0.0.1:60628.service. Sep 10 00:41:31.916905 systemd[1]: sshd@20-10.0.0.37:22-10.0.0.1:60616.service: Deactivated successfully. Sep 10 00:41:31.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.37:22-10.0.0.1:60628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:31.916000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.37:22-10.0.0.1:60616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:31.918086 systemd[1]: session-21.scope: Deactivated successfully. Sep 10 00:41:31.919019 systemd-logind[1188]: Session 21 logged out. Waiting for processes to exit. Sep 10 00:41:31.920387 systemd-logind[1188]: Removed session 21. Sep 10 00:41:31.919000 audit[5801]: NETFILTER_CFG table=filter:140 family=2 entries=34 op=nft_register_rule pid=5801 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:31.919000 audit[5801]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffc6e46db30 a2=0 a3=7ffc6e46db1c items=0 ppid=2118 pid=5801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:31.919000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:31.924000 audit[5801]: NETFILTER_CFG table=nat:141 family=2 entries=24 op=nft_register_rule pid=5801 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:31.924000 audit[5801]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffc6e46db30 a2=0 a3=0 items=0 ppid=2118 pid=5801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:31.924000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:31.974000 audit[5802]: USER_ACCT pid=5802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:31.975312 sshd[5802]: Accepted publickey for core from 10.0.0.1 port 60628 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:41:31.976000 audit[5802]: CRED_ACQ pid=5802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:31.976000 audit[5802]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcff9e8830 a2=3 a3=0 items=0 ppid=1 pid=5802 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:31.976000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:31.978085 sshd[5802]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:41:31.988797 systemd-logind[1188]: New session 22 of user core. Sep 10 00:41:31.989587 systemd[1]: Started session-22.scope. Sep 10 00:41:31.996000 audit[5802]: USER_START pid=5802 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:31.998000 audit[5805]: CRED_ACQ pid=5805 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:32.531476 sshd[5802]: pam_unix(sshd:session): session closed for user core Sep 10 00:41:32.531000 audit[5802]: USER_END pid=5802 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:32.532000 audit[5802]: CRED_DISP pid=5802 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:32.535081 systemd[1]: sshd@21-10.0.0.37:22-10.0.0.1:60628.service: Deactivated successfully. Sep 10 00:41:32.534000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.37:22-10.0.0.1:60628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:32.535678 systemd[1]: session-22.scope: Deactivated successfully. Sep 10 00:41:32.536433 systemd-logind[1188]: Session 22 logged out. Waiting for processes to exit. Sep 10 00:41:32.537647 systemd[1]: Started sshd@22-10.0.0.37:22-10.0.0.1:60632.service. Sep 10 00:41:32.536000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.37:22-10.0.0.1:60632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:32.538654 systemd-logind[1188]: Removed session 22. Sep 10 00:41:32.579000 audit[5815]: USER_ACCT pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:32.581084 sshd[5815]: Accepted publickey for core from 10.0.0.1 port 60632 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:41:32.581000 audit[5815]: CRED_ACQ pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:32.581000 audit[5815]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed3be4700 a2=3 a3=0 items=0 ppid=1 pid=5815 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:32.581000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:32.582433 sshd[5815]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:41:32.586557 systemd-logind[1188]: New session 23 of user core. Sep 10 00:41:32.587566 systemd[1]: Started session-23.scope. Sep 10 00:41:32.593000 audit[5815]: USER_START pid=5815 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:32.595000 audit[5817]: CRED_ACQ pid=5817 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:32.750356 sshd[5815]: pam_unix(sshd:session): session closed for user core Sep 10 00:41:32.749000 audit[5815]: USER_END pid=5815 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:32.749000 audit[5815]: CRED_DISP pid=5815 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:32.753415 systemd[1]: sshd@22-10.0.0.37:22-10.0.0.1:60632.service: Deactivated successfully. Sep 10 00:41:32.752000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.37:22-10.0.0.1:60632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:32.754512 systemd[1]: session-23.scope: Deactivated successfully. Sep 10 00:41:32.755489 systemd-logind[1188]: Session 23 logged out. Waiting for processes to exit. Sep 10 00:41:32.756515 systemd-logind[1188]: Removed session 23. Sep 10 00:41:34.474000 audit[5830]: NETFILTER_CFG table=filter:142 family=2 entries=34 op=nft_register_rule pid=5830 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:34.474000 audit[5830]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffc81bcaef0 a2=0 a3=7ffc81bcaedc items=0 ppid=2118 pid=5830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:34.474000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:34.480000 audit[5830]: NETFILTER_CFG table=nat:143 family=2 entries=38 op=nft_register_rule pid=5830 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:34.480000 audit[5830]: SYSCALL arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7ffc81bcaef0 a2=0 a3=7ffc81bcaedc items=0 ppid=2118 pid=5830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:34.480000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:36.703018 kernel: kauditd_printk_skb: 63 callbacks suppressed Sep 10 00:41:36.703230 kernel: audit: type=1325 audit(1757464896.697:1663): table=filter:144 family=2 entries=33 op=nft_register_rule pid=5877 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:36.697000 audit[5877]: NETFILTER_CFG table=filter:144 family=2 entries=33 op=nft_register_rule pid=5877 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:36.697000 audit[5877]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7fffffd92420 a2=0 a3=7fffffd9240c items=0 ppid=2118 pid=5877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:36.711734 kernel: audit: type=1300 audit(1757464896.697:1663): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7fffffd92420 a2=0 a3=7fffffd9240c items=0 ppid=2118 pid=5877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:36.697000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:36.715208 kernel: audit: type=1327 audit(1757464896.697:1663): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:36.718000 audit[5877]: NETFILTER_CFG table=nat:145 family=2 entries=31 op=nft_register_chain pid=5877 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:36.718000 audit[5877]: SYSCALL arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7fffffd92420 a2=0 a3=7fffffd9240c items=0 ppid=2118 pid=5877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:36.729019 kernel: audit: type=1325 audit(1757464896.718:1664): table=nat:145 family=2 entries=31 op=nft_register_chain pid=5877 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:36.729092 kernel: audit: type=1300 audit(1757464896.718:1664): arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7fffffd92420 a2=0 a3=7fffffd9240c items=0 ppid=2118 pid=5877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:36.729121 kernel: audit: type=1327 audit(1757464896.718:1664): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:36.718000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:37.755424 systemd[1]: Started sshd@23-10.0.0.37:22-10.0.0.1:60642.service. Sep 10 00:41:37.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.37:22-10.0.0.1:60642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:37.759975 kernel: audit: type=1130 audit(1757464897.754:1665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.37:22-10.0.0.1:60642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:37.801000 audit[5879]: USER_ACCT pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:37.802731 sshd[5879]: Accepted publickey for core from 10.0.0.1 port 60642 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:41:37.806000 audit[5879]: CRED_ACQ pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:37.808290 sshd[5879]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:41:37.812605 kernel: audit: type=1101 audit(1757464897.801:1666): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:37.812775 kernel: audit: type=1103 audit(1757464897.806:1667): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:37.816005 kernel: audit: type=1006 audit(1757464897.806:1668): pid=5879 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Sep 10 00:41:37.813699 systemd-logind[1188]: New session 24 of user core. Sep 10 00:41:37.806000 audit[5879]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca18ca2f0 a2=3 a3=0 items=0 ppid=1 pid=5879 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:37.806000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:37.814319 systemd[1]: Started session-24.scope. Sep 10 00:41:37.820000 audit[5879]: USER_START pid=5879 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:37.822000 audit[5881]: CRED_ACQ pid=5881 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:38.051964 sshd[5879]: pam_unix(sshd:session): session closed for user core Sep 10 00:41:38.052000 audit[5879]: USER_END pid=5879 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:38.052000 audit[5879]: CRED_DISP pid=5879 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:38.054000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.37:22-10.0.0.1:60642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:38.055446 systemd[1]: sshd@23-10.0.0.37:22-10.0.0.1:60642.service: Deactivated successfully. Sep 10 00:41:38.056594 systemd[1]: session-24.scope: Deactivated successfully. Sep 10 00:41:38.057696 systemd-logind[1188]: Session 24 logged out. Waiting for processes to exit. Sep 10 00:41:38.058588 systemd-logind[1188]: Removed session 24. Sep 10 00:41:39.878000 audit[5892]: NETFILTER_CFG table=filter:146 family=2 entries=32 op=nft_register_rule pid=5892 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:39.878000 audit[5892]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffd0f328220 a2=0 a3=7ffd0f32820c items=0 ppid=2118 pid=5892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:39.878000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:39.883000 audit[5892]: NETFILTER_CFG table=nat:147 family=2 entries=44 op=nft_register_chain pid=5892 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:39.883000 audit[5892]: SYSCALL arch=c000003e syscall=46 success=yes exit=14660 a0=3 a1=7ffd0f328220 a2=0 a3=7ffd0f32820c items=0 ppid=2118 pid=5892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:39.883000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:39.896720 env[1200]: time="2025-09-10T00:41:39.896659819Z" level=info msg="StopContainer for \"e60970de81662f7fd5c11d44c67058f69576818f9136314f192afed2ed5b2745\" with timeout 30 (s)" Sep 10 00:41:39.900164 env[1200]: time="2025-09-10T00:41:39.897691587Z" level=info msg="Stop container \"e60970de81662f7fd5c11d44c67058f69576818f9136314f192afed2ed5b2745\" with signal terminated" Sep 10 00:41:39.915808 systemd[1]: cri-containerd-e60970de81662f7fd5c11d44c67058f69576818f9136314f192afed2ed5b2745.scope: Deactivated successfully. Sep 10 00:41:39.916154 systemd[1]: cri-containerd-e60970de81662f7fd5c11d44c67058f69576818f9136314f192afed2ed5b2745.scope: Consumed 1.949s CPU time. Sep 10 00:41:39.914000 audit: BPF prog-id=223 op=UNLOAD Sep 10 00:41:39.917000 audit[5899]: NETFILTER_CFG table=filter:148 family=2 entries=32 op=nft_register_rule pid=5899 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:39.917000 audit[5899]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffe62c22b30 a2=0 a3=7ffe62c22b1c items=0 ppid=2118 pid=5899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:39.917000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:39.922000 audit: BPF prog-id=226 op=UNLOAD Sep 10 00:41:39.924000 audit[5899]: NETFILTER_CFG table=nat:149 family=2 entries=44 op=nft_unregister_chain pid=5899 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:39.924000 audit[5899]: SYSCALL arch=c000003e syscall=46 success=yes exit=12900 a0=3 a1=7ffe62c22b30 a2=0 a3=7ffe62c22b1c items=0 ppid=2118 pid=5899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:39.924000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:39.941806 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e60970de81662f7fd5c11d44c67058f69576818f9136314f192afed2ed5b2745-rootfs.mount: Deactivated successfully. Sep 10 00:41:40.095532 env[1200]: time="2025-09-10T00:41:40.095471696Z" level=info msg="shim disconnected" id=e60970de81662f7fd5c11d44c67058f69576818f9136314f192afed2ed5b2745 Sep 10 00:41:40.095532 env[1200]: time="2025-09-10T00:41:40.095522973Z" level=warning msg="cleaning up after shim disconnected" id=e60970de81662f7fd5c11d44c67058f69576818f9136314f192afed2ed5b2745 namespace=k8s.io Sep 10 00:41:40.095532 env[1200]: time="2025-09-10T00:41:40.095532731Z" level=info msg="cleaning up dead shim" Sep 10 00:41:40.102829 env[1200]: time="2025-09-10T00:41:40.102776855Z" level=warning msg="cleanup warnings time=\"2025-09-10T00:41:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5912 runtime=io.containerd.runc.v2\n" Sep 10 00:41:40.106826 env[1200]: time="2025-09-10T00:41:40.106765302Z" level=info msg="StopContainer for \"e60970de81662f7fd5c11d44c67058f69576818f9136314f192afed2ed5b2745\" returns successfully" Sep 10 00:41:40.107528 env[1200]: time="2025-09-10T00:41:40.107473486Z" level=info msg="StopPodSandbox for \"8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963\"" Sep 10 00:41:40.107605 env[1200]: time="2025-09-10T00:41:40.107576912Z" level=info msg="Container to stop \"e60970de81662f7fd5c11d44c67058f69576818f9136314f192afed2ed5b2745\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Sep 10 00:41:40.111601 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963-shm.mount: Deactivated successfully. Sep 10 00:41:40.114000 audit: BPF prog-id=188 op=UNLOAD Sep 10 00:41:40.115382 systemd[1]: cri-containerd-8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963.scope: Deactivated successfully. Sep 10 00:41:40.120000 audit: BPF prog-id=191 op=UNLOAD Sep 10 00:41:40.136501 env[1200]: time="2025-09-10T00:41:40.135578907Z" level=info msg="shim disconnected" id=8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963 Sep 10 00:41:40.136501 env[1200]: time="2025-09-10T00:41:40.135631116Z" level=warning msg="cleaning up after shim disconnected" id=8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963 namespace=k8s.io Sep 10 00:41:40.136501 env[1200]: time="2025-09-10T00:41:40.135640715Z" level=info msg="cleaning up dead shim" Sep 10 00:41:40.138189 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963-rootfs.mount: Deactivated successfully. Sep 10 00:41:40.143435 env[1200]: time="2025-09-10T00:41:40.143373235Z" level=warning msg="cleanup warnings time=\"2025-09-10T00:41:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5942 runtime=io.containerd.runc.v2\n" Sep 10 00:41:40.660446 kubelet[1956]: I0910 00:41:40.660395 1956 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" Sep 10 00:41:40.695894 systemd-networkd[1026]: cali961d5ee6476: Link DOWN Sep 10 00:41:40.695903 systemd-networkd[1026]: cali961d5ee6476: Lost carrier Sep 10 00:41:40.710000 audit[5979]: NETFILTER_CFG table=filter:150 family=2 entries=55 op=nft_register_rule pid=5979 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:41:40.710000 audit[5979]: SYSCALL arch=c000003e syscall=46 success=yes exit=8944 a0=3 a1=7ffe3b66e240 a2=0 a3=7ffe3b66e22c items=0 ppid=3525 pid=5979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:40.710000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:41:40.711000 audit[5979]: NETFILTER_CFG table=filter:151 family=2 entries=2 op=nft_unregister_chain pid=5979 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 00:41:40.711000 audit[5979]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffe3b66e240 a2=0 a3=56061a0c5000 items=0 ppid=3525 pid=5979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:40.711000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 00:41:40.803311 env[1200]: 2025-09-10 00:41:40.694 [INFO][5965] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" Sep 10 00:41:40.803311 env[1200]: 2025-09-10 00:41:40.694 [INFO][5965] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" iface="eth0" netns="/var/run/netns/cni-c709e653-7f7f-abd5-4313-d5a7e8a55f83" Sep 10 00:41:40.803311 env[1200]: 2025-09-10 00:41:40.694 [INFO][5965] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" iface="eth0" netns="/var/run/netns/cni-c709e653-7f7f-abd5-4313-d5a7e8a55f83" Sep 10 00:41:40.803311 env[1200]: 2025-09-10 00:41:40.709 [INFO][5965] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" after=14.359093ms iface="eth0" netns="/var/run/netns/cni-c709e653-7f7f-abd5-4313-d5a7e8a55f83" Sep 10 00:41:40.803311 env[1200]: 2025-09-10 00:41:40.709 [INFO][5965] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" Sep 10 00:41:40.803311 env[1200]: 2025-09-10 00:41:40.709 [INFO][5965] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" Sep 10 00:41:40.803311 env[1200]: 2025-09-10 00:41:40.744 [INFO][5978] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" HandleID="k8s-pod-network.8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" Workload="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" Sep 10 00:41:40.803311 env[1200]: 2025-09-10 00:41:40.746 [INFO][5978] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 00:41:40.803311 env[1200]: 2025-09-10 00:41:40.746 [INFO][5978] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 00:41:40.803311 env[1200]: 2025-09-10 00:41:40.797 [INFO][5978] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" HandleID="k8s-pod-network.8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" Workload="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" Sep 10 00:41:40.803311 env[1200]: 2025-09-10 00:41:40.797 [INFO][5978] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" HandleID="k8s-pod-network.8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" Workload="localhost-k8s-calico--apiserver--694cb88886--v9hh9-eth0" Sep 10 00:41:40.803311 env[1200]: 2025-09-10 00:41:40.799 [INFO][5978] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 00:41:40.803311 env[1200]: 2025-09-10 00:41:40.801 [INFO][5965] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963" Sep 10 00:41:40.810669 env[1200]: time="2025-09-10T00:41:40.807007010Z" level=info msg="TearDown network for sandbox \"8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963\" successfully" Sep 10 00:41:40.810669 env[1200]: time="2025-09-10T00:41:40.807043209Z" level=info msg="StopPodSandbox for \"8e9e27fda6d65805c6f8e9e602acf3aa05c0b44459552f8dadca0d22d947b963\" returns successfully" Sep 10 00:41:40.806288 systemd[1]: run-netns-cni\x2dc709e653\x2d7f7f\x2dabd5\x2d4313\x2dd5a7e8a55f83.mount: Deactivated successfully. Sep 10 00:41:40.881471 kubelet[1956]: I0910 00:41:40.881406 1956 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/e48b1739-8cbf-43e6-b074-f445c5aaa2ae-calico-apiserver-certs\") pod \"e48b1739-8cbf-43e6-b074-f445c5aaa2ae\" (UID: \"e48b1739-8cbf-43e6-b074-f445c5aaa2ae\") " Sep 10 00:41:40.881682 kubelet[1956]: I0910 00:41:40.881488 1956 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-x2nr9\" (UniqueName: \"kubernetes.io/projected/e48b1739-8cbf-43e6-b074-f445c5aaa2ae-kube-api-access-x2nr9\") pod \"e48b1739-8cbf-43e6-b074-f445c5aaa2ae\" (UID: \"e48b1739-8cbf-43e6-b074-f445c5aaa2ae\") " Sep 10 00:41:40.893687 kubelet[1956]: I0910 00:41:40.893625 1956 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/e48b1739-8cbf-43e6-b074-f445c5aaa2ae-kube-api-access-x2nr9" (OuterVolumeSpecName: "kube-api-access-x2nr9") pod "e48b1739-8cbf-43e6-b074-f445c5aaa2ae" (UID: "e48b1739-8cbf-43e6-b074-f445c5aaa2ae"). InnerVolumeSpecName "kube-api-access-x2nr9". PluginName "kubernetes.io/projected", VolumeGIDValue "" Sep 10 00:41:40.893994 kubelet[1956]: I0910 00:41:40.893660 1956 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/e48b1739-8cbf-43e6-b074-f445c5aaa2ae-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "e48b1739-8cbf-43e6-b074-f445c5aaa2ae" (UID: "e48b1739-8cbf-43e6-b074-f445c5aaa2ae"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGIDValue "" Sep 10 00:41:40.895265 systemd[1]: var-lib-kubelet-pods-e48b1739\x2d8cbf\x2d43e6\x2db074\x2df445c5aaa2ae-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dx2nr9.mount: Deactivated successfully. Sep 10 00:41:40.895372 systemd[1]: var-lib-kubelet-pods-e48b1739\x2d8cbf\x2d43e6\x2db074\x2df445c5aaa2ae-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Sep 10 00:41:40.940000 audit[5990]: NETFILTER_CFG table=filter:152 family=2 entries=32 op=nft_register_rule pid=5990 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:40.940000 audit[5990]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7fff6e0c45a0 a2=0 a3=7fff6e0c458c items=0 ppid=2118 pid=5990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:40.940000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:40.948000 audit[5990]: NETFILTER_CFG table=nat:153 family=2 entries=40 op=nft_register_rule pid=5990 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:40.948000 audit[5990]: SYSCALL arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7fff6e0c45a0 a2=0 a3=7fff6e0c458c items=0 ppid=2118 pid=5990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:40.948000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:40.984262 kubelet[1956]: I0910 00:41:40.984180 1956 reconciler_common.go:299] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/e48b1739-8cbf-43e6-b074-f445c5aaa2ae-calico-apiserver-certs\") on node \"localhost\" DevicePath \"\"" Sep 10 00:41:40.984262 kubelet[1956]: I0910 00:41:40.984249 1956 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-x2nr9\" (UniqueName: \"kubernetes.io/projected/e48b1739-8cbf-43e6-b074-f445c5aaa2ae-kube-api-access-x2nr9\") on node \"localhost\" DevicePath \"\"" Sep 10 00:41:41.605230 systemd[1]: run-containerd-runc-k8s.io-8673d45abb68389609b9f1a665b4bb7263e2b0dc27566a5e41c8aafd331e46e8-runc.A2MyAM.mount: Deactivated successfully. Sep 10 00:41:41.676343 systemd[1]: Removed slice kubepods-besteffort-pode48b1739_8cbf_43e6_b074_f445c5aaa2ae.slice. Sep 10 00:41:41.676457 systemd[1]: kubepods-besteffort-pode48b1739_8cbf_43e6_b074_f445c5aaa2ae.slice: Consumed 1.981s CPU time. Sep 10 00:41:42.270812 kubelet[1956]: I0910 00:41:42.270702 1956 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="e48b1739-8cbf-43e6-b074-f445c5aaa2ae" path="/var/lib/kubelet/pods/e48b1739-8cbf-43e6-b074-f445c5aaa2ae/volumes" Sep 10 00:41:42.480000 audit[6012]: NETFILTER_CFG table=filter:154 family=2 entries=20 op=nft_register_rule pid=6012 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:42.482777 kernel: kauditd_printk_skb: 35 callbacks suppressed Sep 10 00:41:42.482846 kernel: audit: type=1325 audit(1757464902.480:1686): table=filter:154 family=2 entries=20 op=nft_register_rule pid=6012 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:42.480000 audit[6012]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd18eaec70 a2=0 a3=7ffd18eaec5c items=0 ppid=2118 pid=6012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:42.491387 kernel: audit: type=1300 audit(1757464902.480:1686): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd18eaec70 a2=0 a3=7ffd18eaec5c items=0 ppid=2118 pid=6012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:42.491497 kernel: audit: type=1327 audit(1757464902.480:1686): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:42.480000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:42.497000 audit[6012]: NETFILTER_CFG table=nat:155 family=2 entries=110 op=nft_register_chain pid=6012 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:42.497000 audit[6012]: SYSCALL arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffd18eaec70 a2=0 a3=7ffd18eaec5c items=0 ppid=2118 pid=6012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:42.506833 kernel: audit: type=1325 audit(1757464902.497:1687): table=nat:155 family=2 entries=110 op=nft_register_chain pid=6012 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 00:41:42.506976 kernel: audit: type=1300 audit(1757464902.497:1687): arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffd18eaec70 a2=0 a3=7ffd18eaec5c items=0 ppid=2118 pid=6012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:42.507025 kernel: audit: type=1327 audit(1757464902.497:1687): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:42.497000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 00:41:43.058689 systemd[1]: Started sshd@24-10.0.0.37:22-10.0.0.1:40636.service. Sep 10 00:41:43.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.37:22-10.0.0.1:40636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:43.064098 kernel: audit: type=1130 audit(1757464903.057:1688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.37:22-10.0.0.1:40636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:43.099000 audit[6014]: USER_ACCT pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:43.100781 sshd[6014]: Accepted publickey for core from 10.0.0.1 port 40636 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:41:43.141000 audit[6014]: CRED_ACQ pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:43.143207 sshd[6014]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:41:43.148030 kernel: audit: type=1101 audit(1757464903.099:1689): pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:43.148091 kernel: audit: type=1103 audit(1757464903.141:1690): pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:43.148113 kernel: audit: type=1006 audit(1757464903.141:1691): pid=6014 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Sep 10 00:41:43.147580 systemd-logind[1188]: New session 25 of user core. Sep 10 00:41:43.148225 systemd[1]: Started session-25.scope. Sep 10 00:41:43.141000 audit[6014]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc54303cd0 a2=3 a3=0 items=0 ppid=1 pid=6014 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:43.141000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:43.152000 audit[6014]: USER_START pid=6014 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:43.153000 audit[6016]: CRED_ACQ pid=6016 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:43.300401 sshd[6014]: pam_unix(sshd:session): session closed for user core Sep 10 00:41:43.301000 audit[6014]: USER_END pid=6014 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:43.301000 audit[6014]: CRED_DISP pid=6014 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:43.303690 systemd[1]: sshd@24-10.0.0.37:22-10.0.0.1:40636.service: Deactivated successfully. Sep 10 00:41:43.302000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.37:22-10.0.0.1:40636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:43.304555 systemd[1]: session-25.scope: Deactivated successfully. Sep 10 00:41:43.305363 systemd-logind[1188]: Session 25 logged out. Waiting for processes to exit. Sep 10 00:41:43.306369 systemd-logind[1188]: Removed session 25. Sep 10 00:41:48.315810 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 10 00:41:48.316008 kernel: audit: type=1130 audit(1757464908.306:1697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.37:22-10.0.0.1:40650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:48.306000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.37:22-10.0.0.1:40650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:48.307271 systemd[1]: Started sshd@25-10.0.0.37:22-10.0.0.1:40650.service. Sep 10 00:41:48.349000 audit[6054]: USER_ACCT pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:48.355318 sshd[6054]: Accepted publickey for core from 10.0.0.1 port 40650 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:41:48.359783 kernel: audit: type=1101 audit(1757464908.349:1698): pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:48.359850 kernel: audit: type=1103 audit(1757464908.354:1699): pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:48.362927 kernel: audit: type=1006 audit(1757464908.354:1700): pid=6054 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Sep 10 00:41:48.363028 kernel: audit: type=1300 audit(1757464908.354:1700): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd9c8f1840 a2=3 a3=0 items=0 ppid=1 pid=6054 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:48.354000 audit[6054]: CRED_ACQ pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:48.354000 audit[6054]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd9c8f1840 a2=3 a3=0 items=0 ppid=1 pid=6054 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:48.355698 sshd[6054]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:41:48.368476 kernel: audit: type=1327 audit(1757464908.354:1700): proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:48.354000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:48.367359 systemd[1]: Started session-26.scope. Sep 10 00:41:48.367648 systemd-logind[1188]: New session 26 of user core. Sep 10 00:41:48.372000 audit[6054]: USER_START pid=6054 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:48.373000 audit[6056]: CRED_ACQ pid=6056 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:48.395651 kernel: audit: type=1105 audit(1757464908.372:1701): pid=6054 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:48.395766 kernel: audit: type=1103 audit(1757464908.373:1702): pid=6056 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:48.509953 sshd[6054]: pam_unix(sshd:session): session closed for user core Sep 10 00:41:48.510000 audit[6054]: USER_END pid=6054 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:48.513065 systemd[1]: sshd@25-10.0.0.37:22-10.0.0.1:40650.service: Deactivated successfully. Sep 10 00:41:48.514092 systemd[1]: session-26.scope: Deactivated successfully. Sep 10 00:41:48.520095 kernel: audit: type=1106 audit(1757464908.510:1703): pid=6054 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:48.520331 kernel: audit: type=1104 audit(1757464908.510:1704): pid=6054 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:48.510000 audit[6054]: CRED_DISP pid=6054 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:48.512000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.37:22-10.0.0.1:40650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:48.521291 systemd-logind[1188]: Session 26 logged out. Waiting for processes to exit. Sep 10 00:41:48.522922 systemd-logind[1188]: Removed session 26. Sep 10 00:41:53.516000 systemd[1]: Started sshd@26-10.0.0.37:22-10.0.0.1:34314.service. Sep 10 00:41:53.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.37:22-10.0.0.1:34314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:53.521333 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 10 00:41:53.521441 kernel: audit: type=1130 audit(1757464913.515:1706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.37:22-10.0.0.1:34314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:53.558000 audit[6071]: USER_ACCT pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:53.563254 sshd[6071]: Accepted publickey for core from 10.0.0.1 port 34314 ssh2: RSA SHA256:naKAIq1jxVWXXwxrf2qyS4Axg4ReIMCTV7B/o3rV64U Sep 10 00:41:53.560000 audit[6071]: CRED_ACQ pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:53.564083 sshd[6071]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 00:41:53.567397 kernel: audit: type=1101 audit(1757464913.558:1707): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:53.567645 kernel: audit: type=1103 audit(1757464913.560:1708): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:53.567667 kernel: audit: type=1006 audit(1757464913.560:1709): pid=6071 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Sep 10 00:41:53.569552 kernel: audit: type=1300 audit(1757464913.560:1709): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd3df89b90 a2=3 a3=0 items=0 ppid=1 pid=6071 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:53.560000 audit[6071]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd3df89b90 a2=3 a3=0 items=0 ppid=1 pid=6071 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 00:41:53.570556 systemd[1]: Started session-27.scope. Sep 10 00:41:53.571143 systemd-logind[1188]: New session 27 of user core. Sep 10 00:41:53.573356 kernel: audit: type=1327 audit(1757464913.560:1709): proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:53.560000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 00:41:53.576000 audit[6071]: USER_START pid=6071 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:53.578000 audit[6073]: CRED_ACQ pid=6073 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:53.585286 kernel: audit: type=1105 audit(1757464913.576:1710): pid=6071 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:53.585349 kernel: audit: type=1103 audit(1757464913.578:1711): pid=6073 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:53.824644 sshd[6071]: pam_unix(sshd:session): session closed for user core Sep 10 00:41:53.824000 audit[6071]: USER_END pid=6071 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:53.827336 systemd[1]: sshd@26-10.0.0.37:22-10.0.0.1:34314.service: Deactivated successfully. Sep 10 00:41:53.828372 systemd[1]: session-27.scope: Deactivated successfully. Sep 10 00:41:53.829014 systemd-logind[1188]: Session 27 logged out. Waiting for processes to exit. Sep 10 00:41:53.829864 systemd-logind[1188]: Removed session 27. Sep 10 00:41:53.825000 audit[6071]: CRED_DISP pid=6071 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:53.834603 kernel: audit: type=1106 audit(1757464913.824:1712): pid=6071 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:53.834687 kernel: audit: type=1104 audit(1757464913.825:1713): pid=6071 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Sep 10 00:41:53.826000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.37:22-10.0.0.1:34314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 00:41:55.566000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:41:55.566000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=82 a1=c0036fe3c0 a2=fc6 a3=0 items=0 ppid=1667 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 key=(null) Sep 10 00:41:55.566000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:41:55.566000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 10 00:41:55.566000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:41:55.566000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7d a1=c0112f32a0 a2=fc6 a3=0 items=0 ppid=1667 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 key=(null) Sep 10 00:41:55.566000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 10 00:41:55.566000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c006bd9650 a2=fc6 a3=0 items=0 ppid=1667 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 key=(null) Sep 10 00:41:55.566000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 10 00:41:55.567000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:41:55.567000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c006bd9680 a2=fc6 a3=0 items=0 ppid=1667 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 key=(null) Sep 10 00:41:55.567000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 10 00:41:55.569000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:41:55.569000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=86 a1=c0112f3400 a2=fc6 a3=0 items=0 ppid=1667 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 key=(null) Sep 10 00:41:55.569000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 10 00:41:55.571000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:41:55.571000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c0087c65d0 a2=fc6 a3=0 items=0 ppid=1667 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c554,c951 key=(null) Sep 10 00:41:55.571000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Sep 10 00:41:55.676000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:41:55.676000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 00:41:55.676000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00332fb60 a2=fc6 a3=0 items=0 ppid=1653 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 key=(null) Sep 10 00:41:55.676000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c003198d00 a2=fc6 a3=0 items=0 ppid=1653 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c501,c699 key=(null) Sep 10 00:41:55.676000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 00:41:55.676000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269