Sep 10 01:08:24.657549 kernel: Linux version 5.15.191-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Tue Sep 9 23:10:34 -00 2025 Sep 10 01:08:24.657564 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=ebdf135b7dd8c9596dea7f2ca48bf31be0143f7cba32a9cc0282a66ca6db3272 Sep 10 01:08:24.657571 kernel: Disabled fast string operations Sep 10 01:08:24.657575 kernel: BIOS-provided physical RAM map: Sep 10 01:08:24.657579 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ebff] usable Sep 10 01:08:24.657583 kernel: BIOS-e820: [mem 0x000000000009ec00-0x000000000009ffff] reserved Sep 10 01:08:24.657589 kernel: BIOS-e820: [mem 0x00000000000dc000-0x00000000000fffff] reserved Sep 10 01:08:24.657593 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007fedffff] usable Sep 10 01:08:24.657597 kernel: BIOS-e820: [mem 0x000000007fee0000-0x000000007fefefff] ACPI data Sep 10 01:08:24.657601 kernel: BIOS-e820: [mem 0x000000007feff000-0x000000007fefffff] ACPI NVS Sep 10 01:08:24.657605 kernel: BIOS-e820: [mem 0x000000007ff00000-0x000000007fffffff] usable Sep 10 01:08:24.657609 kernel: BIOS-e820: [mem 0x00000000f0000000-0x00000000f7ffffff] reserved Sep 10 01:08:24.657613 kernel: BIOS-e820: [mem 0x00000000fec00000-0x00000000fec0ffff] reserved Sep 10 01:08:24.657617 kernel: BIOS-e820: [mem 0x00000000fee00000-0x00000000fee00fff] reserved Sep 10 01:08:24.657623 kernel: BIOS-e820: [mem 0x00000000fffe0000-0x00000000ffffffff] reserved Sep 10 01:08:24.657628 kernel: NX (Execute Disable) protection: active Sep 10 01:08:24.657632 kernel: SMBIOS 2.7 present. Sep 10 01:08:24.657637 kernel: DMI: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 05/28/2020 Sep 10 01:08:24.657642 kernel: vmware: hypercall mode: 0x00 Sep 10 01:08:24.657646 kernel: Hypervisor detected: VMware Sep 10 01:08:24.657651 kernel: vmware: TSC freq read from hypervisor : 3408.000 MHz Sep 10 01:08:24.657656 kernel: vmware: Host bus clock speed read from hypervisor : 66000000 Hz Sep 10 01:08:24.657660 kernel: vmware: using clock offset of 6255259032 ns Sep 10 01:08:24.657665 kernel: tsc: Detected 3408.000 MHz processor Sep 10 01:08:24.657670 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Sep 10 01:08:24.657675 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Sep 10 01:08:24.657679 kernel: last_pfn = 0x80000 max_arch_pfn = 0x400000000 Sep 10 01:08:24.657684 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Sep 10 01:08:24.657688 kernel: total RAM covered: 3072M Sep 10 01:08:24.657694 kernel: Found optimal setting for mtrr clean up Sep 10 01:08:24.657699 kernel: gran_size: 64K chunk_size: 64K num_reg: 2 lose cover RAM: 0G Sep 10 01:08:24.657704 kernel: Using GB pages for direct mapping Sep 10 01:08:24.657708 kernel: ACPI: Early table checksum verification disabled Sep 10 01:08:24.657713 kernel: ACPI: RSDP 0x00000000000F6A00 000024 (v02 PTLTD ) Sep 10 01:08:24.657717 kernel: ACPI: XSDT 0x000000007FEE965B 00005C (v01 INTEL 440BX 06040000 VMW 01324272) Sep 10 01:08:24.657722 kernel: ACPI: FACP 0x000000007FEFEE73 0000F4 (v04 INTEL 440BX 06040000 PTL 000F4240) Sep 10 01:08:24.657727 kernel: ACPI: DSDT 0x000000007FEEAD55 01411E (v01 PTLTD Custom 06040000 MSFT 03000001) Sep 10 01:08:24.657731 kernel: ACPI: FACS 0x000000007FEFFFC0 000040 Sep 10 01:08:24.657735 kernel: ACPI: FACS 0x000000007FEFFFC0 000040 Sep 10 01:08:24.657741 kernel: ACPI: BOOT 0x000000007FEEAD2D 000028 (v01 PTLTD $SBFTBL$ 06040000 LTP 00000001) Sep 10 01:08:24.657748 kernel: ACPI: APIC 0x000000007FEEA5EB 000742 (v01 PTLTD ? APIC 06040000 LTP 00000000) Sep 10 01:08:24.657753 kernel: ACPI: MCFG 0x000000007FEEA5AF 00003C (v01 PTLTD $PCITBL$ 06040000 LTP 00000001) Sep 10 01:08:24.657758 kernel: ACPI: SRAT 0x000000007FEE9757 0008A8 (v02 VMWARE MEMPLUG 06040000 VMW 00000001) Sep 10 01:08:24.657763 kernel: ACPI: HPET 0x000000007FEE971F 000038 (v01 VMWARE VMW HPET 06040000 VMW 00000001) Sep 10 01:08:24.657769 kernel: ACPI: WAET 0x000000007FEE96F7 000028 (v01 VMWARE VMW WAET 06040000 VMW 00000001) Sep 10 01:08:24.657774 kernel: ACPI: Reserving FACP table memory at [mem 0x7fefee73-0x7fefef66] Sep 10 01:08:24.657779 kernel: ACPI: Reserving DSDT table memory at [mem 0x7feead55-0x7fefee72] Sep 10 01:08:24.657784 kernel: ACPI: Reserving FACS table memory at [mem 0x7fefffc0-0x7fefffff] Sep 10 01:08:24.657789 kernel: ACPI: Reserving FACS table memory at [mem 0x7fefffc0-0x7fefffff] Sep 10 01:08:24.657794 kernel: ACPI: Reserving BOOT table memory at [mem 0x7feead2d-0x7feead54] Sep 10 01:08:24.657799 kernel: ACPI: Reserving APIC table memory at [mem 0x7feea5eb-0x7feead2c] Sep 10 01:08:24.657804 kernel: ACPI: Reserving MCFG table memory at [mem 0x7feea5af-0x7feea5ea] Sep 10 01:08:24.657809 kernel: ACPI: Reserving SRAT table memory at [mem 0x7fee9757-0x7fee9ffe] Sep 10 01:08:24.657815 kernel: ACPI: Reserving HPET table memory at [mem 0x7fee971f-0x7fee9756] Sep 10 01:08:24.657820 kernel: ACPI: Reserving WAET table memory at [mem 0x7fee96f7-0x7fee971e] Sep 10 01:08:24.657825 kernel: system APIC only can use physical flat Sep 10 01:08:24.657830 kernel: Setting APIC routing to physical flat. Sep 10 01:08:24.657835 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Sep 10 01:08:24.657840 kernel: SRAT: PXM 0 -> APIC 0x02 -> Node 0 Sep 10 01:08:24.657845 kernel: SRAT: PXM 0 -> APIC 0x04 -> Node 0 Sep 10 01:08:24.657850 kernel: SRAT: PXM 0 -> APIC 0x06 -> Node 0 Sep 10 01:08:24.657854 kernel: SRAT: PXM 0 -> APIC 0x08 -> Node 0 Sep 10 01:08:24.657860 kernel: SRAT: PXM 0 -> APIC 0x0a -> Node 0 Sep 10 01:08:24.657865 kernel: SRAT: PXM 0 -> APIC 0x0c -> Node 0 Sep 10 01:08:24.657870 kernel: SRAT: PXM 0 -> APIC 0x0e -> Node 0 Sep 10 01:08:24.657875 kernel: SRAT: PXM 0 -> APIC 0x10 -> Node 0 Sep 10 01:08:24.657879 kernel: SRAT: PXM 0 -> APIC 0x12 -> Node 0 Sep 10 01:08:24.657884 kernel: SRAT: PXM 0 -> APIC 0x14 -> Node 0 Sep 10 01:08:24.657889 kernel: SRAT: PXM 0 -> APIC 0x16 -> Node 0 Sep 10 01:08:24.657894 kernel: SRAT: PXM 0 -> APIC 0x18 -> Node 0 Sep 10 01:08:24.657899 kernel: SRAT: PXM 0 -> APIC 0x1a -> Node 0 Sep 10 01:08:24.657904 kernel: SRAT: PXM 0 -> APIC 0x1c -> Node 0 Sep 10 01:08:24.657910 kernel: SRAT: PXM 0 -> APIC 0x1e -> Node 0 Sep 10 01:08:24.657915 kernel: SRAT: PXM 0 -> APIC 0x20 -> Node 0 Sep 10 01:08:24.657919 kernel: SRAT: PXM 0 -> APIC 0x22 -> Node 0 Sep 10 01:08:24.657924 kernel: SRAT: PXM 0 -> APIC 0x24 -> Node 0 Sep 10 01:08:24.657929 kernel: SRAT: PXM 0 -> APIC 0x26 -> Node 0 Sep 10 01:08:24.657934 kernel: SRAT: PXM 0 -> APIC 0x28 -> Node 0 Sep 10 01:08:24.657939 kernel: SRAT: PXM 0 -> APIC 0x2a -> Node 0 Sep 10 01:08:24.657944 kernel: SRAT: PXM 0 -> APIC 0x2c -> Node 0 Sep 10 01:08:24.657949 kernel: SRAT: PXM 0 -> APIC 0x2e -> Node 0 Sep 10 01:08:24.657953 kernel: SRAT: PXM 0 -> APIC 0x30 -> Node 0 Sep 10 01:08:24.657960 kernel: SRAT: PXM 0 -> APIC 0x32 -> Node 0 Sep 10 01:08:24.657964 kernel: SRAT: PXM 0 -> APIC 0x34 -> Node 0 Sep 10 01:08:24.657969 kernel: SRAT: PXM 0 -> APIC 0x36 -> Node 0 Sep 10 01:08:24.657974 kernel: SRAT: PXM 0 -> APIC 0x38 -> Node 0 Sep 10 01:08:24.657979 kernel: SRAT: PXM 0 -> APIC 0x3a -> Node 0 Sep 10 01:08:24.657983 kernel: SRAT: PXM 0 -> APIC 0x3c -> Node 0 Sep 10 01:08:24.657988 kernel: SRAT: PXM 0 -> APIC 0x3e -> Node 0 Sep 10 01:08:24.657993 kernel: SRAT: PXM 0 -> APIC 0x40 -> Node 0 Sep 10 01:08:24.657998 kernel: SRAT: PXM 0 -> APIC 0x42 -> Node 0 Sep 10 01:08:24.658003 kernel: SRAT: PXM 0 -> APIC 0x44 -> Node 0 Sep 10 01:08:24.658009 kernel: SRAT: PXM 0 -> APIC 0x46 -> Node 0 Sep 10 01:08:24.658014 kernel: SRAT: PXM 0 -> APIC 0x48 -> Node 0 Sep 10 01:08:24.658018 kernel: SRAT: PXM 0 -> APIC 0x4a -> Node 0 Sep 10 01:08:24.658023 kernel: SRAT: PXM 0 -> APIC 0x4c -> Node 0 Sep 10 01:08:24.658028 kernel: SRAT: PXM 0 -> APIC 0x4e -> Node 0 Sep 10 01:08:24.658033 kernel: SRAT: PXM 0 -> APIC 0x50 -> Node 0 Sep 10 01:08:24.658038 kernel: SRAT: PXM 0 -> APIC 0x52 -> Node 0 Sep 10 01:08:24.658043 kernel: SRAT: PXM 0 -> APIC 0x54 -> Node 0 Sep 10 01:08:24.658048 kernel: SRAT: PXM 0 -> APIC 0x56 -> Node 0 Sep 10 01:08:24.658053 kernel: SRAT: PXM 0 -> APIC 0x58 -> Node 0 Sep 10 01:08:24.658058 kernel: SRAT: PXM 0 -> APIC 0x5a -> Node 0 Sep 10 01:08:24.658063 kernel: SRAT: PXM 0 -> APIC 0x5c -> Node 0 Sep 10 01:08:24.658068 kernel: SRAT: PXM 0 -> APIC 0x5e -> Node 0 Sep 10 01:08:24.658073 kernel: SRAT: PXM 0 -> APIC 0x60 -> Node 0 Sep 10 01:08:24.658078 kernel: SRAT: PXM 0 -> APIC 0x62 -> Node 0 Sep 10 01:08:24.658117 kernel: SRAT: PXM 0 -> APIC 0x64 -> Node 0 Sep 10 01:08:24.658123 kernel: SRAT: PXM 0 -> APIC 0x66 -> Node 0 Sep 10 01:08:24.658128 kernel: SRAT: PXM 0 -> APIC 0x68 -> Node 0 Sep 10 01:08:24.658133 kernel: SRAT: PXM 0 -> APIC 0x6a -> Node 0 Sep 10 01:08:24.658144 kernel: SRAT: PXM 0 -> APIC 0x6c -> Node 0 Sep 10 01:08:24.658149 kernel: SRAT: PXM 0 -> APIC 0x6e -> Node 0 Sep 10 01:08:24.658163 kernel: SRAT: PXM 0 -> APIC 0x70 -> Node 0 Sep 10 01:08:24.658168 kernel: SRAT: PXM 0 -> APIC 0x72 -> Node 0 Sep 10 01:08:24.658172 kernel: SRAT: PXM 0 -> APIC 0x74 -> Node 0 Sep 10 01:08:24.658177 kernel: SRAT: PXM 0 -> APIC 0x76 -> Node 0 Sep 10 01:08:24.658183 kernel: SRAT: PXM 0 -> APIC 0x78 -> Node 0 Sep 10 01:08:24.658192 kernel: SRAT: PXM 0 -> APIC 0x7a -> Node 0 Sep 10 01:08:24.658197 kernel: SRAT: PXM 0 -> APIC 0x7c -> Node 0 Sep 10 01:08:24.658203 kernel: SRAT: PXM 0 -> APIC 0x7e -> Node 0 Sep 10 01:08:24.658208 kernel: SRAT: PXM 0 -> APIC 0x80 -> Node 0 Sep 10 01:08:24.658213 kernel: SRAT: PXM 0 -> APIC 0x82 -> Node 0 Sep 10 01:08:24.658250 kernel: SRAT: PXM 0 -> APIC 0x84 -> Node 0 Sep 10 01:08:24.658256 kernel: SRAT: PXM 0 -> APIC 0x86 -> Node 0 Sep 10 01:08:24.658261 kernel: SRAT: PXM 0 -> APIC 0x88 -> Node 0 Sep 10 01:08:24.658266 kernel: SRAT: PXM 0 -> APIC 0x8a -> Node 0 Sep 10 01:08:24.658271 kernel: SRAT: PXM 0 -> APIC 0x8c -> Node 0 Sep 10 01:08:24.658276 kernel: SRAT: PXM 0 -> APIC 0x8e -> Node 0 Sep 10 01:08:24.658283 kernel: SRAT: PXM 0 -> APIC 0x90 -> Node 0 Sep 10 01:08:24.658289 kernel: SRAT: PXM 0 -> APIC 0x92 -> Node 0 Sep 10 01:08:24.658294 kernel: SRAT: PXM 0 -> APIC 0x94 -> Node 0 Sep 10 01:08:24.658299 kernel: SRAT: PXM 0 -> APIC 0x96 -> Node 0 Sep 10 01:08:24.658304 kernel: SRAT: PXM 0 -> APIC 0x98 -> Node 0 Sep 10 01:08:24.658310 kernel: SRAT: PXM 0 -> APIC 0x9a -> Node 0 Sep 10 01:08:24.658315 kernel: SRAT: PXM 0 -> APIC 0x9c -> Node 0 Sep 10 01:08:24.658320 kernel: SRAT: PXM 0 -> APIC 0x9e -> Node 0 Sep 10 01:08:24.658325 kernel: SRAT: PXM 0 -> APIC 0xa0 -> Node 0 Sep 10 01:08:24.658330 kernel: SRAT: PXM 0 -> APIC 0xa2 -> Node 0 Sep 10 01:08:24.658337 kernel: SRAT: PXM 0 -> APIC 0xa4 -> Node 0 Sep 10 01:08:24.658342 kernel: SRAT: PXM 0 -> APIC 0xa6 -> Node 0 Sep 10 01:08:24.658347 kernel: SRAT: PXM 0 -> APIC 0xa8 -> Node 0 Sep 10 01:08:24.658352 kernel: SRAT: PXM 0 -> APIC 0xaa -> Node 0 Sep 10 01:08:24.658357 kernel: SRAT: PXM 0 -> APIC 0xac -> Node 0 Sep 10 01:08:24.658363 kernel: SRAT: PXM 0 -> APIC 0xae -> Node 0 Sep 10 01:08:24.658368 kernel: SRAT: PXM 0 -> APIC 0xb0 -> Node 0 Sep 10 01:08:24.658373 kernel: SRAT: PXM 0 -> APIC 0xb2 -> Node 0 Sep 10 01:08:24.658378 kernel: SRAT: PXM 0 -> APIC 0xb4 -> Node 0 Sep 10 01:08:24.658383 kernel: SRAT: PXM 0 -> APIC 0xb6 -> Node 0 Sep 10 01:08:24.658390 kernel: SRAT: PXM 0 -> APIC 0xb8 -> Node 0 Sep 10 01:08:24.658395 kernel: SRAT: PXM 0 -> APIC 0xba -> Node 0 Sep 10 01:08:24.658400 kernel: SRAT: PXM 0 -> APIC 0xbc -> Node 0 Sep 10 01:08:24.658405 kernel: SRAT: PXM 0 -> APIC 0xbe -> Node 0 Sep 10 01:08:24.658411 kernel: SRAT: PXM 0 -> APIC 0xc0 -> Node 0 Sep 10 01:08:24.658416 kernel: SRAT: PXM 0 -> APIC 0xc2 -> Node 0 Sep 10 01:08:24.658421 kernel: SRAT: PXM 0 -> APIC 0xc4 -> Node 0 Sep 10 01:08:24.658426 kernel: SRAT: PXM 0 -> APIC 0xc6 -> Node 0 Sep 10 01:08:24.658431 kernel: SRAT: PXM 0 -> APIC 0xc8 -> Node 0 Sep 10 01:08:24.658437 kernel: SRAT: PXM 0 -> APIC 0xca -> Node 0 Sep 10 01:08:24.658443 kernel: SRAT: PXM 0 -> APIC 0xcc -> Node 0 Sep 10 01:08:24.658448 kernel: SRAT: PXM 0 -> APIC 0xce -> Node 0 Sep 10 01:08:24.658453 kernel: SRAT: PXM 0 -> APIC 0xd0 -> Node 0 Sep 10 01:08:24.658459 kernel: SRAT: PXM 0 -> APIC 0xd2 -> Node 0 Sep 10 01:08:24.658464 kernel: SRAT: PXM 0 -> APIC 0xd4 -> Node 0 Sep 10 01:08:24.658469 kernel: SRAT: PXM 0 -> APIC 0xd6 -> Node 0 Sep 10 01:08:24.658474 kernel: SRAT: PXM 0 -> APIC 0xd8 -> Node 0 Sep 10 01:08:24.658480 kernel: SRAT: PXM 0 -> APIC 0xda -> Node 0 Sep 10 01:08:24.658485 kernel: SRAT: PXM 0 -> APIC 0xdc -> Node 0 Sep 10 01:08:24.658490 kernel: SRAT: PXM 0 -> APIC 0xde -> Node 0 Sep 10 01:08:24.658496 kernel: SRAT: PXM 0 -> APIC 0xe0 -> Node 0 Sep 10 01:08:24.658501 kernel: SRAT: PXM 0 -> APIC 0xe2 -> Node 0 Sep 10 01:08:24.658507 kernel: SRAT: PXM 0 -> APIC 0xe4 -> Node 0 Sep 10 01:08:24.658512 kernel: SRAT: PXM 0 -> APIC 0xe6 -> Node 0 Sep 10 01:08:24.658517 kernel: SRAT: PXM 0 -> APIC 0xe8 -> Node 0 Sep 10 01:08:24.658522 kernel: SRAT: PXM 0 -> APIC 0xea -> Node 0 Sep 10 01:08:24.658527 kernel: SRAT: PXM 0 -> APIC 0xec -> Node 0 Sep 10 01:08:24.658532 kernel: SRAT: PXM 0 -> APIC 0xee -> Node 0 Sep 10 01:08:24.658537 kernel: SRAT: PXM 0 -> APIC 0xf0 -> Node 0 Sep 10 01:08:24.658543 kernel: SRAT: PXM 0 -> APIC 0xf2 -> Node 0 Sep 10 01:08:24.658549 kernel: SRAT: PXM 0 -> APIC 0xf4 -> Node 0 Sep 10 01:08:24.658554 kernel: SRAT: PXM 0 -> APIC 0xf6 -> Node 0 Sep 10 01:08:24.658559 kernel: SRAT: PXM 0 -> APIC 0xf8 -> Node 0 Sep 10 01:08:24.658564 kernel: SRAT: PXM 0 -> APIC 0xfa -> Node 0 Sep 10 01:08:24.658570 kernel: SRAT: PXM 0 -> APIC 0xfc -> Node 0 Sep 10 01:08:24.658575 kernel: SRAT: PXM 0 -> APIC 0xfe -> Node 0 Sep 10 01:08:24.658580 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x0009ffff] Sep 10 01:08:24.658585 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00100000-0x7fffffff] Sep 10 01:08:24.658591 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000-0xbfffffff] hotplug Sep 10 01:08:24.658597 kernel: NUMA: Node 0 [mem 0x00000000-0x0009ffff] + [mem 0x00100000-0x7fffffff] -> [mem 0x00000000-0x7fffffff] Sep 10 01:08:24.658603 kernel: NODE_DATA(0) allocated [mem 0x7fffa000-0x7fffffff] Sep 10 01:08:24.658608 kernel: Zone ranges: Sep 10 01:08:24.658614 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Sep 10 01:08:24.658619 kernel: DMA32 [mem 0x0000000001000000-0x000000007fffffff] Sep 10 01:08:24.658625 kernel: Normal empty Sep 10 01:08:24.658630 kernel: Movable zone start for each node Sep 10 01:08:24.658635 kernel: Early memory node ranges Sep 10 01:08:24.658640 kernel: node 0: [mem 0x0000000000001000-0x000000000009dfff] Sep 10 01:08:24.658646 kernel: node 0: [mem 0x0000000000100000-0x000000007fedffff] Sep 10 01:08:24.658652 kernel: node 0: [mem 0x000000007ff00000-0x000000007fffffff] Sep 10 01:08:24.658657 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007fffffff] Sep 10 01:08:24.658663 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Sep 10 01:08:24.658668 kernel: On node 0, zone DMA: 98 pages in unavailable ranges Sep 10 01:08:24.658673 kernel: On node 0, zone DMA32: 32 pages in unavailable ranges Sep 10 01:08:24.658678 kernel: ACPI: PM-Timer IO Port: 0x1008 Sep 10 01:08:24.658684 kernel: system APIC only can use physical flat Sep 10 01:08:24.658689 kernel: ACPI: LAPIC_NMI (acpi_id[0x00] high edge lint[0x1]) Sep 10 01:08:24.658694 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] high edge lint[0x1]) Sep 10 01:08:24.658700 kernel: ACPI: LAPIC_NMI (acpi_id[0x02] high edge lint[0x1]) Sep 10 01:08:24.658706 kernel: ACPI: LAPIC_NMI (acpi_id[0x03] high edge lint[0x1]) Sep 10 01:08:24.658711 kernel: ACPI: LAPIC_NMI (acpi_id[0x04] high edge lint[0x1]) Sep 10 01:08:24.658716 kernel: ACPI: LAPIC_NMI (acpi_id[0x05] high edge lint[0x1]) Sep 10 01:08:24.658722 kernel: ACPI: LAPIC_NMI (acpi_id[0x06] high edge lint[0x1]) Sep 10 01:08:24.658727 kernel: ACPI: LAPIC_NMI (acpi_id[0x07] high edge lint[0x1]) Sep 10 01:08:24.658732 kernel: ACPI: LAPIC_NMI (acpi_id[0x08] high edge lint[0x1]) Sep 10 01:08:24.658737 kernel: ACPI: LAPIC_NMI (acpi_id[0x09] high edge lint[0x1]) Sep 10 01:08:24.658743 kernel: ACPI: LAPIC_NMI (acpi_id[0x0a] high edge lint[0x1]) Sep 10 01:08:24.658748 kernel: ACPI: LAPIC_NMI (acpi_id[0x0b] high edge lint[0x1]) Sep 10 01:08:24.658754 kernel: ACPI: LAPIC_NMI (acpi_id[0x0c] high edge lint[0x1]) Sep 10 01:08:24.658759 kernel: ACPI: LAPIC_NMI (acpi_id[0x0d] high edge lint[0x1]) Sep 10 01:08:24.658764 kernel: ACPI: LAPIC_NMI (acpi_id[0x0e] high edge lint[0x1]) Sep 10 01:08:24.658770 kernel: ACPI: LAPIC_NMI (acpi_id[0x0f] high edge lint[0x1]) Sep 10 01:08:24.658775 kernel: ACPI: LAPIC_NMI (acpi_id[0x10] high edge lint[0x1]) Sep 10 01:08:24.658780 kernel: ACPI: LAPIC_NMI (acpi_id[0x11] high edge lint[0x1]) Sep 10 01:08:24.658785 kernel: ACPI: LAPIC_NMI (acpi_id[0x12] high edge lint[0x1]) Sep 10 01:08:24.658791 kernel: ACPI: LAPIC_NMI (acpi_id[0x13] high edge lint[0x1]) Sep 10 01:08:24.658796 kernel: ACPI: LAPIC_NMI (acpi_id[0x14] high edge lint[0x1]) Sep 10 01:08:24.658802 kernel: ACPI: LAPIC_NMI (acpi_id[0x15] high edge lint[0x1]) Sep 10 01:08:24.658807 kernel: ACPI: LAPIC_NMI (acpi_id[0x16] high edge lint[0x1]) Sep 10 01:08:24.658812 kernel: ACPI: LAPIC_NMI (acpi_id[0x17] high edge lint[0x1]) Sep 10 01:08:24.658818 kernel: ACPI: LAPIC_NMI (acpi_id[0x18] high edge lint[0x1]) Sep 10 01:08:24.658823 kernel: ACPI: LAPIC_NMI (acpi_id[0x19] high edge lint[0x1]) Sep 10 01:08:24.658828 kernel: ACPI: LAPIC_NMI (acpi_id[0x1a] high edge lint[0x1]) Sep 10 01:08:24.658833 kernel: ACPI: LAPIC_NMI (acpi_id[0x1b] high edge lint[0x1]) Sep 10 01:08:24.658839 kernel: ACPI: LAPIC_NMI (acpi_id[0x1c] high edge lint[0x1]) Sep 10 01:08:24.658844 kernel: ACPI: LAPIC_NMI (acpi_id[0x1d] high edge lint[0x1]) Sep 10 01:08:24.658849 kernel: ACPI: LAPIC_NMI (acpi_id[0x1e] high edge lint[0x1]) Sep 10 01:08:24.658855 kernel: ACPI: LAPIC_NMI (acpi_id[0x1f] high edge lint[0x1]) Sep 10 01:08:24.658861 kernel: ACPI: LAPIC_NMI (acpi_id[0x20] high edge lint[0x1]) Sep 10 01:08:24.658866 kernel: ACPI: LAPIC_NMI (acpi_id[0x21] high edge lint[0x1]) Sep 10 01:08:24.658871 kernel: ACPI: LAPIC_NMI (acpi_id[0x22] high edge lint[0x1]) Sep 10 01:08:24.658877 kernel: ACPI: LAPIC_NMI (acpi_id[0x23] high edge lint[0x1]) Sep 10 01:08:24.658882 kernel: ACPI: LAPIC_NMI (acpi_id[0x24] high edge lint[0x1]) Sep 10 01:08:24.658887 kernel: ACPI: LAPIC_NMI (acpi_id[0x25] high edge lint[0x1]) Sep 10 01:08:24.658892 kernel: ACPI: LAPIC_NMI (acpi_id[0x26] high edge lint[0x1]) Sep 10 01:08:24.658897 kernel: ACPI: LAPIC_NMI (acpi_id[0x27] high edge lint[0x1]) Sep 10 01:08:24.658904 kernel: ACPI: LAPIC_NMI (acpi_id[0x28] high edge lint[0x1]) Sep 10 01:08:24.658909 kernel: ACPI: LAPIC_NMI (acpi_id[0x29] high edge lint[0x1]) Sep 10 01:08:24.658914 kernel: ACPI: LAPIC_NMI (acpi_id[0x2a] high edge lint[0x1]) Sep 10 01:08:24.658919 kernel: ACPI: LAPIC_NMI (acpi_id[0x2b] high edge lint[0x1]) Sep 10 01:08:24.658924 kernel: ACPI: LAPIC_NMI (acpi_id[0x2c] high edge lint[0x1]) Sep 10 01:08:24.658930 kernel: ACPI: LAPIC_NMI (acpi_id[0x2d] high edge lint[0x1]) Sep 10 01:08:24.658935 kernel: ACPI: LAPIC_NMI (acpi_id[0x2e] high edge lint[0x1]) Sep 10 01:08:24.658940 kernel: ACPI: LAPIC_NMI (acpi_id[0x2f] high edge lint[0x1]) Sep 10 01:08:24.658946 kernel: ACPI: LAPIC_NMI (acpi_id[0x30] high edge lint[0x1]) Sep 10 01:08:24.658952 kernel: ACPI: LAPIC_NMI (acpi_id[0x31] high edge lint[0x1]) Sep 10 01:08:24.658963 kernel: ACPI: LAPIC_NMI (acpi_id[0x32] high edge lint[0x1]) Sep 10 01:08:24.658969 kernel: ACPI: LAPIC_NMI (acpi_id[0x33] high edge lint[0x1]) Sep 10 01:08:24.658974 kernel: ACPI: LAPIC_NMI (acpi_id[0x34] high edge lint[0x1]) Sep 10 01:08:24.658987 kernel: ACPI: LAPIC_NMI (acpi_id[0x35] high edge lint[0x1]) Sep 10 01:08:24.658992 kernel: ACPI: LAPIC_NMI (acpi_id[0x36] high edge lint[0x1]) Sep 10 01:08:24.658998 kernel: ACPI: LAPIC_NMI (acpi_id[0x37] high edge lint[0x1]) Sep 10 01:08:24.659003 kernel: ACPI: LAPIC_NMI (acpi_id[0x38] high edge lint[0x1]) Sep 10 01:08:24.659010 kernel: ACPI: LAPIC_NMI (acpi_id[0x39] high edge lint[0x1]) Sep 10 01:08:24.659017 kernel: ACPI: LAPIC_NMI (acpi_id[0x3a] high edge lint[0x1]) Sep 10 01:08:24.659022 kernel: ACPI: LAPIC_NMI (acpi_id[0x3b] high edge lint[0x1]) Sep 10 01:08:24.659027 kernel: ACPI: LAPIC_NMI (acpi_id[0x3c] high edge lint[0x1]) Sep 10 01:08:24.659033 kernel: ACPI: LAPIC_NMI (acpi_id[0x3d] high edge lint[0x1]) Sep 10 01:08:24.659038 kernel: ACPI: LAPIC_NMI (acpi_id[0x3e] high edge lint[0x1]) Sep 10 01:08:24.659043 kernel: ACPI: LAPIC_NMI (acpi_id[0x3f] high edge lint[0x1]) Sep 10 01:08:24.659048 kernel: ACPI: LAPIC_NMI (acpi_id[0x40] high edge lint[0x1]) Sep 10 01:08:24.659053 kernel: ACPI: LAPIC_NMI (acpi_id[0x41] high edge lint[0x1]) Sep 10 01:08:24.659059 kernel: ACPI: LAPIC_NMI (acpi_id[0x42] high edge lint[0x1]) Sep 10 01:08:24.659064 kernel: ACPI: LAPIC_NMI (acpi_id[0x43] high edge lint[0x1]) Sep 10 01:08:24.659070 kernel: ACPI: LAPIC_NMI (acpi_id[0x44] high edge lint[0x1]) Sep 10 01:08:24.659076 kernel: ACPI: LAPIC_NMI (acpi_id[0x45] high edge lint[0x1]) Sep 10 01:08:24.659081 kernel: ACPI: LAPIC_NMI (acpi_id[0x46] high edge lint[0x1]) Sep 10 01:08:24.659086 kernel: ACPI: LAPIC_NMI (acpi_id[0x47] high edge lint[0x1]) Sep 10 01:08:24.659091 kernel: ACPI: LAPIC_NMI (acpi_id[0x48] high edge lint[0x1]) Sep 10 01:08:24.659097 kernel: ACPI: LAPIC_NMI (acpi_id[0x49] high edge lint[0x1]) Sep 10 01:08:24.659102 kernel: ACPI: LAPIC_NMI (acpi_id[0x4a] high edge lint[0x1]) Sep 10 01:08:24.659107 kernel: ACPI: LAPIC_NMI (acpi_id[0x4b] high edge lint[0x1]) Sep 10 01:08:24.659112 kernel: ACPI: LAPIC_NMI (acpi_id[0x4c] high edge lint[0x1]) Sep 10 01:08:24.659119 kernel: ACPI: LAPIC_NMI (acpi_id[0x4d] high edge lint[0x1]) Sep 10 01:08:24.659124 kernel: ACPI: LAPIC_NMI (acpi_id[0x4e] high edge lint[0x1]) Sep 10 01:08:24.659129 kernel: ACPI: LAPIC_NMI (acpi_id[0x4f] high edge lint[0x1]) Sep 10 01:08:24.659135 kernel: ACPI: LAPIC_NMI (acpi_id[0x50] high edge lint[0x1]) Sep 10 01:08:24.659140 kernel: ACPI: LAPIC_NMI (acpi_id[0x51] high edge lint[0x1]) Sep 10 01:08:24.659148 kernel: ACPI: LAPIC_NMI (acpi_id[0x52] high edge lint[0x1]) Sep 10 01:08:24.659153 kernel: ACPI: LAPIC_NMI (acpi_id[0x53] high edge lint[0x1]) Sep 10 01:08:24.659159 kernel: ACPI: LAPIC_NMI (acpi_id[0x54] high edge lint[0x1]) Sep 10 01:08:24.659164 kernel: ACPI: LAPIC_NMI (acpi_id[0x55] high edge lint[0x1]) Sep 10 01:08:24.659170 kernel: ACPI: LAPIC_NMI (acpi_id[0x56] high edge lint[0x1]) Sep 10 01:08:24.659175 kernel: ACPI: LAPIC_NMI (acpi_id[0x57] high edge lint[0x1]) Sep 10 01:08:24.659181 kernel: ACPI: LAPIC_NMI (acpi_id[0x58] high edge lint[0x1]) Sep 10 01:08:24.659186 kernel: ACPI: LAPIC_NMI (acpi_id[0x59] high edge lint[0x1]) Sep 10 01:08:24.659191 kernel: ACPI: LAPIC_NMI (acpi_id[0x5a] high edge lint[0x1]) Sep 10 01:08:24.659196 kernel: ACPI: LAPIC_NMI (acpi_id[0x5b] high edge lint[0x1]) Sep 10 01:08:24.659202 kernel: ACPI: LAPIC_NMI (acpi_id[0x5c] high edge lint[0x1]) Sep 10 01:08:24.659207 kernel: ACPI: LAPIC_NMI (acpi_id[0x5d] high edge lint[0x1]) Sep 10 01:08:24.659212 kernel: ACPI: LAPIC_NMI (acpi_id[0x5e] high edge lint[0x1]) Sep 10 01:08:24.660237 kernel: ACPI: LAPIC_NMI (acpi_id[0x5f] high edge lint[0x1]) Sep 10 01:08:24.660247 kernel: ACPI: LAPIC_NMI (acpi_id[0x60] high edge lint[0x1]) Sep 10 01:08:24.660253 kernel: ACPI: LAPIC_NMI (acpi_id[0x61] high edge lint[0x1]) Sep 10 01:08:24.660258 kernel: ACPI: LAPIC_NMI (acpi_id[0x62] high edge lint[0x1]) Sep 10 01:08:24.660263 kernel: ACPI: LAPIC_NMI (acpi_id[0x63] high edge lint[0x1]) Sep 10 01:08:24.660268 kernel: ACPI: LAPIC_NMI (acpi_id[0x64] high edge lint[0x1]) Sep 10 01:08:24.660274 kernel: ACPI: LAPIC_NMI (acpi_id[0x65] high edge lint[0x1]) Sep 10 01:08:24.660279 kernel: ACPI: LAPIC_NMI (acpi_id[0x66] high edge lint[0x1]) Sep 10 01:08:24.660284 kernel: ACPI: LAPIC_NMI (acpi_id[0x67] high edge lint[0x1]) Sep 10 01:08:24.660289 kernel: ACPI: LAPIC_NMI (acpi_id[0x68] high edge lint[0x1]) Sep 10 01:08:24.660295 kernel: ACPI: LAPIC_NMI (acpi_id[0x69] high edge lint[0x1]) Sep 10 01:08:24.660300 kernel: ACPI: LAPIC_NMI (acpi_id[0x6a] high edge lint[0x1]) Sep 10 01:08:24.660306 kernel: ACPI: LAPIC_NMI (acpi_id[0x6b] high edge lint[0x1]) Sep 10 01:08:24.660311 kernel: ACPI: LAPIC_NMI (acpi_id[0x6c] high edge lint[0x1]) Sep 10 01:08:24.660316 kernel: ACPI: LAPIC_NMI (acpi_id[0x6d] high edge lint[0x1]) Sep 10 01:08:24.660321 kernel: ACPI: LAPIC_NMI (acpi_id[0x6e] high edge lint[0x1]) Sep 10 01:08:24.660326 kernel: ACPI: LAPIC_NMI (acpi_id[0x6f] high edge lint[0x1]) Sep 10 01:08:24.660332 kernel: ACPI: LAPIC_NMI (acpi_id[0x70] high edge lint[0x1]) Sep 10 01:08:24.660337 kernel: ACPI: LAPIC_NMI (acpi_id[0x71] high edge lint[0x1]) Sep 10 01:08:24.660343 kernel: ACPI: LAPIC_NMI (acpi_id[0x72] high edge lint[0x1]) Sep 10 01:08:24.660348 kernel: ACPI: LAPIC_NMI (acpi_id[0x73] high edge lint[0x1]) Sep 10 01:08:24.660353 kernel: ACPI: LAPIC_NMI (acpi_id[0x74] high edge lint[0x1]) Sep 10 01:08:24.660358 kernel: ACPI: LAPIC_NMI (acpi_id[0x75] high edge lint[0x1]) Sep 10 01:08:24.660363 kernel: ACPI: LAPIC_NMI (acpi_id[0x76] high edge lint[0x1]) Sep 10 01:08:24.660368 kernel: ACPI: LAPIC_NMI (acpi_id[0x77] high edge lint[0x1]) Sep 10 01:08:24.660373 kernel: ACPI: LAPIC_NMI (acpi_id[0x78] high edge lint[0x1]) Sep 10 01:08:24.660378 kernel: ACPI: LAPIC_NMI (acpi_id[0x79] high edge lint[0x1]) Sep 10 01:08:24.660383 kernel: ACPI: LAPIC_NMI (acpi_id[0x7a] high edge lint[0x1]) Sep 10 01:08:24.660389 kernel: ACPI: LAPIC_NMI (acpi_id[0x7b] high edge lint[0x1]) Sep 10 01:08:24.660395 kernel: ACPI: LAPIC_NMI (acpi_id[0x7c] high edge lint[0x1]) Sep 10 01:08:24.660400 kernel: ACPI: LAPIC_NMI (acpi_id[0x7d] high edge lint[0x1]) Sep 10 01:08:24.660405 kernel: ACPI: LAPIC_NMI (acpi_id[0x7e] high edge lint[0x1]) Sep 10 01:08:24.660410 kernel: ACPI: LAPIC_NMI (acpi_id[0x7f] high edge lint[0x1]) Sep 10 01:08:24.660416 kernel: IOAPIC[0]: apic_id 1, version 17, address 0xfec00000, GSI 0-23 Sep 10 01:08:24.660421 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 high edge) Sep 10 01:08:24.660426 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Sep 10 01:08:24.660432 kernel: ACPI: HPET id: 0x8086af01 base: 0xfed00000 Sep 10 01:08:24.660437 kernel: TSC deadline timer available Sep 10 01:08:24.660443 kernel: smpboot: Allowing 128 CPUs, 126 hotplug CPUs Sep 10 01:08:24.660449 kernel: [mem 0x80000000-0xefffffff] available for PCI devices Sep 10 01:08:24.660454 kernel: Booting paravirtualized kernel on VMware hypervisor Sep 10 01:08:24.660459 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Sep 10 01:08:24.660464 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:128 nr_node_ids:1 Sep 10 01:08:24.660470 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u262144 Sep 10 01:08:24.660475 kernel: pcpu-alloc: s188696 r8192 d32488 u262144 alloc=1*2097152 Sep 10 01:08:24.660480 kernel: pcpu-alloc: [0] 000 001 002 003 004 005 006 007 Sep 10 01:08:24.660485 kernel: pcpu-alloc: [0] 008 009 010 011 012 013 014 015 Sep 10 01:08:24.660492 kernel: pcpu-alloc: [0] 016 017 018 019 020 021 022 023 Sep 10 01:08:24.660497 kernel: pcpu-alloc: [0] 024 025 026 027 028 029 030 031 Sep 10 01:08:24.660502 kernel: pcpu-alloc: [0] 032 033 034 035 036 037 038 039 Sep 10 01:08:24.660507 kernel: pcpu-alloc: [0] 040 041 042 043 044 045 046 047 Sep 10 01:08:24.660512 kernel: pcpu-alloc: [0] 048 049 050 051 052 053 054 055 Sep 10 01:08:24.660523 kernel: pcpu-alloc: [0] 056 057 058 059 060 061 062 063 Sep 10 01:08:24.660530 kernel: pcpu-alloc: [0] 064 065 066 067 068 069 070 071 Sep 10 01:08:24.660535 kernel: pcpu-alloc: [0] 072 073 074 075 076 077 078 079 Sep 10 01:08:24.660542 kernel: pcpu-alloc: [0] 080 081 082 083 084 085 086 087 Sep 10 01:08:24.660547 kernel: pcpu-alloc: [0] 088 089 090 091 092 093 094 095 Sep 10 01:08:24.660553 kernel: pcpu-alloc: [0] 096 097 098 099 100 101 102 103 Sep 10 01:08:24.660559 kernel: pcpu-alloc: [0] 104 105 106 107 108 109 110 111 Sep 10 01:08:24.660564 kernel: pcpu-alloc: [0] 112 113 114 115 116 117 118 119 Sep 10 01:08:24.660569 kernel: pcpu-alloc: [0] 120 121 122 123 124 125 126 127 Sep 10 01:08:24.660575 kernel: Built 1 zonelists, mobility grouping on. Total pages: 515808 Sep 10 01:08:24.660580 kernel: Policy zone: DMA32 Sep 10 01:08:24.660587 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=ebdf135b7dd8c9596dea7f2ca48bf31be0143f7cba32a9cc0282a66ca6db3272 Sep 10 01:08:24.660594 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Sep 10 01:08:24.660599 kernel: printk: log_buf_len individual max cpu contribution: 4096 bytes Sep 10 01:08:24.660605 kernel: printk: log_buf_len total cpu_extra contributions: 520192 bytes Sep 10 01:08:24.660610 kernel: printk: log_buf_len min size: 262144 bytes Sep 10 01:08:24.660616 kernel: printk: log_buf_len: 1048576 bytes Sep 10 01:08:24.660621 kernel: printk: early log buf free: 239728(91%) Sep 10 01:08:24.660627 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Sep 10 01:08:24.660633 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Sep 10 01:08:24.660638 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Sep 10 01:08:24.660645 kernel: Memory: 1940392K/2096628K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47492K init, 4088K bss, 155976K reserved, 0K cma-reserved) Sep 10 01:08:24.660650 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=128, Nodes=1 Sep 10 01:08:24.660656 kernel: ftrace: allocating 34612 entries in 136 pages Sep 10 01:08:24.660662 kernel: ftrace: allocated 136 pages with 2 groups Sep 10 01:08:24.660668 kernel: rcu: Hierarchical RCU implementation. Sep 10 01:08:24.660675 kernel: rcu: RCU event tracing is enabled. Sep 10 01:08:24.660681 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=128. Sep 10 01:08:24.660686 kernel: Rude variant of Tasks RCU enabled. Sep 10 01:08:24.660692 kernel: Tracing variant of Tasks RCU enabled. Sep 10 01:08:24.660698 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Sep 10 01:08:24.660703 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=128 Sep 10 01:08:24.660709 kernel: NR_IRQS: 33024, nr_irqs: 1448, preallocated irqs: 16 Sep 10 01:08:24.660714 kernel: random: crng init done Sep 10 01:08:24.660720 kernel: Console: colour VGA+ 80x25 Sep 10 01:08:24.660726 kernel: printk: console [tty0] enabled Sep 10 01:08:24.660732 kernel: printk: console [ttyS0] enabled Sep 10 01:08:24.660738 kernel: ACPI: Core revision 20210730 Sep 10 01:08:24.660743 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 133484882848 ns Sep 10 01:08:24.660749 kernel: APIC: Switch to symmetric I/O mode setup Sep 10 01:08:24.660755 kernel: x2apic enabled Sep 10 01:08:24.660760 kernel: Switched APIC routing to physical x2apic. Sep 10 01:08:24.660766 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Sep 10 01:08:24.660771 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x311fd3cd494, max_idle_ns: 440795223879 ns Sep 10 01:08:24.660778 kernel: Calibrating delay loop (skipped) preset value.. 6816.00 BogoMIPS (lpj=3408000) Sep 10 01:08:24.660784 kernel: Disabled fast string operations Sep 10 01:08:24.660790 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Sep 10 01:08:24.660795 kernel: Last level dTLB entries: 4KB 64, 2MB 32, 4MB 32, 1GB 4 Sep 10 01:08:24.660801 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Sep 10 01:08:24.660806 kernel: Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! Sep 10 01:08:24.660812 kernel: Spectre V2 : Spectre BHI mitigation: SW BHB clearing on vm exit Sep 10 01:08:24.660818 kernel: Spectre V2 : Spectre BHI mitigation: SW BHB clearing on syscall Sep 10 01:08:24.660823 kernel: Spectre V2 : Mitigation: Enhanced / Automatic IBRS Sep 10 01:08:24.660830 kernel: Spectre V2 : Spectre v2 / PBRSB-eIBRS: Retire a single CALL on VMEXIT Sep 10 01:08:24.660836 kernel: RETBleed: Mitigation: Enhanced IBRS Sep 10 01:08:24.660841 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Sep 10 01:08:24.660847 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Sep 10 01:08:24.660853 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Sep 10 01:08:24.660858 kernel: SRBDS: Unknown: Dependent on hypervisor status Sep 10 01:08:24.660863 kernel: GDS: Unknown: Dependent on hypervisor status Sep 10 01:08:24.660869 kernel: active return thunk: its_return_thunk Sep 10 01:08:24.660875 kernel: ITS: Mitigation: Aligned branch/return thunks Sep 10 01:08:24.660881 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Sep 10 01:08:24.660887 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Sep 10 01:08:24.660892 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Sep 10 01:08:24.660899 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Sep 10 01:08:24.660904 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'compacted' format. Sep 10 01:08:24.660910 kernel: Freeing SMP alternatives memory: 32K Sep 10 01:08:24.660915 kernel: pid_max: default: 131072 minimum: 1024 Sep 10 01:08:24.660921 kernel: LSM: Security Framework initializing Sep 10 01:08:24.660926 kernel: SELinux: Initializing. Sep 10 01:08:24.660933 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Sep 10 01:08:24.660939 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Sep 10 01:08:24.660945 kernel: smpboot: CPU0: Intel(R) Xeon(R) E-2278G CPU @ 3.40GHz (family: 0x6, model: 0x9e, stepping: 0xd) Sep 10 01:08:24.660950 kernel: Performance Events: Skylake events, core PMU driver. Sep 10 01:08:24.660956 kernel: core: CPUID marked event: 'cpu cycles' unavailable Sep 10 01:08:24.660961 kernel: core: CPUID marked event: 'instructions' unavailable Sep 10 01:08:24.660967 kernel: core: CPUID marked event: 'bus cycles' unavailable Sep 10 01:08:24.660973 kernel: core: CPUID marked event: 'cache references' unavailable Sep 10 01:08:24.660978 kernel: core: CPUID marked event: 'cache misses' unavailable Sep 10 01:08:24.660984 kernel: core: CPUID marked event: 'branch instructions' unavailable Sep 10 01:08:24.660990 kernel: core: CPUID marked event: 'branch misses' unavailable Sep 10 01:08:24.660995 kernel: ... version: 1 Sep 10 01:08:24.661000 kernel: ... bit width: 48 Sep 10 01:08:24.661006 kernel: ... generic registers: 4 Sep 10 01:08:24.661012 kernel: ... value mask: 0000ffffffffffff Sep 10 01:08:24.661017 kernel: ... max period: 000000007fffffff Sep 10 01:08:24.661023 kernel: ... fixed-purpose events: 0 Sep 10 01:08:24.661028 kernel: ... event mask: 000000000000000f Sep 10 01:08:24.661035 kernel: signal: max sigframe size: 1776 Sep 10 01:08:24.661040 kernel: rcu: Hierarchical SRCU implementation. Sep 10 01:08:24.661046 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Sep 10 01:08:24.661051 kernel: smp: Bringing up secondary CPUs ... Sep 10 01:08:24.661057 kernel: x86: Booting SMP configuration: Sep 10 01:08:24.661062 kernel: .... node #0, CPUs: #1 Sep 10 01:08:24.661068 kernel: Disabled fast string operations Sep 10 01:08:24.661073 kernel: smpboot: CPU 1 Converting physical 2 to logical package 1 Sep 10 01:08:24.661079 kernel: smpboot: CPU 1 Converting physical 0 to logical die 1 Sep 10 01:08:24.661085 kernel: smp: Brought up 1 node, 2 CPUs Sep 10 01:08:24.661090 kernel: smpboot: Max logical packages: 128 Sep 10 01:08:24.661096 kernel: smpboot: Total of 2 processors activated (13632.00 BogoMIPS) Sep 10 01:08:24.661101 kernel: devtmpfs: initialized Sep 10 01:08:24.661107 kernel: x86/mm: Memory block size: 128MB Sep 10 01:08:24.661113 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x7feff000-0x7fefffff] (4096 bytes) Sep 10 01:08:24.661119 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Sep 10 01:08:24.661124 kernel: futex hash table entries: 32768 (order: 9, 2097152 bytes, linear) Sep 10 01:08:24.661130 kernel: pinctrl core: initialized pinctrl subsystem Sep 10 01:08:24.661137 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Sep 10 01:08:24.661163 kernel: audit: initializing netlink subsys (disabled) Sep 10 01:08:24.661169 kernel: audit: type=2000 audit(1757466502.086:1): state=initialized audit_enabled=0 res=1 Sep 10 01:08:24.661175 kernel: thermal_sys: Registered thermal governor 'step_wise' Sep 10 01:08:24.661180 kernel: thermal_sys: Registered thermal governor 'user_space' Sep 10 01:08:24.661186 kernel: cpuidle: using governor menu Sep 10 01:08:24.661191 kernel: Simple Boot Flag at 0x36 set to 0x80 Sep 10 01:08:24.661212 kernel: ACPI: bus type PCI registered Sep 10 01:08:24.666301 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Sep 10 01:08:24.666316 kernel: dca service started, version 1.12.1 Sep 10 01:08:24.666326 kernel: PCI: MMCONFIG for domain 0000 [bus 00-7f] at [mem 0xf0000000-0xf7ffffff] (base 0xf0000000) Sep 10 01:08:24.666332 kernel: PCI: MMCONFIG at [mem 0xf0000000-0xf7ffffff] reserved in E820 Sep 10 01:08:24.666338 kernel: PCI: Using configuration type 1 for base access Sep 10 01:08:24.666344 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Sep 10 01:08:24.666349 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Sep 10 01:08:24.666355 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Sep 10 01:08:24.666361 kernel: ACPI: Added _OSI(Module Device) Sep 10 01:08:24.666367 kernel: ACPI: Added _OSI(Processor Device) Sep 10 01:08:24.666374 kernel: ACPI: Added _OSI(Processor Aggregator Device) Sep 10 01:08:24.666380 kernel: ACPI: Added _OSI(Linux-Dell-Video) Sep 10 01:08:24.666385 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Sep 10 01:08:24.666391 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Sep 10 01:08:24.666397 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Sep 10 01:08:24.666403 kernel: ACPI: [Firmware Bug]: BIOS _OSI(Linux) query ignored Sep 10 01:08:24.666409 kernel: ACPI: Interpreter enabled Sep 10 01:08:24.666416 kernel: ACPI: PM: (supports S0 S1 S5) Sep 10 01:08:24.666422 kernel: ACPI: Using IOAPIC for interrupt routing Sep 10 01:08:24.666428 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Sep 10 01:08:24.666434 kernel: ACPI: Enabled 4 GPEs in block 00 to 0F Sep 10 01:08:24.666440 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-7f]) Sep 10 01:08:24.666532 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Sep 10 01:08:24.666584 kernel: acpi PNP0A03:00: _OSC: platform does not support [AER LTR] Sep 10 01:08:24.666631 kernel: acpi PNP0A03:00: _OSC: OS now controls [PCIeHotplug PME PCIeCapability] Sep 10 01:08:24.666640 kernel: PCI host bridge to bus 0000:00 Sep 10 01:08:24.666689 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Sep 10 01:08:24.666735 kernel: pci_bus 0000:00: root bus resource [mem 0x000cc000-0x000dbfff window] Sep 10 01:08:24.666777 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Sep 10 01:08:24.666820 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Sep 10 01:08:24.666861 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xfeff window] Sep 10 01:08:24.666903 kernel: pci_bus 0000:00: root bus resource [bus 00-7f] Sep 10 01:08:24.666962 kernel: pci 0000:00:00.0: [8086:7190] type 00 class 0x060000 Sep 10 01:08:24.667020 kernel: pci 0000:00:01.0: [8086:7191] type 01 class 0x060400 Sep 10 01:08:24.667074 kernel: pci 0000:00:07.0: [8086:7110] type 00 class 0x060100 Sep 10 01:08:24.667126 kernel: pci 0000:00:07.1: [8086:7111] type 00 class 0x01018a Sep 10 01:08:24.667174 kernel: pci 0000:00:07.1: reg 0x20: [io 0x1060-0x106f] Sep 10 01:08:24.667239 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Sep 10 01:08:24.667291 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Sep 10 01:08:24.667342 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Sep 10 01:08:24.667391 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Sep 10 01:08:24.667443 kernel: pci 0000:00:07.3: [8086:7113] type 00 class 0x068000 Sep 10 01:08:24.667492 kernel: pci 0000:00:07.3: quirk: [io 0x1000-0x103f] claimed by PIIX4 ACPI Sep 10 01:08:24.667541 kernel: pci 0000:00:07.3: quirk: [io 0x1040-0x104f] claimed by PIIX4 SMB Sep 10 01:08:24.667592 kernel: pci 0000:00:07.7: [15ad:0740] type 00 class 0x088000 Sep 10 01:08:24.667641 kernel: pci 0000:00:07.7: reg 0x10: [io 0x1080-0x10bf] Sep 10 01:08:24.667691 kernel: pci 0000:00:07.7: reg 0x14: [mem 0xfebfe000-0xfebfffff 64bit] Sep 10 01:08:24.667743 kernel: pci 0000:00:0f.0: [15ad:0405] type 00 class 0x030000 Sep 10 01:08:24.667791 kernel: pci 0000:00:0f.0: reg 0x10: [io 0x1070-0x107f] Sep 10 01:08:24.667839 kernel: pci 0000:00:0f.0: reg 0x14: [mem 0xe8000000-0xefffffff pref] Sep 10 01:08:24.667886 kernel: pci 0000:00:0f.0: reg 0x18: [mem 0xfe000000-0xfe7fffff] Sep 10 01:08:24.667933 kernel: pci 0000:00:0f.0: reg 0x30: [mem 0x00000000-0x00007fff pref] Sep 10 01:08:24.667980 kernel: pci 0000:00:0f.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Sep 10 01:08:24.668034 kernel: pci 0000:00:11.0: [15ad:0790] type 01 class 0x060401 Sep 10 01:08:24.668087 kernel: pci 0000:00:15.0: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.668136 kernel: pci 0000:00:15.0: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.668197 kernel: pci 0000:00:15.1: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.668262 kernel: pci 0000:00:15.1: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.668316 kernel: pci 0000:00:15.2: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.668367 kernel: pci 0000:00:15.2: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.668420 kernel: pci 0000:00:15.3: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.668468 kernel: pci 0000:00:15.3: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.668521 kernel: pci 0000:00:15.4: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.668569 kernel: pci 0000:00:15.4: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.668621 kernel: pci 0000:00:15.5: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.668673 kernel: pci 0000:00:15.5: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.668724 kernel: pci 0000:00:15.6: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.668773 kernel: pci 0000:00:15.6: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.668826 kernel: pci 0000:00:15.7: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.668876 kernel: pci 0000:00:15.7: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.668927 kernel: pci 0000:00:16.0: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.668978 kernel: pci 0000:00:16.0: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.669032 kernel: pci 0000:00:16.1: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.669081 kernel: pci 0000:00:16.1: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.669131 kernel: pci 0000:00:16.2: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.669180 kernel: pci 0000:00:16.2: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.672305 kernel: pci 0000:00:16.3: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.672368 kernel: pci 0000:00:16.3: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.672423 kernel: pci 0000:00:16.4: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.672473 kernel: pci 0000:00:16.4: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.672526 kernel: pci 0000:00:16.5: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.672575 kernel: pci 0000:00:16.5: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.672627 kernel: pci 0000:00:16.6: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.672678 kernel: pci 0000:00:16.6: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.672730 kernel: pci 0000:00:16.7: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.672778 kernel: pci 0000:00:16.7: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.672830 kernel: pci 0000:00:17.0: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.672878 kernel: pci 0000:00:17.0: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.672931 kernel: pci 0000:00:17.1: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.672981 kernel: pci 0000:00:17.1: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.673033 kernel: pci 0000:00:17.2: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.673081 kernel: pci 0000:00:17.2: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.673133 kernel: pci 0000:00:17.3: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.673180 kernel: pci 0000:00:17.3: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.673244 kernel: pci 0000:00:17.4: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.673298 kernel: pci 0000:00:17.4: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.673349 kernel: pci 0000:00:17.5: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.673397 kernel: pci 0000:00:17.5: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.673447 kernel: pci 0000:00:17.6: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.673496 kernel: pci 0000:00:17.6: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.673547 kernel: pci 0000:00:17.7: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.673598 kernel: pci 0000:00:17.7: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.673651 kernel: pci 0000:00:18.0: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.673700 kernel: pci 0000:00:18.0: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.673751 kernel: pci 0000:00:18.1: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.673799 kernel: pci 0000:00:18.1: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.673853 kernel: pci 0000:00:18.2: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.673902 kernel: pci 0000:00:18.2: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.673955 kernel: pci 0000:00:18.3: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.674003 kernel: pci 0000:00:18.3: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.674055 kernel: pci 0000:00:18.4: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.674104 kernel: pci 0000:00:18.4: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.674155 kernel: pci 0000:00:18.5: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.674203 kernel: pci 0000:00:18.5: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.677327 kernel: pci 0000:00:18.6: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.677387 kernel: pci 0000:00:18.6: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.677443 kernel: pci 0000:00:18.7: [15ad:07a0] type 01 class 0x060400 Sep 10 01:08:24.677493 kernel: pci 0000:00:18.7: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.677544 kernel: pci_bus 0000:01: extended config space not accessible Sep 10 01:08:24.677595 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Sep 10 01:08:24.677649 kernel: pci_bus 0000:02: extended config space not accessible Sep 10 01:08:24.677658 kernel: acpiphp: Slot [32] registered Sep 10 01:08:24.677664 kernel: acpiphp: Slot [33] registered Sep 10 01:08:24.677670 kernel: acpiphp: Slot [34] registered Sep 10 01:08:24.677676 kernel: acpiphp: Slot [35] registered Sep 10 01:08:24.677682 kernel: acpiphp: Slot [36] registered Sep 10 01:08:24.677687 kernel: acpiphp: Slot [37] registered Sep 10 01:08:24.677693 kernel: acpiphp: Slot [38] registered Sep 10 01:08:24.677698 kernel: acpiphp: Slot [39] registered Sep 10 01:08:24.677706 kernel: acpiphp: Slot [40] registered Sep 10 01:08:24.677711 kernel: acpiphp: Slot [41] registered Sep 10 01:08:24.677717 kernel: acpiphp: Slot [42] registered Sep 10 01:08:24.677723 kernel: acpiphp: Slot [43] registered Sep 10 01:08:24.677729 kernel: acpiphp: Slot [44] registered Sep 10 01:08:24.677734 kernel: acpiphp: Slot [45] registered Sep 10 01:08:24.677740 kernel: acpiphp: Slot [46] registered Sep 10 01:08:24.677746 kernel: acpiphp: Slot [47] registered Sep 10 01:08:24.677752 kernel: acpiphp: Slot [48] registered Sep 10 01:08:24.677759 kernel: acpiphp: Slot [49] registered Sep 10 01:08:24.677764 kernel: acpiphp: Slot [50] registered Sep 10 01:08:24.677770 kernel: acpiphp: Slot [51] registered Sep 10 01:08:24.677775 kernel: acpiphp: Slot [52] registered Sep 10 01:08:24.677781 kernel: acpiphp: Slot [53] registered Sep 10 01:08:24.677787 kernel: acpiphp: Slot [54] registered Sep 10 01:08:24.677792 kernel: acpiphp: Slot [55] registered Sep 10 01:08:24.677798 kernel: acpiphp: Slot [56] registered Sep 10 01:08:24.677804 kernel: acpiphp: Slot [57] registered Sep 10 01:08:24.677810 kernel: acpiphp: Slot [58] registered Sep 10 01:08:24.677817 kernel: acpiphp: Slot [59] registered Sep 10 01:08:24.677822 kernel: acpiphp: Slot [60] registered Sep 10 01:08:24.677828 kernel: acpiphp: Slot [61] registered Sep 10 01:08:24.677834 kernel: acpiphp: Slot [62] registered Sep 10 01:08:24.677839 kernel: acpiphp: Slot [63] registered Sep 10 01:08:24.677888 kernel: pci 0000:00:11.0: PCI bridge to [bus 02] (subtractive decode) Sep 10 01:08:24.677951 kernel: pci 0000:00:11.0: bridge window [io 0x2000-0x3fff] Sep 10 01:08:24.677997 kernel: pci 0000:00:11.0: bridge window [mem 0xfd600000-0xfdffffff] Sep 10 01:08:24.678042 kernel: pci 0000:00:11.0: bridge window [mem 0xe7b00000-0xe7ffffff 64bit pref] Sep 10 01:08:24.678090 kernel: pci 0000:00:11.0: bridge window [mem 0x000a0000-0x000bffff window] (subtractive decode) Sep 10 01:08:24.678136 kernel: pci 0000:00:11.0: bridge window [mem 0x000cc000-0x000dbfff window] (subtractive decode) Sep 10 01:08:24.678225 kernel: pci 0000:00:11.0: bridge window [mem 0xc0000000-0xfebfffff window] (subtractive decode) Sep 10 01:08:24.678272 kernel: pci 0000:00:11.0: bridge window [io 0x0000-0x0cf7 window] (subtractive decode) Sep 10 01:08:24.678319 kernel: pci 0000:00:11.0: bridge window [io 0x0d00-0xfeff window] (subtractive decode) Sep 10 01:08:24.678374 kernel: pci 0000:03:00.0: [15ad:07c0] type 00 class 0x010700 Sep 10 01:08:24.678423 kernel: pci 0000:03:00.0: reg 0x10: [io 0x4000-0x4007] Sep 10 01:08:24.678475 kernel: pci 0000:03:00.0: reg 0x14: [mem 0xfd5f8000-0xfd5fffff 64bit] Sep 10 01:08:24.678523 kernel: pci 0000:03:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref] Sep 10 01:08:24.678570 kernel: pci 0000:03:00.0: PME# supported from D0 D3hot D3cold Sep 10 01:08:24.678617 kernel: pci 0000:03:00.0: disabling ASPM on pre-1.1 PCIe device. You can enable it with 'pcie_aspm=force' Sep 10 01:08:24.678666 kernel: pci 0000:00:15.0: PCI bridge to [bus 03] Sep 10 01:08:24.678712 kernel: pci 0000:00:15.0: bridge window [io 0x4000-0x4fff] Sep 10 01:08:24.678776 kernel: pci 0000:00:15.0: bridge window [mem 0xfd500000-0xfd5fffff] Sep 10 01:08:24.678825 kernel: pci 0000:00:15.1: PCI bridge to [bus 04] Sep 10 01:08:24.678873 kernel: pci 0000:00:15.1: bridge window [io 0x8000-0x8fff] Sep 10 01:08:24.678919 kernel: pci 0000:00:15.1: bridge window [mem 0xfd100000-0xfd1fffff] Sep 10 01:08:24.678965 kernel: pci 0000:00:15.1: bridge window [mem 0xe7800000-0xe78fffff 64bit pref] Sep 10 01:08:24.679014 kernel: pci 0000:00:15.2: PCI bridge to [bus 05] Sep 10 01:08:24.679061 kernel: pci 0000:00:15.2: bridge window [io 0xc000-0xcfff] Sep 10 01:08:24.679109 kernel: pci 0000:00:15.2: bridge window [mem 0xfcd00000-0xfcdfffff] Sep 10 01:08:24.679156 kernel: pci 0000:00:15.2: bridge window [mem 0xe7400000-0xe74fffff 64bit pref] Sep 10 01:08:24.679206 kernel: pci 0000:00:15.3: PCI bridge to [bus 06] Sep 10 01:08:24.679260 kernel: pci 0000:00:15.3: bridge window [mem 0xfc900000-0xfc9fffff] Sep 10 01:08:24.679308 kernel: pci 0000:00:15.3: bridge window [mem 0xe7000000-0xe70fffff 64bit pref] Sep 10 01:08:24.679357 kernel: pci 0000:00:15.4: PCI bridge to [bus 07] Sep 10 01:08:24.679404 kernel: pci 0000:00:15.4: bridge window [mem 0xfc500000-0xfc5fffff] Sep 10 01:08:24.679451 kernel: pci 0000:00:15.4: bridge window [mem 0xe6c00000-0xe6cfffff 64bit pref] Sep 10 01:08:24.679502 kernel: pci 0000:00:15.5: PCI bridge to [bus 08] Sep 10 01:08:24.679549 kernel: pci 0000:00:15.5: bridge window [mem 0xfc100000-0xfc1fffff] Sep 10 01:08:24.679596 kernel: pci 0000:00:15.5: bridge window [mem 0xe6800000-0xe68fffff 64bit pref] Sep 10 01:08:24.681287 kernel: pci 0000:00:15.6: PCI bridge to [bus 09] Sep 10 01:08:24.681345 kernel: pci 0000:00:15.6: bridge window [mem 0xfbd00000-0xfbdfffff] Sep 10 01:08:24.682969 kernel: pci 0000:00:15.6: bridge window [mem 0xe6400000-0xe64fffff 64bit pref] Sep 10 01:08:24.683040 kernel: pci 0000:00:15.7: PCI bridge to [bus 0a] Sep 10 01:08:24.683094 kernel: pci 0000:00:15.7: bridge window [mem 0xfb900000-0xfb9fffff] Sep 10 01:08:24.683144 kernel: pci 0000:00:15.7: bridge window [mem 0xe6000000-0xe60fffff 64bit pref] Sep 10 01:08:24.683207 kernel: pci 0000:0b:00.0: [15ad:07b0] type 00 class 0x020000 Sep 10 01:08:24.683499 kernel: pci 0000:0b:00.0: reg 0x10: [mem 0xfd4fc000-0xfd4fcfff] Sep 10 01:08:24.683555 kernel: pci 0000:0b:00.0: reg 0x14: [mem 0xfd4fd000-0xfd4fdfff] Sep 10 01:08:24.683606 kernel: pci 0000:0b:00.0: reg 0x18: [mem 0xfd4fe000-0xfd4fffff] Sep 10 01:08:24.683658 kernel: pci 0000:0b:00.0: reg 0x1c: [io 0x5000-0x500f] Sep 10 01:08:24.683707 kernel: pci 0000:0b:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref] Sep 10 01:08:24.683756 kernel: pci 0000:0b:00.0: supports D1 D2 Sep 10 01:08:24.683806 kernel: pci 0000:0b:00.0: PME# supported from D0 D1 D2 D3hot D3cold Sep 10 01:08:24.683855 kernel: pci 0000:0b:00.0: disabling ASPM on pre-1.1 PCIe device. You can enable it with 'pcie_aspm=force' Sep 10 01:08:24.683904 kernel: pci 0000:00:16.0: PCI bridge to [bus 0b] Sep 10 01:08:24.683952 kernel: pci 0000:00:16.0: bridge window [io 0x5000-0x5fff] Sep 10 01:08:24.683999 kernel: pci 0000:00:16.0: bridge window [mem 0xfd400000-0xfd4fffff] Sep 10 01:08:24.684051 kernel: pci 0000:00:16.1: PCI bridge to [bus 0c] Sep 10 01:08:24.684099 kernel: pci 0000:00:16.1: bridge window [io 0x9000-0x9fff] Sep 10 01:08:24.684146 kernel: pci 0000:00:16.1: bridge window [mem 0xfd000000-0xfd0fffff] Sep 10 01:08:24.684193 kernel: pci 0000:00:16.1: bridge window [mem 0xe7700000-0xe77fffff 64bit pref] Sep 10 01:08:24.685241 kernel: pci 0000:00:16.2: PCI bridge to [bus 0d] Sep 10 01:08:24.685304 kernel: pci 0000:00:16.2: bridge window [io 0xd000-0xdfff] Sep 10 01:08:24.685357 kernel: pci 0000:00:16.2: bridge window [mem 0xfcc00000-0xfccfffff] Sep 10 01:08:24.685406 kernel: pci 0000:00:16.2: bridge window [mem 0xe7300000-0xe73fffff 64bit pref] Sep 10 01:08:24.685460 kernel: pci 0000:00:16.3: PCI bridge to [bus 0e] Sep 10 01:08:24.685508 kernel: pci 0000:00:16.3: bridge window [mem 0xfc800000-0xfc8fffff] Sep 10 01:08:24.685557 kernel: pci 0000:00:16.3: bridge window [mem 0xe6f00000-0xe6ffffff 64bit pref] Sep 10 01:08:24.685606 kernel: pci 0000:00:16.4: PCI bridge to [bus 0f] Sep 10 01:08:24.685653 kernel: pci 0000:00:16.4: bridge window [mem 0xfc400000-0xfc4fffff] Sep 10 01:08:24.685700 kernel: pci 0000:00:16.4: bridge window [mem 0xe6b00000-0xe6bfffff 64bit pref] Sep 10 01:08:24.685749 kernel: pci 0000:00:16.5: PCI bridge to [bus 10] Sep 10 01:08:24.685797 kernel: pci 0000:00:16.5: bridge window [mem 0xfc000000-0xfc0fffff] Sep 10 01:08:24.685847 kernel: pci 0000:00:16.5: bridge window [mem 0xe6700000-0xe67fffff 64bit pref] Sep 10 01:08:24.685896 kernel: pci 0000:00:16.6: PCI bridge to [bus 11] Sep 10 01:08:24.685944 kernel: pci 0000:00:16.6: bridge window [mem 0xfbc00000-0xfbcfffff] Sep 10 01:08:24.685991 kernel: pci 0000:00:16.6: bridge window [mem 0xe6300000-0xe63fffff 64bit pref] Sep 10 01:08:24.686040 kernel: pci 0000:00:16.7: PCI bridge to [bus 12] Sep 10 01:08:24.686087 kernel: pci 0000:00:16.7: bridge window [mem 0xfb800000-0xfb8fffff] Sep 10 01:08:24.686135 kernel: pci 0000:00:16.7: bridge window [mem 0xe5f00000-0xe5ffffff 64bit pref] Sep 10 01:08:24.686182 kernel: pci 0000:00:17.0: PCI bridge to [bus 13] Sep 10 01:08:24.686240 kernel: pci 0000:00:17.0: bridge window [io 0x6000-0x6fff] Sep 10 01:08:24.686288 kernel: pci 0000:00:17.0: bridge window [mem 0xfd300000-0xfd3fffff] Sep 10 01:08:24.686335 kernel: pci 0000:00:17.0: bridge window [mem 0xe7a00000-0xe7afffff 64bit pref] Sep 10 01:08:24.686384 kernel: pci 0000:00:17.1: PCI bridge to [bus 14] Sep 10 01:08:24.686431 kernel: pci 0000:00:17.1: bridge window [io 0xa000-0xafff] Sep 10 01:08:24.686491 kernel: pci 0000:00:17.1: bridge window [mem 0xfcf00000-0xfcffffff] Sep 10 01:08:24.686542 kernel: pci 0000:00:17.1: bridge window [mem 0xe7600000-0xe76fffff 64bit pref] Sep 10 01:08:24.686593 kernel: pci 0000:00:17.2: PCI bridge to [bus 15] Sep 10 01:08:24.686641 kernel: pci 0000:00:17.2: bridge window [io 0xe000-0xefff] Sep 10 01:08:24.686689 kernel: pci 0000:00:17.2: bridge window [mem 0xfcb00000-0xfcbfffff] Sep 10 01:08:24.686737 kernel: pci 0000:00:17.2: bridge window [mem 0xe7200000-0xe72fffff 64bit pref] Sep 10 01:08:24.686786 kernel: pci 0000:00:17.3: PCI bridge to [bus 16] Sep 10 01:08:24.686834 kernel: pci 0000:00:17.3: bridge window [mem 0xfc700000-0xfc7fffff] Sep 10 01:08:24.686882 kernel: pci 0000:00:17.3: bridge window [mem 0xe6e00000-0xe6efffff 64bit pref] Sep 10 01:08:24.686931 kernel: pci 0000:00:17.4: PCI bridge to [bus 17] Sep 10 01:08:24.686980 kernel: pci 0000:00:17.4: bridge window [mem 0xfc300000-0xfc3fffff] Sep 10 01:08:24.687027 kernel: pci 0000:00:17.4: bridge window [mem 0xe6a00000-0xe6afffff 64bit pref] Sep 10 01:08:24.687076 kernel: pci 0000:00:17.5: PCI bridge to [bus 18] Sep 10 01:08:24.687124 kernel: pci 0000:00:17.5: bridge window [mem 0xfbf00000-0xfbffffff] Sep 10 01:08:24.687172 kernel: pci 0000:00:17.5: bridge window [mem 0xe6600000-0xe66fffff 64bit pref] Sep 10 01:08:24.687251 kernel: pci 0000:00:17.6: PCI bridge to [bus 19] Sep 10 01:08:24.687300 kernel: pci 0000:00:17.6: bridge window [mem 0xfbb00000-0xfbbfffff] Sep 10 01:08:24.687347 kernel: pci 0000:00:17.6: bridge window [mem 0xe6200000-0xe62fffff 64bit pref] Sep 10 01:08:24.687399 kernel: pci 0000:00:17.7: PCI bridge to [bus 1a] Sep 10 01:08:24.687461 kernel: pci 0000:00:17.7: bridge window [mem 0xfb700000-0xfb7fffff] Sep 10 01:08:24.687506 kernel: pci 0000:00:17.7: bridge window [mem 0xe5e00000-0xe5efffff 64bit pref] Sep 10 01:08:24.687553 kernel: pci 0000:00:18.0: PCI bridge to [bus 1b] Sep 10 01:08:24.687599 kernel: pci 0000:00:18.0: bridge window [io 0x7000-0x7fff] Sep 10 01:08:24.687644 kernel: pci 0000:00:18.0: bridge window [mem 0xfd200000-0xfd2fffff] Sep 10 01:08:24.687690 kernel: pci 0000:00:18.0: bridge window [mem 0xe7900000-0xe79fffff 64bit pref] Sep 10 01:08:24.687737 kernel: pci 0000:00:18.1: PCI bridge to [bus 1c] Sep 10 01:08:24.687786 kernel: pci 0000:00:18.1: bridge window [io 0xb000-0xbfff] Sep 10 01:08:24.687831 kernel: pci 0000:00:18.1: bridge window [mem 0xfce00000-0xfcefffff] Sep 10 01:08:24.687877 kernel: pci 0000:00:18.1: bridge window [mem 0xe7500000-0xe75fffff 64bit pref] Sep 10 01:08:24.687924 kernel: pci 0000:00:18.2: PCI bridge to [bus 1d] Sep 10 01:08:24.687970 kernel: pci 0000:00:18.2: bridge window [mem 0xfca00000-0xfcafffff] Sep 10 01:08:24.688017 kernel: pci 0000:00:18.2: bridge window [mem 0xe7100000-0xe71fffff 64bit pref] Sep 10 01:08:24.688064 kernel: pci 0000:00:18.3: PCI bridge to [bus 1e] Sep 10 01:08:24.688167 kernel: pci 0000:00:18.3: bridge window [mem 0xfc600000-0xfc6fffff] Sep 10 01:08:24.688237 kernel: pci 0000:00:18.3: bridge window [mem 0xe6d00000-0xe6dfffff 64bit pref] Sep 10 01:08:24.688285 kernel: pci 0000:00:18.4: PCI bridge to [bus 1f] Sep 10 01:08:24.688331 kernel: pci 0000:00:18.4: bridge window [mem 0xfc200000-0xfc2fffff] Sep 10 01:08:24.688377 kernel: pci 0000:00:18.4: bridge window [mem 0xe6900000-0xe69fffff 64bit pref] Sep 10 01:08:24.688425 kernel: pci 0000:00:18.5: PCI bridge to [bus 20] Sep 10 01:08:24.688490 kernel: pci 0000:00:18.5: bridge window [mem 0xfbe00000-0xfbefffff] Sep 10 01:08:24.688537 kernel: pci 0000:00:18.5: bridge window [mem 0xe6500000-0xe65fffff 64bit pref] Sep 10 01:08:24.688585 kernel: pci 0000:00:18.6: PCI bridge to [bus 21] Sep 10 01:08:24.688636 kernel: pci 0000:00:18.6: bridge window [mem 0xfba00000-0xfbafffff] Sep 10 01:08:24.688683 kernel: pci 0000:00:18.6: bridge window [mem 0xe6100000-0xe61fffff 64bit pref] Sep 10 01:08:24.688730 kernel: pci 0000:00:18.7: PCI bridge to [bus 22] Sep 10 01:08:24.688777 kernel: pci 0000:00:18.7: bridge window [mem 0xfb600000-0xfb6fffff] Sep 10 01:08:24.688823 kernel: pci 0000:00:18.7: bridge window [mem 0xe5d00000-0xe5dfffff 64bit pref] Sep 10 01:08:24.688832 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 9 Sep 10 01:08:24.688838 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 0 Sep 10 01:08:24.688844 kernel: ACPI: PCI: Interrupt link LNKB disabled Sep 10 01:08:24.688851 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Sep 10 01:08:24.688857 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 10 Sep 10 01:08:24.688862 kernel: iommu: Default domain type: Translated Sep 10 01:08:24.688868 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Sep 10 01:08:24.688916 kernel: pci 0000:00:0f.0: vgaarb: setting as boot VGA device Sep 10 01:08:24.688964 kernel: pci 0000:00:0f.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Sep 10 01:08:24.689012 kernel: pci 0000:00:0f.0: vgaarb: bridge control possible Sep 10 01:08:24.689020 kernel: vgaarb: loaded Sep 10 01:08:24.689026 kernel: pps_core: LinuxPPS API ver. 1 registered Sep 10 01:08:24.689034 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Sep 10 01:08:24.689040 kernel: PTP clock support registered Sep 10 01:08:24.689046 kernel: PCI: Using ACPI for IRQ routing Sep 10 01:08:24.689051 kernel: PCI: pci_cache_line_size set to 64 bytes Sep 10 01:08:24.689057 kernel: e820: reserve RAM buffer [mem 0x0009ec00-0x0009ffff] Sep 10 01:08:24.689063 kernel: e820: reserve RAM buffer [mem 0x7fee0000-0x7fffffff] Sep 10 01:08:24.689069 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 Sep 10 01:08:24.689075 kernel: hpet0: 16 comparators, 64-bit 14.318180 MHz counter Sep 10 01:08:24.689080 kernel: clocksource: Switched to clocksource tsc-early Sep 10 01:08:24.689087 kernel: VFS: Disk quotas dquot_6.6.0 Sep 10 01:08:24.689093 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Sep 10 01:08:24.689098 kernel: pnp: PnP ACPI init Sep 10 01:08:24.689148 kernel: system 00:00: [io 0x1000-0x103f] has been reserved Sep 10 01:08:24.689366 kernel: system 00:00: [io 0x1040-0x104f] has been reserved Sep 10 01:08:24.689416 kernel: system 00:00: [io 0x0cf0-0x0cf1] has been reserved Sep 10 01:08:24.689466 kernel: system 00:04: [mem 0xfed00000-0xfed003ff] has been reserved Sep 10 01:08:24.689516 kernel: pnp 00:06: [dma 2] Sep 10 01:08:24.689565 kernel: system 00:07: [io 0xfce0-0xfcff] has been reserved Sep 10 01:08:24.689609 kernel: system 00:07: [mem 0xf0000000-0xf7ffffff] has been reserved Sep 10 01:08:24.689652 kernel: system 00:07: [mem 0xfe800000-0xfe9fffff] has been reserved Sep 10 01:08:24.689660 kernel: pnp: PnP ACPI: found 8 devices Sep 10 01:08:24.689666 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Sep 10 01:08:24.689672 kernel: NET: Registered PF_INET protocol family Sep 10 01:08:24.689694 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Sep 10 01:08:24.689700 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Sep 10 01:08:24.689706 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Sep 10 01:08:24.689712 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Sep 10 01:08:24.689717 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Sep 10 01:08:24.689723 kernel: TCP: Hash tables configured (established 16384 bind 16384) Sep 10 01:08:24.689729 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Sep 10 01:08:24.689735 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Sep 10 01:08:24.689740 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Sep 10 01:08:24.689747 kernel: NET: Registered PF_XDP protocol family Sep 10 01:08:24.689796 kernel: pci 0000:00:15.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 03] add_size 200000 add_align 100000 Sep 10 01:08:24.689846 kernel: pci 0000:00:15.3: bridge window [io 0x1000-0x0fff] to [bus 06] add_size 1000 Sep 10 01:08:24.689916 kernel: pci 0000:00:15.4: bridge window [io 0x1000-0x0fff] to [bus 07] add_size 1000 Sep 10 01:08:24.689967 kernel: pci 0000:00:15.5: bridge window [io 0x1000-0x0fff] to [bus 08] add_size 1000 Sep 10 01:08:24.690014 kernel: pci 0000:00:15.6: bridge window [io 0x1000-0x0fff] to [bus 09] add_size 1000 Sep 10 01:08:24.690064 kernel: pci 0000:00:15.7: bridge window [io 0x1000-0x0fff] to [bus 0a] add_size 1000 Sep 10 01:08:24.690111 kernel: pci 0000:00:16.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 0b] add_size 200000 add_align 100000 Sep 10 01:08:24.690176 kernel: pci 0000:00:16.3: bridge window [io 0x1000-0x0fff] to [bus 0e] add_size 1000 Sep 10 01:08:24.690275 kernel: pci 0000:00:16.4: bridge window [io 0x1000-0x0fff] to [bus 0f] add_size 1000 Sep 10 01:08:24.690323 kernel: pci 0000:00:16.5: bridge window [io 0x1000-0x0fff] to [bus 10] add_size 1000 Sep 10 01:08:24.690370 kernel: pci 0000:00:16.6: bridge window [io 0x1000-0x0fff] to [bus 11] add_size 1000 Sep 10 01:08:24.690418 kernel: pci 0000:00:16.7: bridge window [io 0x1000-0x0fff] to [bus 12] add_size 1000 Sep 10 01:08:24.690465 kernel: pci 0000:00:17.3: bridge window [io 0x1000-0x0fff] to [bus 16] add_size 1000 Sep 10 01:08:24.690510 kernel: pci 0000:00:17.4: bridge window [io 0x1000-0x0fff] to [bus 17] add_size 1000 Sep 10 01:08:24.690556 kernel: pci 0000:00:17.5: bridge window [io 0x1000-0x0fff] to [bus 18] add_size 1000 Sep 10 01:08:24.690602 kernel: pci 0000:00:17.6: bridge window [io 0x1000-0x0fff] to [bus 19] add_size 1000 Sep 10 01:08:24.690648 kernel: pci 0000:00:17.7: bridge window [io 0x1000-0x0fff] to [bus 1a] add_size 1000 Sep 10 01:08:24.690697 kernel: pci 0000:00:18.2: bridge window [io 0x1000-0x0fff] to [bus 1d] add_size 1000 Sep 10 01:08:24.690743 kernel: pci 0000:00:18.3: bridge window [io 0x1000-0x0fff] to [bus 1e] add_size 1000 Sep 10 01:08:24.690790 kernel: pci 0000:00:18.4: bridge window [io 0x1000-0x0fff] to [bus 1f] add_size 1000 Sep 10 01:08:24.690836 kernel: pci 0000:00:18.5: bridge window [io 0x1000-0x0fff] to [bus 20] add_size 1000 Sep 10 01:08:24.690882 kernel: pci 0000:00:18.6: bridge window [io 0x1000-0x0fff] to [bus 21] add_size 1000 Sep 10 01:08:24.690929 kernel: pci 0000:00:18.7: bridge window [io 0x1000-0x0fff] to [bus 22] add_size 1000 Sep 10 01:08:24.690978 kernel: pci 0000:00:15.0: BAR 15: assigned [mem 0xc0000000-0xc01fffff 64bit pref] Sep 10 01:08:24.691024 kernel: pci 0000:00:16.0: BAR 15: assigned [mem 0xc0200000-0xc03fffff 64bit pref] Sep 10 01:08:24.691070 kernel: pci 0000:00:15.3: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.691116 kernel: pci 0000:00:15.3: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.691165 kernel: pci 0000:00:15.4: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.691212 kernel: pci 0000:00:15.4: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.691273 kernel: pci 0000:00:15.5: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.691322 kernel: pci 0000:00:15.5: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.691368 kernel: pci 0000:00:15.6: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.691415 kernel: pci 0000:00:15.6: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.691462 kernel: pci 0000:00:15.7: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.691524 kernel: pci 0000:00:15.7: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.691573 kernel: pci 0000:00:16.3: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.691621 kernel: pci 0000:00:16.3: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.691668 kernel: pci 0000:00:16.4: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.691717 kernel: pci 0000:00:16.4: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.691991 kernel: pci 0000:00:16.5: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.692044 kernel: pci 0000:00:16.5: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.692094 kernel: pci 0000:00:16.6: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.692186 kernel: pci 0000:00:16.6: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.692516 kernel: pci 0000:00:16.7: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.692851 kernel: pci 0000:00:16.7: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.692907 kernel: pci 0000:00:17.3: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.693169 kernel: pci 0000:00:17.3: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.693241 kernel: pci 0000:00:17.4: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.693294 kernel: pci 0000:00:17.4: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.693347 kernel: pci 0000:00:17.5: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.693395 kernel: pci 0000:00:17.5: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.693442 kernel: pci 0000:00:17.6: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.693488 kernel: pci 0000:00:17.6: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.693535 kernel: pci 0000:00:17.7: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.693581 kernel: pci 0000:00:17.7: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.693630 kernel: pci 0000:00:18.2: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.693676 kernel: pci 0000:00:18.2: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.693722 kernel: pci 0000:00:18.3: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.693767 kernel: pci 0000:00:18.3: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.693813 kernel: pci 0000:00:18.4: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.693858 kernel: pci 0000:00:18.4: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.693905 kernel: pci 0000:00:18.5: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.693951 kernel: pci 0000:00:18.5: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.694018 kernel: pci 0000:00:18.6: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.694079 kernel: pci 0000:00:18.6: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.694126 kernel: pci 0000:00:18.7: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.694205 kernel: pci 0000:00:18.7: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.694494 kernel: pci 0000:00:18.7: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.694546 kernel: pci 0000:00:18.7: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.694596 kernel: pci 0000:00:18.6: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.694648 kernel: pci 0000:00:18.6: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.694697 kernel: pci 0000:00:18.5: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.694744 kernel: pci 0000:00:18.5: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.694790 kernel: pci 0000:00:18.4: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.694836 kernel: pci 0000:00:18.4: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.694881 kernel: pci 0000:00:18.3: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.694928 kernel: pci 0000:00:18.3: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.694972 kernel: pci 0000:00:18.2: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.695018 kernel: pci 0000:00:18.2: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.695064 kernel: pci 0000:00:17.7: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.695109 kernel: pci 0000:00:17.7: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.695164 kernel: pci 0000:00:17.6: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.695211 kernel: pci 0000:00:17.6: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.695478 kernel: pci 0000:00:17.5: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.695529 kernel: pci 0000:00:17.5: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.695577 kernel: pci 0000:00:17.4: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.695624 kernel: pci 0000:00:17.4: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.695687 kernel: pci 0000:00:17.3: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.695943 kernel: pci 0000:00:17.3: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.696000 kernel: pci 0000:00:16.7: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.696053 kernel: pci 0000:00:16.7: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.696106 kernel: pci 0000:00:16.6: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.696172 kernel: pci 0000:00:16.6: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.696484 kernel: pci 0000:00:16.5: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.696538 kernel: pci 0000:00:16.5: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.696847 kernel: pci 0000:00:16.4: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.696900 kernel: pci 0000:00:16.4: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.696949 kernel: pci 0000:00:16.3: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.697007 kernel: pci 0000:00:16.3: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.697056 kernel: pci 0000:00:15.7: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.697106 kernel: pci 0000:00:15.7: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.697153 kernel: pci 0000:00:15.6: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.697494 kernel: pci 0000:00:15.6: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.697552 kernel: pci 0000:00:15.5: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.697610 kernel: pci 0000:00:15.5: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.697688 kernel: pci 0000:00:15.4: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.697973 kernel: pci 0000:00:15.4: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.698030 kernel: pci 0000:00:15.3: BAR 13: no space for [io size 0x1000] Sep 10 01:08:24.698084 kernel: pci 0000:00:15.3: BAR 13: failed to assign [io size 0x1000] Sep 10 01:08:24.698170 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Sep 10 01:08:24.698242 kernel: pci 0000:00:11.0: PCI bridge to [bus 02] Sep 10 01:08:24.698290 kernel: pci 0000:00:11.0: bridge window [io 0x2000-0x3fff] Sep 10 01:08:24.698337 kernel: pci 0000:00:11.0: bridge window [mem 0xfd600000-0xfdffffff] Sep 10 01:08:24.698383 kernel: pci 0000:00:11.0: bridge window [mem 0xe7b00000-0xe7ffffff 64bit pref] Sep 10 01:08:24.698434 kernel: pci 0000:03:00.0: BAR 6: assigned [mem 0xfd500000-0xfd50ffff pref] Sep 10 01:08:24.698481 kernel: pci 0000:00:15.0: PCI bridge to [bus 03] Sep 10 01:08:24.698527 kernel: pci 0000:00:15.0: bridge window [io 0x4000-0x4fff] Sep 10 01:08:24.698577 kernel: pci 0000:00:15.0: bridge window [mem 0xfd500000-0xfd5fffff] Sep 10 01:08:24.698623 kernel: pci 0000:00:15.0: bridge window [mem 0xc0000000-0xc01fffff 64bit pref] Sep 10 01:08:24.698670 kernel: pci 0000:00:15.1: PCI bridge to [bus 04] Sep 10 01:08:24.698941 kernel: pci 0000:00:15.1: bridge window [io 0x8000-0x8fff] Sep 10 01:08:24.698996 kernel: pci 0000:00:15.1: bridge window [mem 0xfd100000-0xfd1fffff] Sep 10 01:08:24.699044 kernel: pci 0000:00:15.1: bridge window [mem 0xe7800000-0xe78fffff 64bit pref] Sep 10 01:08:24.699100 kernel: pci 0000:00:15.2: PCI bridge to [bus 05] Sep 10 01:08:24.699149 kernel: pci 0000:00:15.2: bridge window [io 0xc000-0xcfff] Sep 10 01:08:24.699197 kernel: pci 0000:00:15.2: bridge window [mem 0xfcd00000-0xfcdfffff] Sep 10 01:08:24.699474 kernel: pci 0000:00:15.2: bridge window [mem 0xe7400000-0xe74fffff 64bit pref] Sep 10 01:08:24.699530 kernel: pci 0000:00:15.3: PCI bridge to [bus 06] Sep 10 01:08:24.699578 kernel: pci 0000:00:15.3: bridge window [mem 0xfc900000-0xfc9fffff] Sep 10 01:08:24.699873 kernel: pci 0000:00:15.3: bridge window [mem 0xe7000000-0xe70fffff 64bit pref] Sep 10 01:08:24.699924 kernel: pci 0000:00:15.4: PCI bridge to [bus 07] Sep 10 01:08:24.699973 kernel: pci 0000:00:15.4: bridge window [mem 0xfc500000-0xfc5fffff] Sep 10 01:08:24.700026 kernel: pci 0000:00:15.4: bridge window [mem 0xe6c00000-0xe6cfffff 64bit pref] Sep 10 01:08:24.700077 kernel: pci 0000:00:15.5: PCI bridge to [bus 08] Sep 10 01:08:24.700130 kernel: pci 0000:00:15.5: bridge window [mem 0xfc100000-0xfc1fffff] Sep 10 01:08:24.700484 kernel: pci 0000:00:15.5: bridge window [mem 0xe6800000-0xe68fffff 64bit pref] Sep 10 01:08:24.700754 kernel: pci 0000:00:15.6: PCI bridge to [bus 09] Sep 10 01:08:24.700809 kernel: pci 0000:00:15.6: bridge window [mem 0xfbd00000-0xfbdfffff] Sep 10 01:08:24.700859 kernel: pci 0000:00:15.6: bridge window [mem 0xe6400000-0xe64fffff 64bit pref] Sep 10 01:08:24.700920 kernel: pci 0000:00:15.7: PCI bridge to [bus 0a] Sep 10 01:08:24.700971 kernel: pci 0000:00:15.7: bridge window [mem 0xfb900000-0xfb9fffff] Sep 10 01:08:24.701019 kernel: pci 0000:00:15.7: bridge window [mem 0xe6000000-0xe60fffff 64bit pref] Sep 10 01:08:24.701073 kernel: pci 0000:0b:00.0: BAR 6: assigned [mem 0xfd400000-0xfd40ffff pref] Sep 10 01:08:24.701121 kernel: pci 0000:00:16.0: PCI bridge to [bus 0b] Sep 10 01:08:24.701170 kernel: pci 0000:00:16.0: bridge window [io 0x5000-0x5fff] Sep 10 01:08:24.701496 kernel: pci 0000:00:16.0: bridge window [mem 0xfd400000-0xfd4fffff] Sep 10 01:08:24.701560 kernel: pci 0000:00:16.0: bridge window [mem 0xc0200000-0xc03fffff 64bit pref] Sep 10 01:08:24.701827 kernel: pci 0000:00:16.1: PCI bridge to [bus 0c] Sep 10 01:08:24.701883 kernel: pci 0000:00:16.1: bridge window [io 0x9000-0x9fff] Sep 10 01:08:24.701933 kernel: pci 0000:00:16.1: bridge window [mem 0xfd000000-0xfd0fffff] Sep 10 01:08:24.701987 kernel: pci 0000:00:16.1: bridge window [mem 0xe7700000-0xe77fffff 64bit pref] Sep 10 01:08:24.702039 kernel: pci 0000:00:16.2: PCI bridge to [bus 0d] Sep 10 01:08:24.702086 kernel: pci 0000:00:16.2: bridge window [io 0xd000-0xdfff] Sep 10 01:08:24.702133 kernel: pci 0000:00:16.2: bridge window [mem 0xfcc00000-0xfccfffff] Sep 10 01:08:24.702187 kernel: pci 0000:00:16.2: bridge window [mem 0xe7300000-0xe73fffff 64bit pref] Sep 10 01:08:24.702483 kernel: pci 0000:00:16.3: PCI bridge to [bus 0e] Sep 10 01:08:24.702538 kernel: pci 0000:00:16.3: bridge window [mem 0xfc800000-0xfc8fffff] Sep 10 01:08:24.702589 kernel: pci 0000:00:16.3: bridge window [mem 0xe6f00000-0xe6ffffff 64bit pref] Sep 10 01:08:24.702637 kernel: pci 0000:00:16.4: PCI bridge to [bus 0f] Sep 10 01:08:24.702685 kernel: pci 0000:00:16.4: bridge window [mem 0xfc400000-0xfc4fffff] Sep 10 01:08:24.702733 kernel: pci 0000:00:16.4: bridge window [mem 0xe6b00000-0xe6bfffff 64bit pref] Sep 10 01:08:24.702784 kernel: pci 0000:00:16.5: PCI bridge to [bus 10] Sep 10 01:08:24.702831 kernel: pci 0000:00:16.5: bridge window [mem 0xfc000000-0xfc0fffff] Sep 10 01:08:24.702879 kernel: pci 0000:00:16.5: bridge window [mem 0xe6700000-0xe67fffff 64bit pref] Sep 10 01:08:24.702927 kernel: pci 0000:00:16.6: PCI bridge to [bus 11] Sep 10 01:08:24.702974 kernel: pci 0000:00:16.6: bridge window [mem 0xfbc00000-0xfbcfffff] Sep 10 01:08:24.703021 kernel: pci 0000:00:16.6: bridge window [mem 0xe6300000-0xe63fffff 64bit pref] Sep 10 01:08:24.703068 kernel: pci 0000:00:16.7: PCI bridge to [bus 12] Sep 10 01:08:24.703115 kernel: pci 0000:00:16.7: bridge window [mem 0xfb800000-0xfb8fffff] Sep 10 01:08:24.703162 kernel: pci 0000:00:16.7: bridge window [mem 0xe5f00000-0xe5ffffff 64bit pref] Sep 10 01:08:24.703212 kernel: pci 0000:00:17.0: PCI bridge to [bus 13] Sep 10 01:08:24.703492 kernel: pci 0000:00:17.0: bridge window [io 0x6000-0x6fff] Sep 10 01:08:24.703543 kernel: pci 0000:00:17.0: bridge window [mem 0xfd300000-0xfd3fffff] Sep 10 01:08:24.703591 kernel: pci 0000:00:17.0: bridge window [mem 0xe7a00000-0xe7afffff 64bit pref] Sep 10 01:08:24.703646 kernel: pci 0000:00:17.1: PCI bridge to [bus 14] Sep 10 01:08:24.703693 kernel: pci 0000:00:17.1: bridge window [io 0xa000-0xafff] Sep 10 01:08:24.703740 kernel: pci 0000:00:17.1: bridge window [mem 0xfcf00000-0xfcffffff] Sep 10 01:08:24.703788 kernel: pci 0000:00:17.1: bridge window [mem 0xe7600000-0xe76fffff 64bit pref] Sep 10 01:08:24.703836 kernel: pci 0000:00:17.2: PCI bridge to [bus 15] Sep 10 01:08:24.703883 kernel: pci 0000:00:17.2: bridge window [io 0xe000-0xefff] Sep 10 01:08:24.703933 kernel: pci 0000:00:17.2: bridge window [mem 0xfcb00000-0xfcbfffff] Sep 10 01:08:24.703980 kernel: pci 0000:00:17.2: bridge window [mem 0xe7200000-0xe72fffff 64bit pref] Sep 10 01:08:24.704028 kernel: pci 0000:00:17.3: PCI bridge to [bus 16] Sep 10 01:08:24.704074 kernel: pci 0000:00:17.3: bridge window [mem 0xfc700000-0xfc7fffff] Sep 10 01:08:24.704121 kernel: pci 0000:00:17.3: bridge window [mem 0xe6e00000-0xe6efffff 64bit pref] Sep 10 01:08:24.704168 kernel: pci 0000:00:17.4: PCI bridge to [bus 17] Sep 10 01:08:24.704221 kernel: pci 0000:00:17.4: bridge window [mem 0xfc300000-0xfc3fffff] Sep 10 01:08:24.704492 kernel: pci 0000:00:17.4: bridge window [mem 0xe6a00000-0xe6afffff 64bit pref] Sep 10 01:08:24.704755 kernel: pci 0000:00:17.5: PCI bridge to [bus 18] Sep 10 01:08:24.704812 kernel: pci 0000:00:17.5: bridge window [mem 0xfbf00000-0xfbffffff] Sep 10 01:08:24.704863 kernel: pci 0000:00:17.5: bridge window [mem 0xe6600000-0xe66fffff 64bit pref] Sep 10 01:08:24.704919 kernel: pci 0000:00:17.6: PCI bridge to [bus 19] Sep 10 01:08:24.704967 kernel: pci 0000:00:17.6: bridge window [mem 0xfbb00000-0xfbbfffff] Sep 10 01:08:24.705016 kernel: pci 0000:00:17.6: bridge window [mem 0xe6200000-0xe62fffff 64bit pref] Sep 10 01:08:24.705064 kernel: pci 0000:00:17.7: PCI bridge to [bus 1a] Sep 10 01:08:24.705112 kernel: pci 0000:00:17.7: bridge window [mem 0xfb700000-0xfb7fffff] Sep 10 01:08:24.705180 kernel: pci 0000:00:17.7: bridge window [mem 0xe5e00000-0xe5efffff 64bit pref] Sep 10 01:08:24.705496 kernel: pci 0000:00:18.0: PCI bridge to [bus 1b] Sep 10 01:08:24.705555 kernel: pci 0000:00:18.0: bridge window [io 0x7000-0x7fff] Sep 10 01:08:24.705605 kernel: pci 0000:00:18.0: bridge window [mem 0xfd200000-0xfd2fffff] Sep 10 01:08:24.705914 kernel: pci 0000:00:18.0: bridge window [mem 0xe7900000-0xe79fffff 64bit pref] Sep 10 01:08:24.705976 kernel: pci 0000:00:18.1: PCI bridge to [bus 1c] Sep 10 01:08:24.706026 kernel: pci 0000:00:18.1: bridge window [io 0xb000-0xbfff] Sep 10 01:08:24.706073 kernel: pci 0000:00:18.1: bridge window [mem 0xfce00000-0xfcefffff] Sep 10 01:08:24.706119 kernel: pci 0000:00:18.1: bridge window [mem 0xe7500000-0xe75fffff 64bit pref] Sep 10 01:08:24.706174 kernel: pci 0000:00:18.2: PCI bridge to [bus 1d] Sep 10 01:08:24.706518 kernel: pci 0000:00:18.2: bridge window [mem 0xfca00000-0xfcafffff] Sep 10 01:08:24.706578 kernel: pci 0000:00:18.2: bridge window [mem 0xe7100000-0xe71fffff 64bit pref] Sep 10 01:08:24.706633 kernel: pci 0000:00:18.3: PCI bridge to [bus 1e] Sep 10 01:08:24.706682 kernel: pci 0000:00:18.3: bridge window [mem 0xfc600000-0xfc6fffff] Sep 10 01:08:24.706731 kernel: pci 0000:00:18.3: bridge window [mem 0xe6d00000-0xe6dfffff 64bit pref] Sep 10 01:08:24.706779 kernel: pci 0000:00:18.4: PCI bridge to [bus 1f] Sep 10 01:08:24.706828 kernel: pci 0000:00:18.4: bridge window [mem 0xfc200000-0xfc2fffff] Sep 10 01:08:24.706876 kernel: pci 0000:00:18.4: bridge window [mem 0xe6900000-0xe69fffff 64bit pref] Sep 10 01:08:24.706925 kernel: pci 0000:00:18.5: PCI bridge to [bus 20] Sep 10 01:08:24.706973 kernel: pci 0000:00:18.5: bridge window [mem 0xfbe00000-0xfbefffff] Sep 10 01:08:24.707021 kernel: pci 0000:00:18.5: bridge window [mem 0xe6500000-0xe65fffff 64bit pref] Sep 10 01:08:24.707071 kernel: pci 0000:00:18.6: PCI bridge to [bus 21] Sep 10 01:08:24.707119 kernel: pci 0000:00:18.6: bridge window [mem 0xfba00000-0xfbafffff] Sep 10 01:08:24.707167 kernel: pci 0000:00:18.6: bridge window [mem 0xe6100000-0xe61fffff 64bit pref] Sep 10 01:08:24.707214 kernel: pci 0000:00:18.7: PCI bridge to [bus 22] Sep 10 01:08:24.707516 kernel: pci 0000:00:18.7: bridge window [mem 0xfb600000-0xfb6fffff] Sep 10 01:08:24.707578 kernel: pci 0000:00:18.7: bridge window [mem 0xe5d00000-0xe5dfffff 64bit pref] Sep 10 01:08:24.707627 kernel: pci_bus 0000:00: resource 4 [mem 0x000a0000-0x000bffff window] Sep 10 01:08:24.707671 kernel: pci_bus 0000:00: resource 5 [mem 0x000cc000-0x000dbfff window] Sep 10 01:08:24.707719 kernel: pci_bus 0000:00: resource 6 [mem 0xc0000000-0xfebfffff window] Sep 10 01:08:24.707764 kernel: pci_bus 0000:00: resource 7 [io 0x0000-0x0cf7 window] Sep 10 01:08:24.707805 kernel: pci_bus 0000:00: resource 8 [io 0x0d00-0xfeff window] Sep 10 01:08:24.707851 kernel: pci_bus 0000:02: resource 0 [io 0x2000-0x3fff] Sep 10 01:08:24.707895 kernel: pci_bus 0000:02: resource 1 [mem 0xfd600000-0xfdffffff] Sep 10 01:08:24.707939 kernel: pci_bus 0000:02: resource 2 [mem 0xe7b00000-0xe7ffffff 64bit pref] Sep 10 01:08:24.707982 kernel: pci_bus 0000:02: resource 4 [mem 0x000a0000-0x000bffff window] Sep 10 01:08:24.708026 kernel: pci_bus 0000:02: resource 5 [mem 0x000cc000-0x000dbfff window] Sep 10 01:08:24.708072 kernel: pci_bus 0000:02: resource 6 [mem 0xc0000000-0xfebfffff window] Sep 10 01:08:24.708114 kernel: pci_bus 0000:02: resource 7 [io 0x0000-0x0cf7 window] Sep 10 01:08:24.708162 kernel: pci_bus 0000:02: resource 8 [io 0x0d00-0xfeff window] Sep 10 01:08:24.708211 kernel: pci_bus 0000:03: resource 0 [io 0x4000-0x4fff] Sep 10 01:08:24.708483 kernel: pci_bus 0000:03: resource 1 [mem 0xfd500000-0xfd5fffff] Sep 10 01:08:24.708532 kernel: pci_bus 0000:03: resource 2 [mem 0xc0000000-0xc01fffff 64bit pref] Sep 10 01:08:24.708597 kernel: pci_bus 0000:04: resource 0 [io 0x8000-0x8fff] Sep 10 01:08:24.708646 kernel: pci_bus 0000:04: resource 1 [mem 0xfd100000-0xfd1fffff] Sep 10 01:08:24.708693 kernel: pci_bus 0000:04: resource 2 [mem 0xe7800000-0xe78fffff 64bit pref] Sep 10 01:08:24.708742 kernel: pci_bus 0000:05: resource 0 [io 0xc000-0xcfff] Sep 10 01:08:24.708804 kernel: pci_bus 0000:05: resource 1 [mem 0xfcd00000-0xfcdfffff] Sep 10 01:08:24.708863 kernel: pci_bus 0000:05: resource 2 [mem 0xe7400000-0xe74fffff 64bit pref] Sep 10 01:08:24.708910 kernel: pci_bus 0000:06: resource 1 [mem 0xfc900000-0xfc9fffff] Sep 10 01:08:24.708955 kernel: pci_bus 0000:06: resource 2 [mem 0xe7000000-0xe70fffff 64bit pref] Sep 10 01:08:24.709004 kernel: pci_bus 0000:07: resource 1 [mem 0xfc500000-0xfc5fffff] Sep 10 01:08:24.709047 kernel: pci_bus 0000:07: resource 2 [mem 0xe6c00000-0xe6cfffff 64bit pref] Sep 10 01:08:24.709095 kernel: pci_bus 0000:08: resource 1 [mem 0xfc100000-0xfc1fffff] Sep 10 01:08:24.709138 kernel: pci_bus 0000:08: resource 2 [mem 0xe6800000-0xe68fffff 64bit pref] Sep 10 01:08:24.709187 kernel: pci_bus 0000:09: resource 1 [mem 0xfbd00000-0xfbdfffff] Sep 10 01:08:24.709471 kernel: pci_bus 0000:09: resource 2 [mem 0xe6400000-0xe64fffff 64bit pref] Sep 10 01:08:24.709525 kernel: pci_bus 0000:0a: resource 1 [mem 0xfb900000-0xfb9fffff] Sep 10 01:08:24.709775 kernel: pci_bus 0000:0a: resource 2 [mem 0xe6000000-0xe60fffff 64bit pref] Sep 10 01:08:24.709829 kernel: pci_bus 0000:0b: resource 0 [io 0x5000-0x5fff] Sep 10 01:08:24.710161 kernel: pci_bus 0000:0b: resource 1 [mem 0xfd400000-0xfd4fffff] Sep 10 01:08:24.710252 kernel: pci_bus 0000:0b: resource 2 [mem 0xc0200000-0xc03fffff 64bit pref] Sep 10 01:08:24.710304 kernel: pci_bus 0000:0c: resource 0 [io 0x9000-0x9fff] Sep 10 01:08:24.710353 kernel: pci_bus 0000:0c: resource 1 [mem 0xfd000000-0xfd0fffff] Sep 10 01:08:24.710512 kernel: pci_bus 0000:0c: resource 2 [mem 0xe7700000-0xe77fffff 64bit pref] Sep 10 01:08:24.710585 kernel: pci_bus 0000:0d: resource 0 [io 0xd000-0xdfff] Sep 10 01:08:24.710632 kernel: pci_bus 0000:0d: resource 1 [mem 0xfcc00000-0xfccfffff] Sep 10 01:08:24.710677 kernel: pci_bus 0000:0d: resource 2 [mem 0xe7300000-0xe73fffff 64bit pref] Sep 10 01:08:24.710726 kernel: pci_bus 0000:0e: resource 1 [mem 0xfc800000-0xfc8fffff] Sep 10 01:08:24.710771 kernel: pci_bus 0000:0e: resource 2 [mem 0xe6f00000-0xe6ffffff 64bit pref] Sep 10 01:08:24.710823 kernel: pci_bus 0000:0f: resource 1 [mem 0xfc400000-0xfc4fffff] Sep 10 01:08:24.710868 kernel: pci_bus 0000:0f: resource 2 [mem 0xe6b00000-0xe6bfffff 64bit pref] Sep 10 01:08:24.710916 kernel: pci_bus 0000:10: resource 1 [mem 0xfc000000-0xfc0fffff] Sep 10 01:08:24.710962 kernel: pci_bus 0000:10: resource 2 [mem 0xe6700000-0xe67fffff 64bit pref] Sep 10 01:08:24.711009 kernel: pci_bus 0000:11: resource 1 [mem 0xfbc00000-0xfbcfffff] Sep 10 01:08:24.711054 kernel: pci_bus 0000:11: resource 2 [mem 0xe6300000-0xe63fffff 64bit pref] Sep 10 01:08:24.711105 kernel: pci_bus 0000:12: resource 1 [mem 0xfb800000-0xfb8fffff] Sep 10 01:08:24.711154 kernel: pci_bus 0000:12: resource 2 [mem 0xe5f00000-0xe5ffffff 64bit pref] Sep 10 01:08:24.711202 kernel: pci_bus 0000:13: resource 0 [io 0x6000-0x6fff] Sep 10 01:08:24.711558 kernel: pci_bus 0000:13: resource 1 [mem 0xfd300000-0xfd3fffff] Sep 10 01:08:24.711608 kernel: pci_bus 0000:13: resource 2 [mem 0xe7a00000-0xe7afffff 64bit pref] Sep 10 01:08:24.711658 kernel: pci_bus 0000:14: resource 0 [io 0xa000-0xafff] Sep 10 01:08:24.711704 kernel: pci_bus 0000:14: resource 1 [mem 0xfcf00000-0xfcffffff] Sep 10 01:08:24.711889 kernel: pci_bus 0000:14: resource 2 [mem 0xe7600000-0xe76fffff 64bit pref] Sep 10 01:08:24.712159 kernel: pci_bus 0000:15: resource 0 [io 0xe000-0xefff] Sep 10 01:08:24.712211 kernel: pci_bus 0000:15: resource 1 [mem 0xfcb00000-0xfcbfffff] Sep 10 01:08:24.712273 kernel: pci_bus 0000:15: resource 2 [mem 0xe7200000-0xe72fffff 64bit pref] Sep 10 01:08:24.712324 kernel: pci_bus 0000:16: resource 1 [mem 0xfc700000-0xfc7fffff] Sep 10 01:08:24.712370 kernel: pci_bus 0000:16: resource 2 [mem 0xe6e00000-0xe6efffff 64bit pref] Sep 10 01:08:24.712423 kernel: pci_bus 0000:17: resource 1 [mem 0xfc300000-0xfc3fffff] Sep 10 01:08:24.712468 kernel: pci_bus 0000:17: resource 2 [mem 0xe6a00000-0xe6afffff 64bit pref] Sep 10 01:08:24.712518 kernel: pci_bus 0000:18: resource 1 [mem 0xfbf00000-0xfbffffff] Sep 10 01:08:24.712563 kernel: pci_bus 0000:18: resource 2 [mem 0xe6600000-0xe66fffff 64bit pref] Sep 10 01:08:24.712612 kernel: pci_bus 0000:19: resource 1 [mem 0xfbb00000-0xfbbfffff] Sep 10 01:08:24.712657 kernel: pci_bus 0000:19: resource 2 [mem 0xe6200000-0xe62fffff 64bit pref] Sep 10 01:08:24.712708 kernel: pci_bus 0000:1a: resource 1 [mem 0xfb700000-0xfb7fffff] Sep 10 01:08:24.712755 kernel: pci_bus 0000:1a: resource 2 [mem 0xe5e00000-0xe5efffff 64bit pref] Sep 10 01:08:24.712807 kernel: pci_bus 0000:1b: resource 0 [io 0x7000-0x7fff] Sep 10 01:08:24.712852 kernel: pci_bus 0000:1b: resource 1 [mem 0xfd200000-0xfd2fffff] Sep 10 01:08:24.712897 kernel: pci_bus 0000:1b: resource 2 [mem 0xe7900000-0xe79fffff 64bit pref] Sep 10 01:08:24.712946 kernel: pci_bus 0000:1c: resource 0 [io 0xb000-0xbfff] Sep 10 01:08:24.712992 kernel: pci_bus 0000:1c: resource 1 [mem 0xfce00000-0xfcefffff] Sep 10 01:08:24.713039 kernel: pci_bus 0000:1c: resource 2 [mem 0xe7500000-0xe75fffff 64bit pref] Sep 10 01:08:24.713087 kernel: pci_bus 0000:1d: resource 1 [mem 0xfca00000-0xfcafffff] Sep 10 01:08:24.713132 kernel: pci_bus 0000:1d: resource 2 [mem 0xe7100000-0xe71fffff 64bit pref] Sep 10 01:08:24.713183 kernel: pci_bus 0000:1e: resource 1 [mem 0xfc600000-0xfc6fffff] Sep 10 01:08:24.713259 kernel: pci_bus 0000:1e: resource 2 [mem 0xe6d00000-0xe6dfffff 64bit pref] Sep 10 01:08:24.713308 kernel: pci_bus 0000:1f: resource 1 [mem 0xfc200000-0xfc2fffff] Sep 10 01:08:24.713356 kernel: pci_bus 0000:1f: resource 2 [mem 0xe6900000-0xe69fffff 64bit pref] Sep 10 01:08:24.713404 kernel: pci_bus 0000:20: resource 1 [mem 0xfbe00000-0xfbefffff] Sep 10 01:08:24.713448 kernel: pci_bus 0000:20: resource 2 [mem 0xe6500000-0xe65fffff 64bit pref] Sep 10 01:08:24.713496 kernel: pci_bus 0000:21: resource 1 [mem 0xfba00000-0xfbafffff] Sep 10 01:08:24.713541 kernel: pci_bus 0000:21: resource 2 [mem 0xe6100000-0xe61fffff 64bit pref] Sep 10 01:08:24.713591 kernel: pci_bus 0000:22: resource 1 [mem 0xfb600000-0xfb6fffff] Sep 10 01:08:24.713638 kernel: pci_bus 0000:22: resource 2 [mem 0xe5d00000-0xe5dfffff 64bit pref] Sep 10 01:08:24.713690 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Sep 10 01:08:24.713699 kernel: PCI: CLS 32 bytes, default 64 Sep 10 01:08:24.713706 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Sep 10 01:08:24.713713 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x311fd3cd494, max_idle_ns: 440795223879 ns Sep 10 01:08:24.713719 kernel: clocksource: Switched to clocksource tsc Sep 10 01:08:24.713725 kernel: Initialise system trusted keyrings Sep 10 01:08:24.713731 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Sep 10 01:08:24.713739 kernel: Key type asymmetric registered Sep 10 01:08:24.713745 kernel: Asymmetric key parser 'x509' registered Sep 10 01:08:24.713751 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Sep 10 01:08:24.713758 kernel: io scheduler mq-deadline registered Sep 10 01:08:24.713764 kernel: io scheduler kyber registered Sep 10 01:08:24.713770 kernel: io scheduler bfq registered Sep 10 01:08:24.713819 kernel: pcieport 0000:00:15.0: PME: Signaling with IRQ 24 Sep 10 01:08:24.713870 kernel: pcieport 0000:00:15.0: pciehp: Slot #160 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.713920 kernel: pcieport 0000:00:15.1: PME: Signaling with IRQ 25 Sep 10 01:08:24.713971 kernel: pcieport 0000:00:15.1: pciehp: Slot #161 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.714020 kernel: pcieport 0000:00:15.2: PME: Signaling with IRQ 26 Sep 10 01:08:24.714069 kernel: pcieport 0000:00:15.2: pciehp: Slot #162 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.714117 kernel: pcieport 0000:00:15.3: PME: Signaling with IRQ 27 Sep 10 01:08:24.714472 kernel: pcieport 0000:00:15.3: pciehp: Slot #163 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.714529 kernel: pcieport 0000:00:15.4: PME: Signaling with IRQ 28 Sep 10 01:08:24.714582 kernel: pcieport 0000:00:15.4: pciehp: Slot #164 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.714632 kernel: pcieport 0000:00:15.5: PME: Signaling with IRQ 29 Sep 10 01:08:24.714798 kernel: pcieport 0000:00:15.5: pciehp: Slot #165 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.714851 kernel: pcieport 0000:00:15.6: PME: Signaling with IRQ 30 Sep 10 01:08:24.715206 kernel: pcieport 0000:00:15.6: pciehp: Slot #166 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.715301 kernel: pcieport 0000:00:15.7: PME: Signaling with IRQ 31 Sep 10 01:08:24.715353 kernel: pcieport 0000:00:15.7: pciehp: Slot #167 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.715401 kernel: pcieport 0000:00:16.0: PME: Signaling with IRQ 32 Sep 10 01:08:24.715692 kernel: pcieport 0000:00:16.0: pciehp: Slot #192 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.716078 kernel: pcieport 0000:00:16.1: PME: Signaling with IRQ 33 Sep 10 01:08:24.716131 kernel: pcieport 0000:00:16.1: pciehp: Slot #193 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.716466 kernel: pcieport 0000:00:16.2: PME: Signaling with IRQ 34 Sep 10 01:08:24.716530 kernel: pcieport 0000:00:16.2: pciehp: Slot #194 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.716581 kernel: pcieport 0000:00:16.3: PME: Signaling with IRQ 35 Sep 10 01:08:24.716631 kernel: pcieport 0000:00:16.3: pciehp: Slot #195 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.716682 kernel: pcieport 0000:00:16.4: PME: Signaling with IRQ 36 Sep 10 01:08:24.716850 kernel: pcieport 0000:00:16.4: pciehp: Slot #196 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.716906 kernel: pcieport 0000:00:16.5: PME: Signaling with IRQ 37 Sep 10 01:08:24.717337 kernel: pcieport 0000:00:16.5: pciehp: Slot #197 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.717400 kernel: pcieport 0000:00:16.6: PME: Signaling with IRQ 38 Sep 10 01:08:24.717451 kernel: pcieport 0000:00:16.6: pciehp: Slot #198 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.717500 kernel: pcieport 0000:00:16.7: PME: Signaling with IRQ 39 Sep 10 01:08:24.717548 kernel: pcieport 0000:00:16.7: pciehp: Slot #199 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.717599 kernel: pcieport 0000:00:17.0: PME: Signaling with IRQ 40 Sep 10 01:08:24.717647 kernel: pcieport 0000:00:17.0: pciehp: Slot #224 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.717693 kernel: pcieport 0000:00:17.1: PME: Signaling with IRQ 41 Sep 10 01:08:24.717741 kernel: pcieport 0000:00:17.1: pciehp: Slot #225 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.717787 kernel: pcieport 0000:00:17.2: PME: Signaling with IRQ 42 Sep 10 01:08:24.717867 kernel: pcieport 0000:00:17.2: pciehp: Slot #226 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.717925 kernel: pcieport 0000:00:17.3: PME: Signaling with IRQ 43 Sep 10 01:08:24.717977 kernel: pcieport 0000:00:17.3: pciehp: Slot #227 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.718024 kernel: pcieport 0000:00:17.4: PME: Signaling with IRQ 44 Sep 10 01:08:24.718071 kernel: pcieport 0000:00:17.4: pciehp: Slot #228 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.718119 kernel: pcieport 0000:00:17.5: PME: Signaling with IRQ 45 Sep 10 01:08:24.718355 kernel: pcieport 0000:00:17.5: pciehp: Slot #229 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.718628 kernel: pcieport 0000:00:17.6: PME: Signaling with IRQ 46 Sep 10 01:08:24.718680 kernel: pcieport 0000:00:17.6: pciehp: Slot #230 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.718730 kernel: pcieport 0000:00:17.7: PME: Signaling with IRQ 47 Sep 10 01:08:24.718784 kernel: pcieport 0000:00:17.7: pciehp: Slot #231 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.718832 kernel: pcieport 0000:00:18.0: PME: Signaling with IRQ 48 Sep 10 01:08:24.718883 kernel: pcieport 0000:00:18.0: pciehp: Slot #256 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.718933 kernel: pcieport 0000:00:18.1: PME: Signaling with IRQ 49 Sep 10 01:08:24.718981 kernel: pcieport 0000:00:18.1: pciehp: Slot #257 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.719029 kernel: pcieport 0000:00:18.2: PME: Signaling with IRQ 50 Sep 10 01:08:24.719075 kernel: pcieport 0000:00:18.2: pciehp: Slot #258 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.719123 kernel: pcieport 0000:00:18.3: PME: Signaling with IRQ 51 Sep 10 01:08:24.719170 kernel: pcieport 0000:00:18.3: pciehp: Slot #259 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.719453 kernel: pcieport 0000:00:18.4: PME: Signaling with IRQ 52 Sep 10 01:08:24.719512 kernel: pcieport 0000:00:18.4: pciehp: Slot #260 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.719778 kernel: pcieport 0000:00:18.5: PME: Signaling with IRQ 53 Sep 10 01:08:24.719833 kernel: pcieport 0000:00:18.5: pciehp: Slot #261 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.719883 kernel: pcieport 0000:00:18.6: PME: Signaling with IRQ 54 Sep 10 01:08:24.719940 kernel: pcieport 0000:00:18.6: pciehp: Slot #262 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.719988 kernel: pcieport 0000:00:18.7: PME: Signaling with IRQ 55 Sep 10 01:08:24.720037 kernel: pcieport 0000:00:18.7: pciehp: Slot #263 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Sep 10 01:08:24.720045 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Sep 10 01:08:24.720069 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Sep 10 01:08:24.720076 kernel: 00:05: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Sep 10 01:08:24.720084 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBC,PNP0f13:MOUS] at 0x60,0x64 irq 1,12 Sep 10 01:08:24.720090 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Sep 10 01:08:24.720097 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Sep 10 01:08:24.720146 kernel: rtc_cmos 00:01: registered as rtc0 Sep 10 01:08:24.720192 kernel: rtc_cmos 00:01: setting system clock to 2025-09-10T01:08:24 UTC (1757466504) Sep 10 01:08:24.720247 kernel: rtc_cmos 00:01: alarms up to one month, y3k, 114 bytes nvram Sep 10 01:08:24.720256 kernel: intel_pstate: CPU model not supported Sep 10 01:08:24.720262 kernel: NET: Registered PF_INET6 protocol family Sep 10 01:08:24.720270 kernel: Segment Routing with IPv6 Sep 10 01:08:24.720277 kernel: In-situ OAM (IOAM) with IPv6 Sep 10 01:08:24.720283 kernel: NET: Registered PF_PACKET protocol family Sep 10 01:08:24.720289 kernel: Key type dns_resolver registered Sep 10 01:08:24.720295 kernel: IPI shorthand broadcast: enabled Sep 10 01:08:24.720301 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Sep 10 01:08:24.720307 kernel: sched_clock: Marking stable (886231514, 226707400)->(1175893178, -62954264) Sep 10 01:08:24.720313 kernel: registered taskstats version 1 Sep 10 01:08:24.720319 kernel: Loading compiled-in X.509 certificates Sep 10 01:08:24.720325 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.191-flatcar: 3af57cd809cc9e43d7af9f276bb20b532a4147af' Sep 10 01:08:24.720333 kernel: Key type .fscrypt registered Sep 10 01:08:24.720339 kernel: Key type fscrypt-provisioning registered Sep 10 01:08:24.720344 kernel: ima: No TPM chip found, activating TPM-bypass! Sep 10 01:08:24.720350 kernel: ima: Allocated hash algorithm: sha1 Sep 10 01:08:24.720358 kernel: ima: No architecture policies found Sep 10 01:08:24.720364 kernel: clk: Disabling unused clocks Sep 10 01:08:24.720370 kernel: Freeing unused kernel image (initmem) memory: 47492K Sep 10 01:08:24.720376 kernel: Write protecting the kernel read-only data: 28672k Sep 10 01:08:24.720384 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Sep 10 01:08:24.720390 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Sep 10 01:08:24.720396 kernel: Run /init as init process Sep 10 01:08:24.720403 kernel: with arguments: Sep 10 01:08:24.720409 kernel: /init Sep 10 01:08:24.720415 kernel: with environment: Sep 10 01:08:24.720421 kernel: HOME=/ Sep 10 01:08:24.720427 kernel: TERM=linux Sep 10 01:08:24.720432 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Sep 10 01:08:24.720440 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 10 01:08:24.720449 systemd[1]: Detected virtualization vmware. Sep 10 01:08:24.720456 systemd[1]: Detected architecture x86-64. Sep 10 01:08:24.720462 systemd[1]: Running in initrd. Sep 10 01:08:24.720468 systemd[1]: No hostname configured, using default hostname. Sep 10 01:08:24.720474 systemd[1]: Hostname set to . Sep 10 01:08:24.720481 systemd[1]: Initializing machine ID from random generator. Sep 10 01:08:24.720487 systemd[1]: Queued start job for default target initrd.target. Sep 10 01:08:24.720494 systemd[1]: Started systemd-ask-password-console.path. Sep 10 01:08:24.720500 systemd[1]: Reached target cryptsetup.target. Sep 10 01:08:24.720506 systemd[1]: Reached target paths.target. Sep 10 01:08:24.720512 systemd[1]: Reached target slices.target. Sep 10 01:08:24.720518 systemd[1]: Reached target swap.target. Sep 10 01:08:24.720524 systemd[1]: Reached target timers.target. Sep 10 01:08:24.720531 systemd[1]: Listening on iscsid.socket. Sep 10 01:08:24.720539 systemd[1]: Listening on iscsiuio.socket. Sep 10 01:08:24.720546 systemd[1]: Listening on systemd-journald-audit.socket. Sep 10 01:08:24.720552 systemd[1]: Listening on systemd-journald-dev-log.socket. Sep 10 01:08:24.720558 systemd[1]: Listening on systemd-journald.socket. Sep 10 01:08:24.720564 systemd[1]: Listening on systemd-networkd.socket. Sep 10 01:08:24.720571 systemd[1]: Listening on systemd-udevd-control.socket. Sep 10 01:08:24.720577 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 10 01:08:24.720583 systemd[1]: Reached target sockets.target. Sep 10 01:08:24.720590 systemd[1]: Starting kmod-static-nodes.service... Sep 10 01:08:24.720597 systemd[1]: Finished network-cleanup.service. Sep 10 01:08:24.720603 systemd[1]: Starting systemd-fsck-usr.service... Sep 10 01:08:24.720610 systemd[1]: Starting systemd-journald.service... Sep 10 01:08:24.720616 systemd[1]: Starting systemd-modules-load.service... Sep 10 01:08:24.720622 systemd[1]: Starting systemd-resolved.service... Sep 10 01:08:24.720629 systemd[1]: Starting systemd-vconsole-setup.service... Sep 10 01:08:24.720635 systemd[1]: Finished kmod-static-nodes.service. Sep 10 01:08:24.720641 systemd[1]: Finished systemd-fsck-usr.service. Sep 10 01:08:24.720647 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 10 01:08:24.720655 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 10 01:08:24.720661 systemd[1]: Finished systemd-vconsole-setup.service. Sep 10 01:08:24.720667 kernel: audit: type=1130 audit(1757466504.653:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:24.720674 systemd[1]: Starting dracut-cmdline-ask.service... Sep 10 01:08:24.720680 systemd[1]: Finished dracut-cmdline-ask.service. Sep 10 01:08:24.720686 systemd[1]: Starting dracut-cmdline.service... Sep 10 01:08:24.720692 kernel: audit: type=1130 audit(1757466504.674:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:24.720698 systemd[1]: Started systemd-resolved.service. Sep 10 01:08:24.720705 systemd[1]: Reached target nss-lookup.target. Sep 10 01:08:24.720712 kernel: audit: type=1130 audit(1757466504.684:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:24.720718 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Sep 10 01:08:24.720725 kernel: Bridge firewalling registered Sep 10 01:08:24.720731 kernel: SCSI subsystem initialized Sep 10 01:08:24.720741 systemd-journald[217]: Journal started Sep 10 01:08:24.720773 systemd-journald[217]: Runtime Journal (/run/log/journal/0983396f88924cdcac81540cbb661006) is 4.8M, max 38.8M, 34.0M free. Sep 10 01:08:24.653000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:24.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:24.684000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:24.646603 systemd-modules-load[218]: Inserted module 'overlay' Sep 10 01:08:24.680037 systemd-resolved[219]: Positive Trust Anchors: Sep 10 01:08:24.724323 systemd[1]: Started systemd-journald.service. Sep 10 01:08:24.724336 kernel: audit: type=1130 audit(1757466504.720:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:24.720000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:24.680043 systemd-resolved[219]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 10 01:08:24.680063 systemd-resolved[219]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 10 01:08:24.682193 systemd-resolved[219]: Defaulting to hostname 'linux'. Sep 10 01:08:24.698722 systemd-modules-load[218]: Inserted module 'br_netfilter' Sep 10 01:08:24.726026 dracut-cmdline[233]: dracut-dracut-053 Sep 10 01:08:24.726026 dracut-cmdline[233]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LA Sep 10 01:08:24.726026 dracut-cmdline[233]: BEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=ebdf135b7dd8c9596dea7f2ca48bf31be0143f7cba32a9cc0282a66ca6db3272 Sep 10 01:08:24.736878 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Sep 10 01:08:24.736905 kernel: device-mapper: uevent: version 1.0.3 Sep 10 01:08:24.736913 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Sep 10 01:08:24.736502 systemd-modules-load[218]: Inserted module 'dm_multipath' Sep 10 01:08:24.736871 systemd[1]: Finished systemd-modules-load.service. Sep 10 01:08:24.737395 systemd[1]: Starting systemd-sysctl.service... Sep 10 01:08:24.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:24.740229 kernel: audit: type=1130 audit(1757466504.735:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:24.746224 kernel: Loading iSCSI transport class v2.0-870. Sep 10 01:08:24.745000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:24.746907 systemd[1]: Finished systemd-sysctl.service. Sep 10 01:08:24.750228 kernel: audit: type=1130 audit(1757466504.745:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:24.757227 kernel: iscsi: registered transport (tcp) Sep 10 01:08:24.778245 kernel: iscsi: registered transport (qla4xxx) Sep 10 01:08:24.778295 kernel: QLogic iSCSI HBA Driver Sep 10 01:08:24.798978 systemd[1]: Finished dracut-cmdline.service. Sep 10 01:08:24.799853 systemd[1]: Starting dracut-pre-udev.service... Sep 10 01:08:24.797000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:24.804232 kernel: audit: type=1130 audit(1757466504.797:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:24.838239 kernel: raid6: avx2x4 gen() 48143 MB/s Sep 10 01:08:24.855245 kernel: raid6: avx2x4 xor() 15563 MB/s Sep 10 01:08:24.872247 kernel: raid6: avx2x2 gen() 49100 MB/s Sep 10 01:08:24.889238 kernel: raid6: avx2x2 xor() 31342 MB/s Sep 10 01:08:24.906234 kernel: raid6: avx2x1 gen() 43669 MB/s Sep 10 01:08:24.923233 kernel: raid6: avx2x1 xor() 27512 MB/s Sep 10 01:08:24.940238 kernel: raid6: sse2x4 gen() 21149 MB/s Sep 10 01:08:24.957230 kernel: raid6: sse2x4 xor() 11935 MB/s Sep 10 01:08:24.974228 kernel: raid6: sse2x2 gen() 21335 MB/s Sep 10 01:08:24.991228 kernel: raid6: sse2x2 xor() 13275 MB/s Sep 10 01:08:25.008237 kernel: raid6: sse2x1 gen() 18055 MB/s Sep 10 01:08:25.025422 kernel: raid6: sse2x1 xor() 8816 MB/s Sep 10 01:08:25.025451 kernel: raid6: using algorithm avx2x2 gen() 49100 MB/s Sep 10 01:08:25.025460 kernel: raid6: .... xor() 31342 MB/s, rmw enabled Sep 10 01:08:25.026610 kernel: raid6: using avx2x2 recovery algorithm Sep 10 01:08:25.035228 kernel: xor: automatically using best checksumming function avx Sep 10 01:08:25.096340 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Sep 10 01:08:25.100268 systemd[1]: Finished dracut-pre-udev.service. Sep 10 01:08:25.099000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:25.103723 kernel: audit: type=1130 audit(1757466505.099:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:25.103743 kernel: audit: type=1334 audit(1757466505.101:10): prog-id=7 op=LOAD Sep 10 01:08:25.101000 audit: BPF prog-id=7 op=LOAD Sep 10 01:08:25.103140 systemd[1]: Starting systemd-udevd.service... Sep 10 01:08:25.101000 audit: BPF prog-id=8 op=LOAD Sep 10 01:08:25.111414 systemd-udevd[415]: Using default interface naming scheme 'v252'. Sep 10 01:08:25.114123 systemd[1]: Started systemd-udevd.service. Sep 10 01:08:25.114643 systemd[1]: Starting dracut-pre-trigger.service... Sep 10 01:08:25.113000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:25.122419 dracut-pre-trigger[420]: rd.md=0: removing MD RAID activation Sep 10 01:08:25.137000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:25.138603 systemd[1]: Finished dracut-pre-trigger.service. Sep 10 01:08:25.139178 systemd[1]: Starting systemd-udev-trigger.service... Sep 10 01:08:25.206772 systemd[1]: Finished systemd-udev-trigger.service. Sep 10 01:08:25.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:25.269231 kernel: VMware PVSCSI driver - version 1.0.7.0-k Sep 10 01:08:25.270226 kernel: vmw_pvscsi: using 64bit dma Sep 10 01:08:25.272733 kernel: vmw_pvscsi: max_id: 16 Sep 10 01:08:25.272750 kernel: vmw_pvscsi: setting ring_pages to 8 Sep 10 01:08:25.277228 kernel: VMware vmxnet3 virtual NIC driver - version 1.6.0.0-k-NAPI Sep 10 01:08:25.284930 kernel: vmxnet3 0000:0b:00.0: # of Tx queues : 2, # of Rx queues : 2 Sep 10 01:08:25.285521 kernel: vmxnet3 0000:0b:00.0 eth0: NIC Link is Up 10000 Mbps Sep 10 01:08:25.287750 kernel: vmw_pvscsi: enabling reqCallThreshold Sep 10 01:08:25.287773 kernel: vmw_pvscsi: driver-based request coalescing enabled Sep 10 01:08:25.287785 kernel: vmw_pvscsi: using MSI-X Sep 10 01:08:25.289267 kernel: scsi host0: VMware PVSCSI storage adapter rev 2, req/cmp/msg rings: 8/8/1 pages, cmd_per_lun=254 Sep 10 01:08:25.290233 kernel: vmw_pvscsi 0000:03:00.0: VMware PVSCSI rev 2 host #0 Sep 10 01:08:25.290328 kernel: scsi 0:0:0:0: Direct-Access VMware Virtual disk 2.0 PQ: 0 ANSI: 6 Sep 10 01:08:25.295243 kernel: cryptd: max_cpu_qlen set to 1000 Sep 10 01:08:25.301232 kernel: libata version 3.00 loaded. Sep 10 01:08:25.304235 kernel: ata_piix 0000:00:07.1: version 2.13 Sep 10 01:08:25.311079 kernel: scsi host1: ata_piix Sep 10 01:08:25.311157 kernel: scsi host2: ata_piix Sep 10 01:08:25.311225 kernel: ata1: PATA max UDMA/33 cmd 0x1f0 ctl 0x3f6 bmdma 0x1060 irq 14 Sep 10 01:08:25.311235 kernel: AVX2 version of gcm_enc/dec engaged. Sep 10 01:08:25.311242 kernel: ata2: PATA max UDMA/33 cmd 0x170 ctl 0x376 bmdma 0x1068 irq 15 Sep 10 01:08:25.315232 kernel: vmxnet3 0000:0b:00.0 ens192: renamed from eth0 Sep 10 01:08:25.317232 kernel: AES CTR mode by8 optimization enabled Sep 10 01:08:25.477280 kernel: ata2.00: ATAPI: VMware Virtual IDE CDROM Drive, 00000001, max UDMA/33 Sep 10 01:08:25.481228 kernel: scsi 2:0:0:0: CD-ROM NECVMWar VMware IDE CDR10 1.00 PQ: 0 ANSI: 5 Sep 10 01:08:25.492675 kernel: sd 0:0:0:0: [sda] 17805312 512-byte logical blocks: (9.12 GB/8.49 GiB) Sep 10 01:08:25.497972 kernel: sd 0:0:0:0: [sda] Write Protect is off Sep 10 01:08:25.498045 kernel: sd 0:0:0:0: [sda] Mode Sense: 31 00 00 00 Sep 10 01:08:25.498132 kernel: sd 0:0:0:0: [sda] Cache data unavailable Sep 10 01:08:25.498193 kernel: sd 0:0:0:0: [sda] Assuming drive cache: write through Sep 10 01:08:25.498269 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Sep 10 01:08:25.498279 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Sep 10 01:08:25.516463 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 1x/1x writer dvd-ram cd/rw xa/form2 cdda tray Sep 10 01:08:25.532319 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Sep 10 01:08:25.532331 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/sda6 scanned by (udev-worker) (474) Sep 10 01:08:25.532343 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Sep 10 01:08:25.523871 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Sep 10 01:08:25.525791 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Sep 10 01:08:25.528902 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 10 01:08:25.534544 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Sep 10 01:08:25.534817 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Sep 10 01:08:25.535496 systemd[1]: Starting disk-uuid.service... Sep 10 01:08:25.562246 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Sep 10 01:08:25.567234 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Sep 10 01:08:26.571041 disk-uuid[547]: The operation has completed successfully. Sep 10 01:08:26.571244 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Sep 10 01:08:26.610537 systemd[1]: disk-uuid.service: Deactivated successfully. Sep 10 01:08:26.610597 systemd[1]: Finished disk-uuid.service. Sep 10 01:08:26.609000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:26.609000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:26.611254 systemd[1]: Starting verity-setup.service... Sep 10 01:08:26.621233 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Sep 10 01:08:26.665647 systemd[1]: Found device dev-mapper-usr.device. Sep 10 01:08:26.666371 systemd[1]: Mounting sysusr-usr.mount... Sep 10 01:08:26.668097 systemd[1]: Finished verity-setup.service. Sep 10 01:08:26.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:26.891240 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Sep 10 01:08:26.891634 systemd[1]: Mounted sysusr-usr.mount. Sep 10 01:08:26.892576 systemd[1]: Starting afterburn-network-kargs.service... Sep 10 01:08:26.893429 systemd[1]: Starting ignition-setup.service... Sep 10 01:08:27.008757 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Sep 10 01:08:27.008790 kernel: BTRFS info (device sda6): using free space tree Sep 10 01:08:27.008798 kernel: BTRFS info (device sda6): has skinny extents Sep 10 01:08:27.094237 kernel: BTRFS info (device sda6): enabling ssd optimizations Sep 10 01:08:27.101519 systemd[1]: mnt-oem.mount: Deactivated successfully. Sep 10 01:08:27.106493 systemd[1]: Finished ignition-setup.service. Sep 10 01:08:27.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:27.107111 systemd[1]: Starting ignition-fetch-offline.service... Sep 10 01:08:27.172865 systemd[1]: Finished afterburn-network-kargs.service. Sep 10 01:08:27.171000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=afterburn-network-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:27.173592 systemd[1]: Starting parse-ip-for-networkd.service... Sep 10 01:08:27.219728 systemd[1]: Finished parse-ip-for-networkd.service. Sep 10 01:08:27.218000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:27.219000 audit: BPF prog-id=9 op=LOAD Sep 10 01:08:27.220706 systemd[1]: Starting systemd-networkd.service... Sep 10 01:08:27.236862 systemd-networkd[733]: lo: Link UP Sep 10 01:08:27.236869 systemd-networkd[733]: lo: Gained carrier Sep 10 01:08:27.240870 kernel: vmxnet3 0000:0b:00.0 ens192: intr type 3, mode 0, 3 vectors allocated Sep 10 01:08:27.241017 kernel: vmxnet3 0000:0b:00.0 ens192: NIC Link is Up 10000 Mbps Sep 10 01:08:27.236000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:27.237327 systemd-networkd[733]: Enumeration completed Sep 10 01:08:27.237530 systemd-networkd[733]: ens192: Configuring with /etc/systemd/network/10-dracut-cmdline-99.network. Sep 10 01:08:27.237540 systemd[1]: Started systemd-networkd.service. Sep 10 01:08:27.237686 systemd[1]: Reached target network.target. Sep 10 01:08:27.238214 systemd[1]: Starting iscsiuio.service... Sep 10 01:08:27.241320 systemd-networkd[733]: ens192: Link UP Sep 10 01:08:27.241323 systemd-networkd[733]: ens192: Gained carrier Sep 10 01:08:27.244140 systemd[1]: Started iscsiuio.service. Sep 10 01:08:27.243000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:27.244866 systemd[1]: Starting iscsid.service... Sep 10 01:08:27.246910 iscsid[738]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Sep 10 01:08:27.246910 iscsid[738]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Sep 10 01:08:27.246910 iscsid[738]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Sep 10 01:08:27.246910 iscsid[738]: If using hardware iscsi like qla4xxx this message can be ignored. Sep 10 01:08:27.247750 iscsid[738]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Sep 10 01:08:27.247750 iscsid[738]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Sep 10 01:08:27.247000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:27.247836 systemd[1]: Started iscsid.service. Sep 10 01:08:27.249362 systemd[1]: Starting dracut-initqueue.service... Sep 10 01:08:27.255861 systemd[1]: Finished dracut-initqueue.service. Sep 10 01:08:27.254000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:27.256007 systemd[1]: Reached target remote-fs-pre.target. Sep 10 01:08:27.256165 systemd[1]: Reached target remote-cryptsetup.target. Sep 10 01:08:27.256354 systemd[1]: Reached target remote-fs.target. Sep 10 01:08:27.256956 systemd[1]: Starting dracut-pre-mount.service... Sep 10 01:08:27.262769 systemd[1]: Finished dracut-pre-mount.service. Sep 10 01:08:27.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:27.282283 ignition[605]: Ignition 2.14.0 Sep 10 01:08:27.282291 ignition[605]: Stage: fetch-offline Sep 10 01:08:27.282345 ignition[605]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 10 01:08:27.282361 ignition[605]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Sep 10 01:08:27.285781 ignition[605]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Sep 10 01:08:27.286076 ignition[605]: parsed url from cmdline: "" Sep 10 01:08:27.286131 ignition[605]: no config URL provided Sep 10 01:08:27.286267 ignition[605]: reading system config file "/usr/lib/ignition/user.ign" Sep 10 01:08:27.286415 ignition[605]: no config at "/usr/lib/ignition/user.ign" Sep 10 01:08:27.297252 ignition[605]: config successfully fetched Sep 10 01:08:27.297278 ignition[605]: parsing config with SHA512: 4115d535cf1fdf4f182462d479b5a940a4210180f6600e9cbb9c4c6c340516365091bc88a7f977b7157d76ce4007d165ec8218aa21d8ec5d33a5ab38a59d5ba9 Sep 10 01:08:27.301935 unknown[605]: fetched base config from "system" Sep 10 01:08:27.301944 unknown[605]: fetched user config from "vmware" Sep 10 01:08:27.302269 ignition[605]: fetch-offline: fetch-offline passed Sep 10 01:08:27.302308 ignition[605]: Ignition finished successfully Sep 10 01:08:27.302936 systemd[1]: Finished ignition-fetch-offline.service. Sep 10 01:08:27.303106 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Sep 10 01:08:27.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:27.303578 systemd[1]: Starting ignition-kargs.service... Sep 10 01:08:27.309664 ignition[753]: Ignition 2.14.0 Sep 10 01:08:27.309674 ignition[753]: Stage: kargs Sep 10 01:08:27.309763 ignition[753]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 10 01:08:27.309777 ignition[753]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Sep 10 01:08:27.311700 ignition[753]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Sep 10 01:08:27.313428 ignition[753]: kargs: kargs passed Sep 10 01:08:27.313458 ignition[753]: Ignition finished successfully Sep 10 01:08:27.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:27.314462 systemd[1]: Finished ignition-kargs.service. Sep 10 01:08:27.315080 systemd[1]: Starting ignition-disks.service... Sep 10 01:08:27.319514 ignition[760]: Ignition 2.14.0 Sep 10 01:08:27.319521 ignition[760]: Stage: disks Sep 10 01:08:27.319590 ignition[760]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 10 01:08:27.319601 ignition[760]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Sep 10 01:08:27.320870 ignition[760]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Sep 10 01:08:27.322424 ignition[760]: disks: disks passed Sep 10 01:08:27.322456 ignition[760]: Ignition finished successfully Sep 10 01:08:27.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:27.323190 systemd[1]: Finished ignition-disks.service. Sep 10 01:08:27.323361 systemd[1]: Reached target initrd-root-device.target. Sep 10 01:08:27.323455 systemd[1]: Reached target local-fs-pre.target. Sep 10 01:08:27.323542 systemd[1]: Reached target local-fs.target. Sep 10 01:08:27.323623 systemd[1]: Reached target sysinit.target. Sep 10 01:08:27.323703 systemd[1]: Reached target basic.target. Sep 10 01:08:27.324289 systemd[1]: Starting systemd-fsck-root.service... Sep 10 01:08:27.338743 systemd-fsck[768]: ROOT: clean, 629/1628000 files, 124065/1617920 blocks Sep 10 01:08:27.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:27.340491 systemd[1]: Finished systemd-fsck-root.service. Sep 10 01:08:27.341042 systemd[1]: Mounting sysroot.mount... Sep 10 01:08:27.351235 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Sep 10 01:08:27.351236 systemd[1]: Mounted sysroot.mount. Sep 10 01:08:27.351412 systemd[1]: Reached target initrd-root-fs.target. Sep 10 01:08:27.352313 systemd[1]: Mounting sysroot-usr.mount... Sep 10 01:08:27.352669 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Sep 10 01:08:27.352693 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Sep 10 01:08:27.352707 systemd[1]: Reached target ignition-diskful.target. Sep 10 01:08:27.354176 systemd[1]: Mounted sysroot-usr.mount. Sep 10 01:08:27.354883 systemd[1]: Starting initrd-setup-root.service... Sep 10 01:08:27.357801 initrd-setup-root[778]: cut: /sysroot/etc/passwd: No such file or directory Sep 10 01:08:27.361258 initrd-setup-root[786]: cut: /sysroot/etc/group: No such file or directory Sep 10 01:08:27.363686 initrd-setup-root[794]: cut: /sysroot/etc/shadow: No such file or directory Sep 10 01:08:27.365742 initrd-setup-root[802]: cut: /sysroot/etc/gshadow: No such file or directory Sep 10 01:08:27.404000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:27.405495 systemd[1]: Finished initrd-setup-root.service. Sep 10 01:08:27.406071 systemd[1]: Starting ignition-mount.service... Sep 10 01:08:27.406665 systemd[1]: Starting sysroot-boot.service... Sep 10 01:08:27.411580 bash[819]: umount: /sysroot/usr/share/oem: not mounted. Sep 10 01:08:27.417662 ignition[820]: INFO : Ignition 2.14.0 Sep 10 01:08:27.417913 ignition[820]: INFO : Stage: mount Sep 10 01:08:27.418143 ignition[820]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 10 01:08:27.418311 ignition[820]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Sep 10 01:08:27.419877 ignition[820]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Sep 10 01:08:27.422797 ignition[820]: INFO : mount: mount passed Sep 10 01:08:27.422928 ignition[820]: INFO : Ignition finished successfully Sep 10 01:08:27.423484 systemd[1]: Finished ignition-mount.service. Sep 10 01:08:27.422000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:27.434143 systemd[1]: Finished sysroot-boot.service. Sep 10 01:08:27.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:27.652323 systemd-resolved[219]: Detected conflict on linux IN A 139.178.70.105 Sep 10 01:08:27.652333 systemd-resolved[219]: Hostname conflict, changing published hostname from 'linux' to 'linux6'. Sep 10 01:08:27.681689 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 10 01:08:27.690039 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 scanned by mount (829) Sep 10 01:08:27.690065 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Sep 10 01:08:27.690073 kernel: BTRFS info (device sda6): using free space tree Sep 10 01:08:27.690733 kernel: BTRFS info (device sda6): has skinny extents Sep 10 01:08:27.695231 kernel: BTRFS info (device sda6): enabling ssd optimizations Sep 10 01:08:27.696727 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 10 01:08:27.697282 systemd[1]: Starting ignition-files.service... Sep 10 01:08:27.706193 ignition[849]: INFO : Ignition 2.14.0 Sep 10 01:08:27.706446 ignition[849]: INFO : Stage: files Sep 10 01:08:27.706623 ignition[849]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 10 01:08:27.706777 ignition[849]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Sep 10 01:08:27.708283 ignition[849]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Sep 10 01:08:27.712074 ignition[849]: DEBUG : files: compiled without relabeling support, skipping Sep 10 01:08:27.712835 ignition[849]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Sep 10 01:08:27.712992 ignition[849]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Sep 10 01:08:27.715230 ignition[849]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Sep 10 01:08:27.715457 ignition[849]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Sep 10 01:08:27.716228 unknown[849]: wrote ssh authorized keys file for user: core Sep 10 01:08:27.716434 ignition[849]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Sep 10 01:08:27.717052 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Sep 10 01:08:27.717278 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-amd64.tar.gz: attempt #1 Sep 10 01:08:27.767779 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Sep 10 01:08:28.217251 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Sep 10 01:08:28.217497 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Sep 10 01:08:28.217497 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Sep 10 01:08:28.217497 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Sep 10 01:08:28.222350 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Sep 10 01:08:28.222521 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 10 01:08:28.222521 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 10 01:08:28.222521 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 10 01:08:28.223694 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 10 01:08:28.223863 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Sep 10 01:08:28.224021 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Sep 10 01:08:28.224021 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Sep 10 01:08:28.224021 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Sep 10 01:08:28.224590 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/vmtoolsd.service" Sep 10 01:08:28.224590 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Sep 10 01:08:28.226879 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2469045909" Sep 10 01:08:28.227066 ignition[849]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2469045909": device or resource busy Sep 10 01:08:28.227066 ignition[849]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2469045909", trying btrfs: device or resource busy Sep 10 01:08:28.227066 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2469045909" Sep 10 01:08:28.228563 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2469045909" Sep 10 01:08:28.229420 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem2469045909" Sep 10 01:08:28.229631 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem2469045909" Sep 10 01:08:28.229818 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/vmtoolsd.service" Sep 10 01:08:28.230051 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Sep 10 01:08:28.230200 systemd[1]: mnt-oem2469045909.mount: Deactivated successfully. Sep 10 01:08:28.230431 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(e): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-x86-64.raw: attempt #1 Sep 10 01:08:28.743533 systemd-networkd[733]: ens192: Gained IPv6LL Sep 10 01:08:28.804354 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(e): GET result: OK Sep 10 01:08:30.060286 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Sep 10 01:08:30.075530 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/systemd/network/00-vmware.network" Sep 10 01:08:30.075786 ignition[849]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/systemd/network/00-vmware.network" Sep 10 01:08:30.075786 ignition[849]: INFO : files: op(10): [started] processing unit "vmtoolsd.service" Sep 10 01:08:30.075786 ignition[849]: INFO : files: op(10): [finished] processing unit "vmtoolsd.service" Sep 10 01:08:30.075786 ignition[849]: INFO : files: op(11): [started] processing unit "prepare-helm.service" Sep 10 01:08:30.075786 ignition[849]: INFO : files: op(11): op(12): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 10 01:08:30.075786 ignition[849]: INFO : files: op(11): op(12): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 10 01:08:30.075786 ignition[849]: INFO : files: op(11): [finished] processing unit "prepare-helm.service" Sep 10 01:08:30.075786 ignition[849]: INFO : files: op(13): [started] processing unit "coreos-metadata.service" Sep 10 01:08:30.075786 ignition[849]: INFO : files: op(13): op(14): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Sep 10 01:08:30.077234 ignition[849]: INFO : files: op(13): op(14): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Sep 10 01:08:30.077234 ignition[849]: INFO : files: op(13): [finished] processing unit "coreos-metadata.service" Sep 10 01:08:30.077234 ignition[849]: INFO : files: op(15): [started] setting preset to enabled for "vmtoolsd.service" Sep 10 01:08:30.077234 ignition[849]: INFO : files: op(15): [finished] setting preset to enabled for "vmtoolsd.service" Sep 10 01:08:30.077234 ignition[849]: INFO : files: op(16): [started] setting preset to enabled for "prepare-helm.service" Sep 10 01:08:30.077234 ignition[849]: INFO : files: op(16): [finished] setting preset to enabled for "prepare-helm.service" Sep 10 01:08:30.077234 ignition[849]: INFO : files: op(17): [started] setting preset to disabled for "coreos-metadata.service" Sep 10 01:08:30.077234 ignition[849]: INFO : files: op(17): op(18): [started] removing enablement symlink(s) for "coreos-metadata.service" Sep 10 01:08:30.391608 ignition[849]: INFO : files: op(17): op(18): [finished] removing enablement symlink(s) for "coreos-metadata.service" Sep 10 01:08:30.391827 ignition[849]: INFO : files: op(17): [finished] setting preset to disabled for "coreos-metadata.service" Sep 10 01:08:30.391827 ignition[849]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Sep 10 01:08:30.391827 ignition[849]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Sep 10 01:08:30.391827 ignition[849]: INFO : files: files passed Sep 10 01:08:30.391827 ignition[849]: INFO : Ignition finished successfully Sep 10 01:08:30.393258 systemd[1]: Finished ignition-files.service. Sep 10 01:08:30.392000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.394827 systemd[1]: Starting initrd-setup-root-after-ignition.service... Sep 10 01:08:30.398530 kernel: kauditd_printk_skb: 23 callbacks suppressed Sep 10 01:08:30.398545 kernel: audit: type=1130 audit(1757466510.392:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.394944 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Sep 10 01:08:30.395353 systemd[1]: Starting ignition-quench.service... Sep 10 01:08:30.401367 systemd[1]: ignition-quench.service: Deactivated successfully. Sep 10 01:08:30.401421 systemd[1]: Finished ignition-quench.service. Sep 10 01:08:30.400000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.402626 initrd-setup-root-after-ignition[875]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Sep 10 01:08:30.406743 kernel: audit: type=1130 audit(1757466510.400:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.406758 kernel: audit: type=1131 audit(1757466510.400:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.404374 systemd[1]: Finished initrd-setup-root-after-ignition.service. Sep 10 01:08:30.409443 kernel: audit: type=1130 audit(1757466510.405:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.406863 systemd[1]: Reached target ignition-complete.target. Sep 10 01:08:30.409964 systemd[1]: Starting initrd-parse-etc.service... Sep 10 01:08:30.418058 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Sep 10 01:08:30.418106 systemd[1]: Finished initrd-parse-etc.service. Sep 10 01:08:30.423986 kernel: audit: type=1130 audit(1757466510.417:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.424002 kernel: audit: type=1131 audit(1757466510.417:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.417000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.417000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.418302 systemd[1]: Reached target initrd-fs.target. Sep 10 01:08:30.418410 systemd[1]: Reached target initrd.target. Sep 10 01:08:30.423340 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Sep 10 01:08:30.423806 systemd[1]: Starting dracut-pre-pivot.service... Sep 10 01:08:30.434238 kernel: audit: type=1130 audit(1757466510.429:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.430557 systemd[1]: Finished dracut-pre-pivot.service. Sep 10 01:08:30.431095 systemd[1]: Starting initrd-cleanup.service... Sep 10 01:08:30.436765 systemd[1]: Stopped target nss-lookup.target. Sep 10 01:08:30.436930 systemd[1]: Stopped target remote-cryptsetup.target. Sep 10 01:08:30.437087 systemd[1]: Stopped target timers.target. Sep 10 01:08:30.437268 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Sep 10 01:08:30.437329 systemd[1]: Stopped dracut-pre-pivot.service. Sep 10 01:08:30.437612 systemd[1]: Stopped target initrd.target. Sep 10 01:08:30.440137 kernel: audit: type=1131 audit(1757466510.436:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.436000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.440062 systemd[1]: Stopped target basic.target. Sep 10 01:08:30.440274 systemd[1]: Stopped target ignition-complete.target. Sep 10 01:08:30.440428 systemd[1]: Stopped target ignition-diskful.target. Sep 10 01:08:30.440600 systemd[1]: Stopped target initrd-root-device.target. Sep 10 01:08:30.440783 systemd[1]: Stopped target remote-fs.target. Sep 10 01:08:30.440958 systemd[1]: Stopped target remote-fs-pre.target. Sep 10 01:08:30.441134 systemd[1]: Stopped target sysinit.target. Sep 10 01:08:30.441315 systemd[1]: Stopped target local-fs.target. Sep 10 01:08:30.441490 systemd[1]: Stopped target local-fs-pre.target. Sep 10 01:08:30.441653 systemd[1]: Stopped target swap.target. Sep 10 01:08:30.441804 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Sep 10 01:08:30.441864 systemd[1]: Stopped dracut-pre-mount.service. Sep 10 01:08:30.444602 kernel: audit: type=1131 audit(1757466510.440:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.440000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.442043 systemd[1]: Stopped target cryptsetup.target. Sep 10 01:08:30.444504 systemd[1]: dracut-initqueue.service: Deactivated successfully. Sep 10 01:08:30.447311 kernel: audit: type=1131 audit(1757466510.443:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.443000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.444567 systemd[1]: Stopped dracut-initqueue.service. Sep 10 01:08:30.446000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.444718 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Sep 10 01:08:30.444775 systemd[1]: Stopped ignition-fetch-offline.service. Sep 10 01:08:30.447318 systemd[1]: Stopped target paths.target. Sep 10 01:08:30.447438 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Sep 10 01:08:30.449244 systemd[1]: Stopped systemd-ask-password-console.path. Sep 10 01:08:30.449399 systemd[1]: Stopped target slices.target. Sep 10 01:08:30.449582 systemd[1]: Stopped target sockets.target. Sep 10 01:08:30.449762 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Sep 10 01:08:30.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.449829 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Sep 10 01:08:30.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.449996 systemd[1]: ignition-files.service: Deactivated successfully. Sep 10 01:08:30.450051 systemd[1]: Stopped ignition-files.service. Sep 10 01:08:30.450703 systemd[1]: Stopping ignition-mount.service... Sep 10 01:08:30.454287 iscsid[738]: iscsid shutting down. Sep 10 01:08:30.452624 systemd[1]: Stopping iscsid.service... Sep 10 01:08:30.453000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.454340 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Sep 10 01:08:30.454427 systemd[1]: Stopped kmod-static-nodes.service. Sep 10 01:08:30.455151 systemd[1]: Stopping sysroot-boot.service... Sep 10 01:08:30.455496 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Sep 10 01:08:30.455586 systemd[1]: Stopped systemd-udev-trigger.service. Sep 10 01:08:30.455817 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Sep 10 01:08:30.454000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.455888 systemd[1]: Stopped dracut-pre-trigger.service. Sep 10 01:08:30.454000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.457069 ignition[888]: INFO : Ignition 2.14.0 Sep 10 01:08:30.457261 systemd[1]: iscsid.service: Deactivated successfully. Sep 10 01:08:30.457325 systemd[1]: Stopped iscsid.service. Sep 10 01:08:30.458575 ignition[888]: INFO : Stage: umount Sep 10 01:08:30.458575 ignition[888]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 10 01:08:30.458575 ignition[888]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Sep 10 01:08:30.459428 ignition[888]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Sep 10 01:08:30.461248 ignition[888]: INFO : umount: umount passed Sep 10 01:08:30.460000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.461704 ignition[888]: INFO : Ignition finished successfully Sep 10 01:08:30.461789 systemd[1]: iscsid.socket: Deactivated successfully. Sep 10 01:08:30.461838 systemd[1]: Closed iscsid.socket. Sep 10 01:08:30.463591 systemd[1]: Stopping iscsiuio.service... Sep 10 01:08:30.464166 systemd[1]: initrd-cleanup.service: Deactivated successfully. Sep 10 01:08:30.464444 systemd[1]: Finished initrd-cleanup.service. Sep 10 01:08:30.463000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.463000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.464666 systemd[1]: iscsiuio.service: Deactivated successfully. Sep 10 01:08:30.464717 systemd[1]: Stopped iscsiuio.service. Sep 10 01:08:30.463000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.465065 systemd[1]: ignition-mount.service: Deactivated successfully. Sep 10 01:08:30.465188 systemd[1]: Stopped ignition-mount.service. Sep 10 01:08:30.465000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.466904 systemd[1]: sysroot-boot.mount: Deactivated successfully. Sep 10 01:08:30.467529 systemd[1]: Stopped target network.target. Sep 10 01:08:30.467645 systemd[1]: iscsiuio.socket: Deactivated successfully. Sep 10 01:08:30.467662 systemd[1]: Closed iscsiuio.socket. Sep 10 01:08:30.466000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.467793 systemd[1]: ignition-disks.service: Deactivated successfully. Sep 10 01:08:30.466000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.467813 systemd[1]: Stopped ignition-disks.service. Sep 10 01:08:30.467975 systemd[1]: ignition-kargs.service: Deactivated successfully. Sep 10 01:08:30.467995 systemd[1]: Stopped ignition-kargs.service. Sep 10 01:08:30.467000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.468120 systemd[1]: ignition-setup.service: Deactivated successfully. Sep 10 01:08:30.468138 systemd[1]: Stopped ignition-setup.service. Sep 10 01:08:30.468380 systemd[1]: Stopping systemd-networkd.service... Sep 10 01:08:30.468747 systemd[1]: Stopping systemd-resolved.service... Sep 10 01:08:30.472976 systemd[1]: systemd-resolved.service: Deactivated successfully. Sep 10 01:08:30.473027 systemd[1]: Stopped systemd-resolved.service. Sep 10 01:08:30.471000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.474161 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 10 01:08:30.474220 systemd[1]: Stopped systemd-networkd.service. Sep 10 01:08:30.473000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.474713 systemd[1]: systemd-networkd.socket: Deactivated successfully. Sep 10 01:08:30.474734 systemd[1]: Closed systemd-networkd.socket. Sep 10 01:08:30.474000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.474000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=afterburn-network-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.474000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.474000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.475359 systemd[1]: Stopping network-cleanup.service... Sep 10 01:08:30.475453 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Sep 10 01:08:30.475483 systemd[1]: Stopped parse-ip-for-networkd.service. Sep 10 01:08:30.475614 systemd[1]: afterburn-network-kargs.service: Deactivated successfully. Sep 10 01:08:30.476000 audit: BPF prog-id=6 op=UNLOAD Sep 10 01:08:30.476000 audit: BPF prog-id=9 op=UNLOAD Sep 10 01:08:30.475634 systemd[1]: Stopped afterburn-network-kargs.service. Sep 10 01:08:30.475738 systemd[1]: systemd-sysctl.service: Deactivated successfully. Sep 10 01:08:30.475761 systemd[1]: Stopped systemd-sysctl.service. Sep 10 01:08:30.475904 systemd[1]: systemd-modules-load.service: Deactivated successfully. Sep 10 01:08:30.475924 systemd[1]: Stopped systemd-modules-load.service. Sep 10 01:08:30.478298 systemd[1]: Stopping systemd-udevd.service... Sep 10 01:08:30.479042 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Sep 10 01:08:30.481247 systemd[1]: network-cleanup.service: Deactivated successfully. Sep 10 01:08:30.481311 systemd[1]: Stopped network-cleanup.service. Sep 10 01:08:30.480000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.483117 systemd[1]: systemd-udevd.service: Deactivated successfully. Sep 10 01:08:30.483192 systemd[1]: Stopped systemd-udevd.service. Sep 10 01:08:30.482000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.483628 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Sep 10 01:08:30.483653 systemd[1]: Closed systemd-udevd-control.socket. Sep 10 01:08:30.483859 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Sep 10 01:08:30.483878 systemd[1]: Closed systemd-udevd-kernel.socket. Sep 10 01:08:30.482000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.484010 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Sep 10 01:08:30.483000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.484031 systemd[1]: Stopped dracut-pre-udev.service. Sep 10 01:08:30.483000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.484205 systemd[1]: dracut-cmdline.service: Deactivated successfully. Sep 10 01:08:30.484262 systemd[1]: Stopped dracut-cmdline.service. Sep 10 01:08:30.484463 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Sep 10 01:08:30.484484 systemd[1]: Stopped dracut-cmdline-ask.service. Sep 10 01:08:30.485015 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Sep 10 01:08:30.484000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.485133 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Sep 10 01:08:30.485168 systemd[1]: Stopped systemd-vconsole-setup.service. Sep 10 01:08:30.488843 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Sep 10 01:08:30.488901 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Sep 10 01:08:30.487000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.487000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.650845 systemd[1]: sysroot-boot.service: Deactivated successfully. Sep 10 01:08:30.650906 systemd[1]: Stopped sysroot-boot.service. Sep 10 01:08:30.649000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.651191 systemd[1]: Reached target initrd-switch-root.target. Sep 10 01:08:30.651306 systemd[1]: initrd-setup-root.service: Deactivated successfully. Sep 10 01:08:30.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:30.651330 systemd[1]: Stopped initrd-setup-root.service. Sep 10 01:08:30.651890 systemd[1]: Starting initrd-switch-root.service... Sep 10 01:08:30.658516 systemd[1]: Switching root. Sep 10 01:08:30.676361 systemd-journald[217]: Journal stopped Sep 10 01:08:33.629047 systemd-journald[217]: Received SIGTERM from PID 1 (systemd). Sep 10 01:08:33.629068 kernel: SELinux: Class mctp_socket not defined in policy. Sep 10 01:08:33.629077 kernel: SELinux: Class anon_inode not defined in policy. Sep 10 01:08:33.629083 kernel: SELinux: the above unknown classes and permissions will be allowed Sep 10 01:08:33.629089 kernel: SELinux: policy capability network_peer_controls=1 Sep 10 01:08:33.629096 kernel: SELinux: policy capability open_perms=1 Sep 10 01:08:33.629103 kernel: SELinux: policy capability extended_socket_class=1 Sep 10 01:08:33.629109 kernel: SELinux: policy capability always_check_network=0 Sep 10 01:08:33.629115 kernel: SELinux: policy capability cgroup_seclabel=1 Sep 10 01:08:33.629121 kernel: SELinux: policy capability nnp_nosuid_transition=1 Sep 10 01:08:33.629128 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Sep 10 01:08:33.629133 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Sep 10 01:08:33.629141 systemd[1]: Successfully loaded SELinux policy in 39.470ms. Sep 10 01:08:33.629149 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.176ms. Sep 10 01:08:33.629157 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 10 01:08:33.629164 systemd[1]: Detected virtualization vmware. Sep 10 01:08:33.629171 systemd[1]: Detected architecture x86-64. Sep 10 01:08:33.629178 systemd[1]: Detected first boot. Sep 10 01:08:33.629185 systemd[1]: Initializing machine ID from random generator. Sep 10 01:08:33.629192 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Sep 10 01:08:33.629198 systemd[1]: Populated /etc with preset unit settings. Sep 10 01:08:33.629205 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 10 01:08:33.629212 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 10 01:08:33.629249 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 10 01:08:33.629261 systemd[1]: initrd-switch-root.service: Deactivated successfully. Sep 10 01:08:33.629268 systemd[1]: Stopped initrd-switch-root.service. Sep 10 01:08:33.629275 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Sep 10 01:08:33.629282 systemd[1]: Created slice system-addon\x2dconfig.slice. Sep 10 01:08:33.629288 systemd[1]: Created slice system-addon\x2drun.slice. Sep 10 01:08:33.629295 systemd[1]: Created slice system-getty.slice. Sep 10 01:08:33.629301 systemd[1]: Created slice system-modprobe.slice. Sep 10 01:08:33.629310 systemd[1]: Created slice system-serial\x2dgetty.slice. Sep 10 01:08:33.629317 systemd[1]: Created slice system-system\x2dcloudinit.slice. Sep 10 01:08:33.629324 systemd[1]: Created slice system-systemd\x2dfsck.slice. Sep 10 01:08:33.629331 systemd[1]: Created slice user.slice. Sep 10 01:08:33.629337 systemd[1]: Started systemd-ask-password-console.path. Sep 10 01:08:33.629353 systemd[1]: Started systemd-ask-password-wall.path. Sep 10 01:08:33.629361 systemd[1]: Set up automount boot.automount. Sep 10 01:08:33.629367 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Sep 10 01:08:33.629376 systemd[1]: Stopped target initrd-switch-root.target. Sep 10 01:08:33.629383 systemd[1]: Stopped target initrd-fs.target. Sep 10 01:08:33.629392 systemd[1]: Stopped target initrd-root-fs.target. Sep 10 01:08:33.629399 systemd[1]: Reached target integritysetup.target. Sep 10 01:08:33.629406 systemd[1]: Reached target remote-cryptsetup.target. Sep 10 01:08:33.629413 systemd[1]: Reached target remote-fs.target. Sep 10 01:08:33.629421 systemd[1]: Reached target slices.target. Sep 10 01:08:33.629427 systemd[1]: Reached target swap.target. Sep 10 01:08:33.629434 systemd[1]: Reached target torcx.target. Sep 10 01:08:33.629442 systemd[1]: Reached target veritysetup.target. Sep 10 01:08:33.629449 systemd[1]: Listening on systemd-coredump.socket. Sep 10 01:08:33.629456 systemd[1]: Listening on systemd-initctl.socket. Sep 10 01:08:33.629463 systemd[1]: Listening on systemd-networkd.socket. Sep 10 01:08:33.629471 systemd[1]: Listening on systemd-udevd-control.socket. Sep 10 01:08:33.629479 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 10 01:08:33.629487 systemd[1]: Listening on systemd-userdbd.socket. Sep 10 01:08:33.629494 systemd[1]: Mounting dev-hugepages.mount... Sep 10 01:08:33.629501 systemd[1]: Mounting dev-mqueue.mount... Sep 10 01:08:33.629508 systemd[1]: Mounting media.mount... Sep 10 01:08:33.629515 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 01:08:33.629522 systemd[1]: Mounting sys-kernel-debug.mount... Sep 10 01:08:33.629530 systemd[1]: Mounting sys-kernel-tracing.mount... Sep 10 01:08:33.629538 systemd[1]: Mounting tmp.mount... Sep 10 01:08:33.629546 systemd[1]: Starting flatcar-tmpfiles.service... Sep 10 01:08:33.629553 systemd[1]: Starting ignition-delete-config.service... Sep 10 01:08:33.629560 systemd[1]: Starting kmod-static-nodes.service... Sep 10 01:08:33.629567 systemd[1]: Starting modprobe@configfs.service... Sep 10 01:08:33.629574 systemd[1]: Starting modprobe@dm_mod.service... Sep 10 01:08:33.629581 systemd[1]: Starting modprobe@drm.service... Sep 10 01:08:33.629588 systemd[1]: Starting modprobe@efi_pstore.service... Sep 10 01:08:33.629595 systemd[1]: Starting modprobe@fuse.service... Sep 10 01:08:33.629604 systemd[1]: Starting modprobe@loop.service... Sep 10 01:08:33.629611 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Sep 10 01:08:33.629618 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Sep 10 01:08:33.629627 systemd[1]: Stopped systemd-fsck-root.service. Sep 10 01:08:33.629633 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Sep 10 01:08:33.629641 systemd[1]: Stopped systemd-fsck-usr.service. Sep 10 01:08:33.629647 systemd[1]: Stopped systemd-journald.service. Sep 10 01:08:33.629654 systemd[1]: Starting systemd-journald.service... Sep 10 01:08:33.629661 systemd[1]: Starting systemd-modules-load.service... Sep 10 01:08:33.629670 systemd[1]: Starting systemd-network-generator.service... Sep 10 01:08:33.629677 systemd[1]: Starting systemd-remount-fs.service... Sep 10 01:08:33.629684 systemd[1]: Starting systemd-udev-trigger.service... Sep 10 01:08:33.629691 systemd[1]: verity-setup.service: Deactivated successfully. Sep 10 01:08:33.629698 systemd[1]: Stopped verity-setup.service. Sep 10 01:08:33.629705 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 01:08:33.629712 systemd[1]: Mounted dev-hugepages.mount. Sep 10 01:08:33.629719 systemd[1]: Mounted dev-mqueue.mount. Sep 10 01:08:33.629726 systemd[1]: Mounted media.mount. Sep 10 01:08:33.629735 systemd[1]: Mounted sys-kernel-debug.mount. Sep 10 01:08:33.629742 systemd[1]: Mounted sys-kernel-tracing.mount. Sep 10 01:08:33.629749 systemd[1]: Mounted tmp.mount. Sep 10 01:08:33.629756 systemd[1]: Finished kmod-static-nodes.service. Sep 10 01:08:33.629763 systemd[1]: modprobe@configfs.service: Deactivated successfully. Sep 10 01:08:33.629772 systemd-journald[1010]: Journal started Sep 10 01:08:33.629802 systemd-journald[1010]: Runtime Journal (/run/log/journal/7a5118a9c6414b4c9aa243e4bdb6ac32) is 4.8M, max 38.8M, 34.0M free. Sep 10 01:08:30.773000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Sep 10 01:08:30.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 10 01:08:30.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 10 01:08:30.869000 audit: BPF prog-id=10 op=LOAD Sep 10 01:08:30.869000 audit: BPF prog-id=10 op=UNLOAD Sep 10 01:08:30.869000 audit: BPF prog-id=11 op=LOAD Sep 10 01:08:30.869000 audit: BPF prog-id=11 op=UNLOAD Sep 10 01:08:31.398000 audit[921]: AVC avc: denied { associate } for pid=921 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 10 01:08:31.398000 audit[921]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001058d2 a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=904 pid=921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:08:31.398000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 10 01:08:31.400000 audit[921]: AVC avc: denied { associate } for pid=921 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Sep 10 01:08:31.400000 audit[921]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001059a9 a2=1ed a3=0 items=2 ppid=904 pid=921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:08:31.400000 audit: CWD cwd="/" Sep 10 01:08:31.400000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:31.400000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:31.400000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 10 01:08:33.523000 audit: BPF prog-id=12 op=LOAD Sep 10 01:08:33.523000 audit: BPF prog-id=3 op=UNLOAD Sep 10 01:08:33.523000 audit: BPF prog-id=13 op=LOAD Sep 10 01:08:33.523000 audit: BPF prog-id=14 op=LOAD Sep 10 01:08:33.523000 audit: BPF prog-id=4 op=UNLOAD Sep 10 01:08:33.523000 audit: BPF prog-id=5 op=UNLOAD Sep 10 01:08:33.525000 audit: BPF prog-id=15 op=LOAD Sep 10 01:08:33.525000 audit: BPF prog-id=12 op=UNLOAD Sep 10 01:08:33.525000 audit: BPF prog-id=16 op=LOAD Sep 10 01:08:33.525000 audit: BPF prog-id=17 op=LOAD Sep 10 01:08:33.525000 audit: BPF prog-id=13 op=UNLOAD Sep 10 01:08:33.525000 audit: BPF prog-id=14 op=UNLOAD Sep 10 01:08:33.525000 audit: BPF prog-id=18 op=LOAD Sep 10 01:08:33.525000 audit: BPF prog-id=15 op=UNLOAD Sep 10 01:08:33.525000 audit: BPF prog-id=19 op=LOAD Sep 10 01:08:33.525000 audit: BPF prog-id=20 op=LOAD Sep 10 01:08:33.525000 audit: BPF prog-id=16 op=UNLOAD Sep 10 01:08:33.525000 audit: BPF prog-id=17 op=UNLOAD Sep 10 01:08:33.526000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.528000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.528000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.534000 audit: BPF prog-id=18 op=UNLOAD Sep 10 01:08:33.595000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.599000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.599000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.599000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.601000 audit: BPF prog-id=21 op=LOAD Sep 10 01:08:33.601000 audit: BPF prog-id=22 op=LOAD Sep 10 01:08:33.601000 audit: BPF prog-id=23 op=LOAD Sep 10 01:08:33.601000 audit: BPF prog-id=19 op=UNLOAD Sep 10 01:08:33.601000 audit: BPF prog-id=20 op=UNLOAD Sep 10 01:08:33.616000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.626000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Sep 10 01:08:33.626000 audit[1010]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7fffdfe979f0 a2=4000 a3=7fffdfe97a8c items=0 ppid=1 pid=1010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:08:33.626000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Sep 10 01:08:33.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:31.373124 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:31Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 10 01:08:33.523544 systemd[1]: Queued start job for default target multi-user.target. Sep 10 01:08:31.381945 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:31Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 10 01:08:33.523554 systemd[1]: Unnecessary job was removed for dev-sda6.device. Sep 10 01:08:31.381965 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:31Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 10 01:08:33.527412 systemd[1]: systemd-journald.service: Deactivated successfully. Sep 10 01:08:31.381991 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:31Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Sep 10 01:08:31.381999 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:31Z" level=debug msg="skipped missing lower profile" missing profile=oem Sep 10 01:08:31.382024 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:31Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Sep 10 01:08:31.382034 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:31Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Sep 10 01:08:31.382202 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:31Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Sep 10 01:08:31.382254 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:31Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 10 01:08:33.631229 jq[989]: true Sep 10 01:08:31.382265 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:31Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 10 01:08:33.632967 systemd[1]: Finished modprobe@configfs.service. Sep 10 01:08:33.632987 systemd[1]: Started systemd-journald.service. Sep 10 01:08:33.630000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.630000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:31.396697 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:31Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Sep 10 01:08:31.396725 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:31Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Sep 10 01:08:31.396740 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:31Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Sep 10 01:08:31.396751 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:31Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Sep 10 01:08:31.396764 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:31Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Sep 10 01:08:33.632000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.633000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.633000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.634000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.634000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.634000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:31.396774 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:31Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Sep 10 01:08:33.633711 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 10 01:08:33.285530 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:33Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 10 01:08:33.633793 systemd[1]: Finished modprobe@dm_mod.service. Sep 10 01:08:33.285688 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:33Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 10 01:08:33.634401 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 10 01:08:33.285752 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:33Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 10 01:08:33.634476 systemd[1]: Finished modprobe@drm.service. Sep 10 01:08:33.285862 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:33Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 10 01:08:33.634701 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 10 01:08:33.285901 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:33Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Sep 10 01:08:33.634823 systemd[1]: Finished modprobe@efi_pstore.service. Sep 10 01:08:33.285942 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-09-10T01:08:33Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Sep 10 01:08:33.635527 systemd[1]: Finished systemd-modules-load.service. Sep 10 01:08:33.638790 kernel: fuse: init (API version 7.34) Sep 10 01:08:33.635000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.636000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.636914 systemd[1]: Finished systemd-network-generator.service. Sep 10 01:08:33.637344 systemd[1]: Finished systemd-remount-fs.service. Sep 10 01:08:33.638199 systemd[1]: Reached target network-pre.target. Sep 10 01:08:33.638958 jq[1023]: true Sep 10 01:08:33.641535 systemd[1]: Mounting sys-kernel-config.mount... Sep 10 01:08:33.641862 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Sep 10 01:08:33.644573 kernel: loop: module loaded Sep 10 01:08:33.644165 systemd[1]: Starting systemd-hwdb-update.service... Sep 10 01:08:33.647000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.647000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.654194 systemd-journald[1010]: Time spent on flushing to /var/log/journal/7a5118a9c6414b4c9aa243e4bdb6ac32 is 51.134ms for 1990 entries. Sep 10 01:08:33.654194 systemd-journald[1010]: System Journal (/var/log/journal/7a5118a9c6414b4c9aa243e4bdb6ac32) is 8.0M, max 584.8M, 576.8M free. Sep 10 01:08:33.760181 systemd-journald[1010]: Received client request to flush runtime journal. Sep 10 01:08:33.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.648000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.671000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.645105 systemd[1]: Starting systemd-journal-flush.service... Sep 10 01:08:33.645307 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 10 01:08:33.646064 systemd[1]: Starting systemd-random-seed.service... Sep 10 01:08:33.646923 systemd[1]: Starting systemd-sysctl.service... Sep 10 01:08:33.648374 systemd[1]: modprobe@fuse.service: Deactivated successfully. Sep 10 01:08:33.648452 systemd[1]: Finished modprobe@fuse.service. Sep 10 01:08:33.649057 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 10 01:08:33.649128 systemd[1]: Finished modprobe@loop.service. Sep 10 01:08:33.651115 systemd[1]: Mounted sys-kernel-config.mount. Sep 10 01:08:33.654257 systemd[1]: Mounting sys-fs-fuse-connections.mount... Sep 10 01:08:33.655426 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 10 01:08:33.656152 systemd[1]: Finished systemd-random-seed.service. Sep 10 01:08:33.656342 systemd[1]: Mounted sys-fs-fuse-connections.mount. Sep 10 01:08:33.656472 systemd[1]: Reached target first-boot-complete.target. Sep 10 01:08:33.672766 systemd[1]: Finished systemd-sysctl.service. Sep 10 01:08:33.679507 systemd[1]: Finished flatcar-tmpfiles.service. Sep 10 01:08:33.680506 systemd[1]: Starting systemd-sysusers.service... Sep 10 01:08:33.755869 systemd[1]: Finished systemd-udev-trigger.service. Sep 10 01:08:33.756845 systemd[1]: Starting systemd-udev-settle.service... Sep 10 01:08:33.768206 systemd[1]: Finished systemd-journal-flush.service. Sep 10 01:08:33.767000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.768697 udevadm[1052]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Sep 10 01:08:33.772819 systemd[1]: Finished systemd-sysusers.service. Sep 10 01:08:33.771000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:33.823318 ignition[1034]: Ignition 2.14.0 Sep 10 01:08:33.823509 ignition[1034]: deleting config from guestinfo properties Sep 10 01:08:33.827072 ignition[1034]: Successfully deleted config Sep 10 01:08:33.827689 systemd[1]: Finished ignition-delete-config.service. Sep 10 01:08:33.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ignition-delete-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:34.146857 systemd[1]: Finished systemd-hwdb-update.service. Sep 10 01:08:34.145000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:34.146000 audit: BPF prog-id=24 op=LOAD Sep 10 01:08:34.146000 audit: BPF prog-id=25 op=LOAD Sep 10 01:08:34.146000 audit: BPF prog-id=7 op=UNLOAD Sep 10 01:08:34.146000 audit: BPF prog-id=8 op=UNLOAD Sep 10 01:08:34.147963 systemd[1]: Starting systemd-udevd.service... Sep 10 01:08:34.159791 systemd-udevd[1053]: Using default interface naming scheme 'v252'. Sep 10 01:08:34.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:34.178000 audit: BPF prog-id=26 op=LOAD Sep 10 01:08:34.179168 systemd[1]: Started systemd-udevd.service. Sep 10 01:08:34.180557 systemd[1]: Starting systemd-networkd.service... Sep 10 01:08:34.185000 audit: BPF prog-id=27 op=LOAD Sep 10 01:08:34.185000 audit: BPF prog-id=28 op=LOAD Sep 10 01:08:34.185000 audit: BPF prog-id=29 op=LOAD Sep 10 01:08:34.187613 systemd[1]: Starting systemd-userdbd.service... Sep 10 01:08:34.212295 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Sep 10 01:08:34.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:34.218648 systemd[1]: Started systemd-userdbd.service. Sep 10 01:08:34.247234 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Sep 10 01:08:34.253234 kernel: ACPI: button: Power Button [PWRF] Sep 10 01:08:34.265329 systemd-networkd[1063]: lo: Link UP Sep 10 01:08:34.265334 systemd-networkd[1063]: lo: Gained carrier Sep 10 01:08:34.265632 systemd-networkd[1063]: Enumeration completed Sep 10 01:08:34.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:34.265696 systemd[1]: Started systemd-networkd.service. Sep 10 01:08:34.265820 systemd-networkd[1063]: ens192: Configuring with /etc/systemd/network/00-vmware.network. Sep 10 01:08:34.268649 kernel: vmxnet3 0000:0b:00.0 ens192: intr type 3, mode 0, 3 vectors allocated Sep 10 01:08:34.268784 kernel: vmxnet3 0000:0b:00.0 ens192: NIC Link is Up 10000 Mbps Sep 10 01:08:34.268864 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): ens192: link becomes ready Sep 10 01:08:34.269918 systemd-networkd[1063]: ens192: Link UP Sep 10 01:08:34.270005 systemd-networkd[1063]: ens192: Gained carrier Sep 10 01:08:34.328000 audit[1054]: AVC avc: denied { confidentiality } for pid=1054 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Sep 10 01:08:34.332040 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 10 01:08:34.328000 audit[1054]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55775a5c9010 a1=338ec a2=7f933493cbc5 a3=5 items=110 ppid=1053 pid=1054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:08:34.328000 audit: CWD cwd="/" Sep 10 01:08:34.328000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=1 name=(null) inode=24467 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=2 name=(null) inode=24467 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=3 name=(null) inode=24468 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=4 name=(null) inode=24467 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=5 name=(null) inode=24469 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=6 name=(null) inode=24467 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=7 name=(null) inode=24470 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=8 name=(null) inode=24470 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=9 name=(null) inode=24471 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=10 name=(null) inode=24470 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=11 name=(null) inode=24472 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=12 name=(null) inode=24470 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=13 name=(null) inode=24473 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=14 name=(null) inode=24470 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=15 name=(null) inode=24474 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=16 name=(null) inode=24470 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=17 name=(null) inode=24475 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=18 name=(null) inode=24467 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=19 name=(null) inode=24476 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=20 name=(null) inode=24476 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=21 name=(null) inode=24477 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=22 name=(null) inode=24476 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=23 name=(null) inode=24478 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=24 name=(null) inode=24476 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=25 name=(null) inode=24479 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=26 name=(null) inode=24476 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=27 name=(null) inode=24480 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=28 name=(null) inode=24476 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=29 name=(null) inode=24481 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=30 name=(null) inode=24467 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=31 name=(null) inode=24482 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=32 name=(null) inode=24482 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=33 name=(null) inode=24483 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=34 name=(null) inode=24482 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=35 name=(null) inode=24484 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=36 name=(null) inode=24482 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=37 name=(null) inode=24485 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=38 name=(null) inode=24482 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=39 name=(null) inode=24486 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=40 name=(null) inode=24482 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=41 name=(null) inode=24487 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=42 name=(null) inode=24467 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=43 name=(null) inode=24488 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=44 name=(null) inode=24488 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=45 name=(null) inode=24489 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=46 name=(null) inode=24488 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=47 name=(null) inode=24490 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=48 name=(null) inode=24488 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=49 name=(null) inode=24491 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=50 name=(null) inode=24488 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=51 name=(null) inode=24492 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=52 name=(null) inode=24488 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=53 name=(null) inode=24493 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=54 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=55 name=(null) inode=24494 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=56 name=(null) inode=24494 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=57 name=(null) inode=24495 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=58 name=(null) inode=24494 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=59 name=(null) inode=24496 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=60 name=(null) inode=24494 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=61 name=(null) inode=24497 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=62 name=(null) inode=24497 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=63 name=(null) inode=24498 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=64 name=(null) inode=24497 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=65 name=(null) inode=24499 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=66 name=(null) inode=24497 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=67 name=(null) inode=24500 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=68 name=(null) inode=24497 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=69 name=(null) inode=24501 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=70 name=(null) inode=24497 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=71 name=(null) inode=24502 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=72 name=(null) inode=24494 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=73 name=(null) inode=24503 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=74 name=(null) inode=24503 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=75 name=(null) inode=24504 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=76 name=(null) inode=24503 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=77 name=(null) inode=24505 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=78 name=(null) inode=24503 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=79 name=(null) inode=24506 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=80 name=(null) inode=24503 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=81 name=(null) inode=24507 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=82 name=(null) inode=24503 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=83 name=(null) inode=24508 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=84 name=(null) inode=24494 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=85 name=(null) inode=24509 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=86 name=(null) inode=24509 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=87 name=(null) inode=24510 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=88 name=(null) inode=24509 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=89 name=(null) inode=24511 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=90 name=(null) inode=24509 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=91 name=(null) inode=24512 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=92 name=(null) inode=24509 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=93 name=(null) inode=24513 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=94 name=(null) inode=24509 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=95 name=(null) inode=24514 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=96 name=(null) inode=24494 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=97 name=(null) inode=24515 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=98 name=(null) inode=24515 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=99 name=(null) inode=24516 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=100 name=(null) inode=24515 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=101 name=(null) inode=24517 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=102 name=(null) inode=24515 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=103 name=(null) inode=24518 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=104 name=(null) inode=24515 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=105 name=(null) inode=24519 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=106 name=(null) inode=24515 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=107 name=(null) inode=24520 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PATH item=109 name=(null) inode=24521 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:08:34.328000 audit: PROCTITLE proctitle="(udev-worker)" Sep 10 01:08:34.343711 kernel: vmw_vmci 0000:00:07.7: Found VMCI PCI device at 0x11080, irq 16 Sep 10 01:08:34.344341 kernel: vmw_vmci 0000:00:07.7: Using capabilities 0xc Sep 10 01:08:34.344427 kernel: piix4_smbus 0000:00:07.3: SMBus Host Controller not enabled! Sep 10 01:08:34.345740 kernel: Guest personality initialized and is active Sep 10 01:08:34.348231 kernel: VMCI host device registered (name=vmci, major=10, minor=125) Sep 10 01:08:34.348255 kernel: Initialized host personality Sep 10 01:08:34.356255 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input3 Sep 10 01:08:34.367238 kernel: mousedev: PS/2 mouse device common for all mice Sep 10 01:08:34.369056 (udev-worker)[1056]: id: Truncating stdout of 'dmi_memory_id' up to 16384 byte. Sep 10 01:08:34.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:34.378516 systemd[1]: Finished systemd-udev-settle.service. Sep 10 01:08:34.379504 systemd[1]: Starting lvm2-activation-early.service... Sep 10 01:08:34.395728 lvm[1086]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 10 01:08:34.416757 systemd[1]: Finished lvm2-activation-early.service. Sep 10 01:08:34.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:34.416943 systemd[1]: Reached target cryptsetup.target. Sep 10 01:08:34.417855 systemd[1]: Starting lvm2-activation.service... Sep 10 01:08:34.420296 lvm[1087]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 10 01:08:34.440806 systemd[1]: Finished lvm2-activation.service. Sep 10 01:08:34.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:34.440981 systemd[1]: Reached target local-fs-pre.target. Sep 10 01:08:34.441077 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Sep 10 01:08:34.441098 systemd[1]: Reached target local-fs.target. Sep 10 01:08:34.441188 systemd[1]: Reached target machines.target. Sep 10 01:08:34.442106 systemd[1]: Starting ldconfig.service... Sep 10 01:08:34.442677 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 10 01:08:34.442708 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 10 01:08:34.443396 systemd[1]: Starting systemd-boot-update.service... Sep 10 01:08:34.444013 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Sep 10 01:08:34.444828 systemd[1]: Starting systemd-machine-id-commit.service... Sep 10 01:08:34.445576 systemd[1]: Starting systemd-sysext.service... Sep 10 01:08:34.451847 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1089 (bootctl) Sep 10 01:08:34.452657 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Sep 10 01:08:34.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:34.465417 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Sep 10 01:08:34.467764 systemd[1]: Unmounting usr-share-oem.mount... Sep 10 01:08:34.480672 systemd[1]: usr-share-oem.mount: Deactivated successfully. Sep 10 01:08:34.480823 systemd[1]: Unmounted usr-share-oem.mount. Sep 10 01:08:34.499235 kernel: loop0: detected capacity change from 0 to 229808 Sep 10 01:08:34.778983 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Sep 10 01:08:34.779661 systemd[1]: Finished systemd-machine-id-commit.service. Sep 10 01:08:34.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:34.801230 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Sep 10 01:08:34.819230 kernel: loop1: detected capacity change from 0 to 229808 Sep 10 01:08:34.825654 systemd-fsck[1099]: fsck.fat 4.2 (2021-01-31) Sep 10 01:08:34.825654 systemd-fsck[1099]: /dev/sda1: 790 files, 120765/258078 clusters Sep 10 01:08:34.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:34.826376 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Sep 10 01:08:34.827390 systemd[1]: Mounting boot.mount... Sep 10 01:08:34.838747 systemd[1]: Mounted boot.mount. Sep 10 01:08:34.842244 (sd-sysext)[1102]: Using extensions 'kubernetes'. Sep 10 01:08:34.843109 (sd-sysext)[1102]: Merged extensions into '/usr'. Sep 10 01:08:34.853719 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 01:08:34.855044 systemd[1]: Mounting usr-share-oem.mount... Sep 10 01:08:34.856449 systemd[1]: Starting modprobe@dm_mod.service... Sep 10 01:08:34.857984 systemd[1]: Starting modprobe@efi_pstore.service... Sep 10 01:08:34.859047 systemd[1]: Starting modprobe@loop.service... Sep 10 01:08:34.859188 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 10 01:08:34.859303 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 10 01:08:34.859380 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 01:08:34.862309 systemd[1]: Finished systemd-boot-update.service. Sep 10 01:08:34.861000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:34.862571 systemd[1]: Mounted usr-share-oem.mount. Sep 10 01:08:34.862824 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 10 01:08:34.862897 systemd[1]: Finished modprobe@dm_mod.service. Sep 10 01:08:34.861000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:34.861000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:34.863191 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 10 01:08:34.863287 systemd[1]: Finished modprobe@efi_pstore.service. Sep 10 01:08:34.862000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:34.862000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:34.863571 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 10 01:08:34.863639 systemd[1]: Finished modprobe@loop.service. Sep 10 01:08:34.862000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:34.862000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:34.863970 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 10 01:08:34.864036 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 10 01:08:34.864826 systemd[1]: Finished systemd-sysext.service. Sep 10 01:08:34.863000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:34.865801 systemd[1]: Starting ensure-sysext.service... Sep 10 01:08:34.866776 systemd[1]: Starting systemd-tmpfiles-setup.service... Sep 10 01:08:34.871047 systemd[1]: Reloading. Sep 10 01:08:34.880427 systemd-tmpfiles[1110]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Sep 10 01:08:34.885950 systemd-tmpfiles[1110]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Sep 10 01:08:34.898342 systemd-tmpfiles[1110]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Sep 10 01:08:34.921007 /usr/lib/systemd/system-generators/torcx-generator[1129]: time="2025-09-10T01:08:34Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 10 01:08:34.921026 /usr/lib/systemd/system-generators/torcx-generator[1129]: time="2025-09-10T01:08:34Z" level=info msg="torcx already run" Sep 10 01:08:34.985601 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 10 01:08:34.985739 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 10 01:08:34.998011 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 10 01:08:35.035000 audit: BPF prog-id=30 op=LOAD Sep 10 01:08:35.035000 audit: BPF prog-id=26 op=UNLOAD Sep 10 01:08:35.037000 audit: BPF prog-id=31 op=LOAD Sep 10 01:08:35.037000 audit: BPF prog-id=32 op=LOAD Sep 10 01:08:35.037000 audit: BPF prog-id=24 op=UNLOAD Sep 10 01:08:35.037000 audit: BPF prog-id=25 op=UNLOAD Sep 10 01:08:35.038000 audit: BPF prog-id=33 op=LOAD Sep 10 01:08:35.038000 audit: BPF prog-id=27 op=UNLOAD Sep 10 01:08:35.038000 audit: BPF prog-id=34 op=LOAD Sep 10 01:08:35.038000 audit: BPF prog-id=35 op=LOAD Sep 10 01:08:35.038000 audit: BPF prog-id=28 op=UNLOAD Sep 10 01:08:35.038000 audit: BPF prog-id=29 op=UNLOAD Sep 10 01:08:35.038000 audit: BPF prog-id=36 op=LOAD Sep 10 01:08:35.038000 audit: BPF prog-id=21 op=UNLOAD Sep 10 01:08:35.039000 audit: BPF prog-id=37 op=LOAD Sep 10 01:08:35.039000 audit: BPF prog-id=38 op=LOAD Sep 10 01:08:35.039000 audit: BPF prog-id=22 op=UNLOAD Sep 10 01:08:35.039000 audit: BPF prog-id=23 op=UNLOAD Sep 10 01:08:35.044378 systemd[1]: Finished systemd-tmpfiles-setup.service. Sep 10 01:08:35.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.047179 systemd[1]: Starting audit-rules.service... Sep 10 01:08:35.048199 systemd[1]: Starting clean-ca-certificates.service... Sep 10 01:08:35.049289 systemd[1]: Starting systemd-journal-catalog-update.service... Sep 10 01:08:35.049000 audit: BPF prog-id=39 op=LOAD Sep 10 01:08:35.051154 systemd[1]: Starting systemd-resolved.service... Sep 10 01:08:35.051000 audit: BPF prog-id=40 op=LOAD Sep 10 01:08:35.053592 systemd[1]: Starting systemd-timesyncd.service... Sep 10 01:08:35.056000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.065000 audit[1195]: SYSTEM_BOOT pid=1195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.055391 systemd[1]: Starting systemd-update-utmp.service... Sep 10 01:08:35.057410 systemd[1]: Finished clean-ca-certificates.service. Sep 10 01:08:35.058646 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 10 01:08:35.060707 systemd[1]: Starting modprobe@dm_mod.service... Sep 10 01:08:35.061440 systemd[1]: Starting modprobe@efi_pstore.service... Sep 10 01:08:35.062413 systemd[1]: Starting modprobe@loop.service... Sep 10 01:08:35.063682 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 10 01:08:35.063762 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 10 01:08:35.063838 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 10 01:08:35.064391 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 10 01:08:35.064468 systemd[1]: Finished modprobe@dm_mod.service. Sep 10 01:08:35.069212 systemd[1]: Starting modprobe@dm_mod.service... Sep 10 01:08:35.069353 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 10 01:08:35.069447 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 10 01:08:35.069541 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 10 01:08:35.070462 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 10 01:08:35.070537 systemd[1]: Finished modprobe@dm_mod.service. Sep 10 01:08:35.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.073000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.073000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.074000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.074850 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 10 01:08:35.074919 systemd[1]: Finished modprobe@efi_pstore.service. Sep 10 01:08:35.075423 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 10 01:08:35.075490 systemd[1]: Finished modprobe@loop.service. Sep 10 01:08:35.077739 systemd[1]: Finished systemd-journal-catalog-update.service. Sep 10 01:08:35.079124 systemd[1]: Starting modprobe@dm_mod.service... Sep 10 01:08:35.080629 systemd[1]: Starting modprobe@drm.service... Sep 10 01:08:35.083883 systemd[1]: Starting modprobe@efi_pstore.service... Sep 10 01:08:35.085008 systemd[1]: Starting modprobe@loop.service... Sep 10 01:08:35.085170 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 10 01:08:35.085310 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 10 01:08:35.086699 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 10 01:08:35.087000 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 10 01:08:35.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.088000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.090000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.093000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.093000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.093000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.093000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.093000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.089044 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 10 01:08:35.089136 systemd[1]: Finished modprobe@dm_mod.service. Sep 10 01:08:35.089629 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 10 01:08:35.089736 systemd[1]: Finished modprobe@drm.service. Sep 10 01:08:35.092465 systemd[1]: Finished ensure-sysext.service. Sep 10 01:08:35.094195 systemd[1]: Finished systemd-update-utmp.service. Sep 10 01:08:35.094446 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 10 01:08:35.094522 systemd[1]: Finished modprobe@efi_pstore.service. Sep 10 01:08:35.094750 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 10 01:08:35.094819 systemd[1]: Finished modprobe@loop.service. Sep 10 01:08:35.094988 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 10 01:08:35.095023 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 10 01:08:35.106158 ldconfig[1088]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Sep 10 01:08:35.122836 systemd[1]: Finished ldconfig.service. Sep 10 01:08:35.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.128381 systemd[1]: Starting systemd-update-done.service... Sep 10 01:08:35.133348 systemd[1]: Finished systemd-update-done.service. Sep 10 01:08:35.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:08:35.132000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Sep 10 01:08:35.132000 audit[1220]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffef4ba43f0 a2=420 a3=0 items=0 ppid=1190 pid=1220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:08:35.132000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Sep 10 01:08:35.135053 augenrules[1220]: No rules Sep 10 01:08:35.134549 systemd[1]: Finished audit-rules.service. Sep 10 01:08:35.135316 systemd[1]: Started systemd-timesyncd.service. Sep 10 01:08:35.135437 systemd[1]: Reached target time-set.target. Sep 10 01:08:35.141889 systemd-resolved[1193]: Positive Trust Anchors: Sep 10 01:08:35.142072 systemd-resolved[1193]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 10 01:08:35.142133 systemd-resolved[1193]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 10 01:08:35.161100 systemd-resolved[1193]: Defaulting to hostname 'linux'. Sep 10 01:08:35.162261 systemd[1]: Started systemd-resolved.service. Sep 10 01:08:35.162415 systemd[1]: Reached target network.target. Sep 10 01:08:35.162501 systemd[1]: Reached target nss-lookup.target. Sep 10 01:08:35.162595 systemd[1]: Reached target sysinit.target. Sep 10 01:08:35.162735 systemd[1]: Started motdgen.path. Sep 10 01:08:35.162839 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Sep 10 01:08:35.163047 systemd[1]: Started logrotate.timer. Sep 10 01:08:35.163178 systemd[1]: Started mdadm.timer. Sep 10 01:08:35.163300 systemd[1]: Started systemd-tmpfiles-clean.timer. Sep 10 01:08:35.163392 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Sep 10 01:08:35.163406 systemd[1]: Reached target paths.target. Sep 10 01:08:35.163489 systemd[1]: Reached target timers.target. Sep 10 01:08:35.163754 systemd[1]: Listening on dbus.socket. Sep 10 01:08:35.164695 systemd[1]: Starting docker.socket... Sep 10 01:08:35.167028 systemd[1]: Listening on sshd.socket. Sep 10 01:08:35.167228 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 10 01:08:35.167577 systemd[1]: Listening on docker.socket. Sep 10 01:08:35.167739 systemd[1]: Reached target sockets.target. Sep 10 01:08:35.167841 systemd[1]: Reached target basic.target. Sep 10 01:08:35.167971 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 10 01:08:35.167992 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 10 01:08:35.168809 systemd[1]: Starting containerd.service... Sep 10 01:08:35.169659 systemd[1]: Starting dbus.service... Sep 10 01:08:35.171116 systemd[1]: Starting enable-oem-cloudinit.service... Sep 10 01:08:35.172145 systemd[1]: Starting extend-filesystems.service... Sep 10 01:08:35.172510 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Sep 10 01:08:35.173549 systemd[1]: Starting motdgen.service... Sep 10 01:08:35.174199 jq[1231]: false Sep 10 01:08:35.182868 systemd[1]: Starting prepare-helm.service... Sep 10 01:08:35.184050 systemd[1]: Starting ssh-key-proc-cmdline.service... Sep 10 01:08:35.184968 systemd[1]: Starting sshd-keygen.service... Sep 10 01:08:35.187325 systemd[1]: Starting systemd-logind.service... Sep 10 01:08:35.187477 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 10 01:08:35.187515 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Sep 10 01:08:35.188205 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Sep 10 01:08:35.188690 systemd[1]: Starting update-engine.service... Sep 10 01:08:35.189712 systemd[1]: Starting update-ssh-keys-after-ignition.service... Sep 10 01:08:35.190652 systemd[1]: Starting vmtoolsd.service... Sep 10 01:08:35.196050 jq[1241]: true Sep 10 01:08:35.192439 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Sep 10 01:08:35.192586 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Sep 10 01:08:35.200485 jq[1245]: true Sep 10 01:08:35.202792 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Sep 10 01:08:35.202900 systemd[1]: Finished ssh-key-proc-cmdline.service. Sep 10 01:10:07.463433 systemd-timesyncd[1194]: Contacted time server 23.142.248.8:123 (0.flatcar.pool.ntp.org). Sep 10 01:10:07.463466 systemd-timesyncd[1194]: Initial clock synchronization to Wed 2025-09-10 01:10:07.463365 UTC. Sep 10 01:10:07.464944 systemd-resolved[1193]: Clock change detected. Flushing caches. Sep 10 01:10:07.470525 systemd[1]: Started vmtoolsd.service. Sep 10 01:10:07.476509 systemd[1]: motdgen.service: Deactivated successfully. Sep 10 01:10:07.476614 systemd[1]: Finished motdgen.service. Sep 10 01:10:07.494443 extend-filesystems[1232]: Found loop1 Sep 10 01:10:07.494816 extend-filesystems[1232]: Found sda Sep 10 01:10:07.494966 extend-filesystems[1232]: Found sda1 Sep 10 01:10:07.495111 extend-filesystems[1232]: Found sda2 Sep 10 01:10:07.495250 extend-filesystems[1232]: Found sda3 Sep 10 01:10:07.495438 extend-filesystems[1232]: Found usr Sep 10 01:10:07.495581 extend-filesystems[1232]: Found sda4 Sep 10 01:10:07.495725 extend-filesystems[1232]: Found sda6 Sep 10 01:10:07.495861 extend-filesystems[1232]: Found sda7 Sep 10 01:10:07.495997 extend-filesystems[1232]: Found sda9 Sep 10 01:10:07.496142 extend-filesystems[1232]: Checking size of /dev/sda9 Sep 10 01:10:07.514712 tar[1244]: linux-amd64/LICENSE Sep 10 01:10:07.518029 tar[1244]: linux-amd64/helm Sep 10 01:10:07.523651 bash[1266]: Updated "/home/core/.ssh/authorized_keys" Sep 10 01:10:07.523898 systemd-logind[1239]: Watching system buttons on /dev/input/event1 (Power Button) Sep 10 01:10:07.523909 systemd-logind[1239]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Sep 10 01:10:07.524031 systemd[1]: Finished update-ssh-keys-after-ignition.service. Sep 10 01:10:07.526016 systemd-logind[1239]: New seat seat0. Sep 10 01:10:07.535394 kernel: NET: Registered PF_VSOCK protocol family Sep 10 01:10:07.543736 dbus-daemon[1230]: [system] SELinux support is enabled Sep 10 01:10:07.544035 systemd[1]: Started dbus.service. Sep 10 01:10:07.545384 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Sep 10 01:10:07.545399 systemd[1]: Reached target system-config.target. Sep 10 01:10:07.545514 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Sep 10 01:10:07.545524 systemd[1]: Reached target user-config.target. Sep 10 01:10:07.547920 systemd[1]: Started systemd-logind.service. Sep 10 01:10:07.551386 extend-filesystems[1232]: Old size kept for /dev/sda9 Sep 10 01:10:07.552827 extend-filesystems[1232]: Found sr0 Sep 10 01:10:07.554209 systemd[1]: extend-filesystems.service: Deactivated successfully. Sep 10 01:10:07.554332 systemd[1]: Finished extend-filesystems.service. Sep 10 01:10:07.562050 update_engine[1240]: I0910 01:10:07.561067 1240 main.cc:92] Flatcar Update Engine starting Sep 10 01:10:07.562870 env[1267]: time="2025-09-10T01:10:07.562817620Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Sep 10 01:10:07.569646 systemd[1]: Started update-engine.service. Sep 10 01:10:07.571629 update_engine[1240]: I0910 01:10:07.570287 1240 update_check_scheduler.cc:74] Next update check in 8m39s Sep 10 01:10:07.571198 systemd[1]: Started locksmithd.service. Sep 10 01:10:07.627853 env[1267]: time="2025-09-10T01:10:07.627818613Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Sep 10 01:10:07.627955 env[1267]: time="2025-09-10T01:10:07.627922300Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Sep 10 01:10:07.628689 env[1267]: time="2025-09-10T01:10:07.628671026Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.191-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Sep 10 01:10:07.628689 env[1267]: time="2025-09-10T01:10:07.628687577Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Sep 10 01:10:07.628827 env[1267]: time="2025-09-10T01:10:07.628809117Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 10 01:10:07.628827 env[1267]: time="2025-09-10T01:10:07.628826422Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Sep 10 01:10:07.628879 env[1267]: time="2025-09-10T01:10:07.628836240Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Sep 10 01:10:07.628879 env[1267]: time="2025-09-10T01:10:07.628841792Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Sep 10 01:10:07.628915 env[1267]: time="2025-09-10T01:10:07.628883417Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Sep 10 01:10:07.629020 env[1267]: time="2025-09-10T01:10:07.629007384Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Sep 10 01:10:07.629087 env[1267]: time="2025-09-10T01:10:07.629073807Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 10 01:10:07.629087 env[1267]: time="2025-09-10T01:10:07.629085168Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Sep 10 01:10:07.629133 env[1267]: time="2025-09-10T01:10:07.629111250Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Sep 10 01:10:07.629133 env[1267]: time="2025-09-10T01:10:07.629118800Z" level=info msg="metadata content store policy set" policy=shared Sep 10 01:10:07.636356 env[1267]: time="2025-09-10T01:10:07.636336084Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Sep 10 01:10:07.636404 env[1267]: time="2025-09-10T01:10:07.636358718Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Sep 10 01:10:07.636404 env[1267]: time="2025-09-10T01:10:07.636368843Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Sep 10 01:10:07.636404 env[1267]: time="2025-09-10T01:10:07.636393099Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Sep 10 01:10:07.636404 env[1267]: time="2025-09-10T01:10:07.636402210Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Sep 10 01:10:07.636471 env[1267]: time="2025-09-10T01:10:07.636410394Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Sep 10 01:10:07.636471 env[1267]: time="2025-09-10T01:10:07.636417476Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Sep 10 01:10:07.636471 env[1267]: time="2025-09-10T01:10:07.636425263Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Sep 10 01:10:07.636471 env[1267]: time="2025-09-10T01:10:07.636432066Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Sep 10 01:10:07.636471 env[1267]: time="2025-09-10T01:10:07.636458453Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Sep 10 01:10:07.636471 env[1267]: time="2025-09-10T01:10:07.636468122Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Sep 10 01:10:07.636563 env[1267]: time="2025-09-10T01:10:07.636474690Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Sep 10 01:10:07.636563 env[1267]: time="2025-09-10T01:10:07.636529402Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Sep 10 01:10:07.636598 env[1267]: time="2025-09-10T01:10:07.636576061Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Sep 10 01:10:07.636745 env[1267]: time="2025-09-10T01:10:07.636727541Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Sep 10 01:10:07.636774 env[1267]: time="2025-09-10T01:10:07.636745726Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Sep 10 01:10:07.636774 env[1267]: time="2025-09-10T01:10:07.636754374Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Sep 10 01:10:07.636809 env[1267]: time="2025-09-10T01:10:07.636781459Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Sep 10 01:10:07.636809 env[1267]: time="2025-09-10T01:10:07.636788806Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Sep 10 01:10:07.636809 env[1267]: time="2025-09-10T01:10:07.636795527Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Sep 10 01:10:07.636809 env[1267]: time="2025-09-10T01:10:07.636801527Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Sep 10 01:10:07.636809 env[1267]: time="2025-09-10T01:10:07.636808402Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Sep 10 01:10:07.636888 env[1267]: time="2025-09-10T01:10:07.636815317Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Sep 10 01:10:07.636888 env[1267]: time="2025-09-10T01:10:07.636821644Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Sep 10 01:10:07.636888 env[1267]: time="2025-09-10T01:10:07.636827543Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Sep 10 01:10:07.636888 env[1267]: time="2025-09-10T01:10:07.636835286Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Sep 10 01:10:07.636954 env[1267]: time="2025-09-10T01:10:07.636901286Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Sep 10 01:10:07.636954 env[1267]: time="2025-09-10T01:10:07.636920156Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Sep 10 01:10:07.636954 env[1267]: time="2025-09-10T01:10:07.636927392Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Sep 10 01:10:07.636954 env[1267]: time="2025-09-10T01:10:07.636933683Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Sep 10 01:10:07.636954 env[1267]: time="2025-09-10T01:10:07.636942131Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Sep 10 01:10:07.636954 env[1267]: time="2025-09-10T01:10:07.636948510Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Sep 10 01:10:07.637047 env[1267]: time="2025-09-10T01:10:07.636958551Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Sep 10 01:10:07.637047 env[1267]: time="2025-09-10T01:10:07.636979692Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Sep 10 01:10:07.637122 env[1267]: time="2025-09-10T01:10:07.637090114Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Sep 10 01:10:07.639507 env[1267]: time="2025-09-10T01:10:07.637125520Z" level=info msg="Connect containerd service" Sep 10 01:10:07.639507 env[1267]: time="2025-09-10T01:10:07.637145887Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Sep 10 01:10:07.639507 env[1267]: time="2025-09-10T01:10:07.637440948Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 10 01:10:07.639507 env[1267]: time="2025-09-10T01:10:07.637566449Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Sep 10 01:10:07.639507 env[1267]: time="2025-09-10T01:10:07.637590786Z" level=info msg=serving... address=/run/containerd/containerd.sock Sep 10 01:10:07.639507 env[1267]: time="2025-09-10T01:10:07.637617879Z" level=info msg="containerd successfully booted in 0.075417s" Sep 10 01:10:07.637659 systemd[1]: Started containerd.service. Sep 10 01:10:07.640950 env[1267]: time="2025-09-10T01:10:07.640915497Z" level=info msg="Start subscribing containerd event" Sep 10 01:10:07.640979 env[1267]: time="2025-09-10T01:10:07.640963069Z" level=info msg="Start recovering state" Sep 10 01:10:07.641010 env[1267]: time="2025-09-10T01:10:07.641000027Z" level=info msg="Start event monitor" Sep 10 01:10:07.641036 env[1267]: time="2025-09-10T01:10:07.641011188Z" level=info msg="Start snapshots syncer" Sep 10 01:10:07.641036 env[1267]: time="2025-09-10T01:10:07.641017064Z" level=info msg="Start cni network conf syncer for default" Sep 10 01:10:07.641036 env[1267]: time="2025-09-10T01:10:07.641023902Z" level=info msg="Start streaming server" Sep 10 01:10:07.879207 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 01:10:07.879259 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 10 01:10:07.910288 tar[1244]: linux-amd64/README.md Sep 10 01:10:07.913524 systemd[1]: Finished prepare-helm.service. Sep 10 01:10:07.977418 locksmithd[1293]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Sep 10 01:10:08.106454 systemd-networkd[1063]: ens192: Gained IPv6LL Sep 10 01:10:08.108045 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 10 01:10:08.108360 systemd[1]: Reached target network-online.target. Sep 10 01:10:08.109598 systemd[1]: Starting kubelet.service... Sep 10 01:10:08.473906 sshd_keygen[1253]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Sep 10 01:10:08.487034 systemd[1]: Finished sshd-keygen.service. Sep 10 01:10:08.488248 systemd[1]: Starting issuegen.service... Sep 10 01:10:08.492473 systemd[1]: issuegen.service: Deactivated successfully. Sep 10 01:10:08.492588 systemd[1]: Finished issuegen.service. Sep 10 01:10:08.493887 systemd[1]: Starting systemd-user-sessions.service... Sep 10 01:10:08.498907 systemd[1]: Finished systemd-user-sessions.service. Sep 10 01:10:08.500120 systemd[1]: Started getty@tty1.service. Sep 10 01:10:08.501199 systemd[1]: Started serial-getty@ttyS0.service. Sep 10 01:10:08.501497 systemd[1]: Reached target getty.target. Sep 10 01:10:09.424453 systemd[1]: Started kubelet.service. Sep 10 01:10:09.424798 systemd[1]: Reached target multi-user.target. Sep 10 01:10:09.425947 systemd[1]: Starting systemd-update-utmp-runlevel.service... Sep 10 01:10:09.431656 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Sep 10 01:10:09.431765 systemd[1]: Finished systemd-update-utmp-runlevel.service. Sep 10 01:10:09.431957 systemd[1]: Startup finished in 921ms (kernel) + 6.180s (initrd) + 6.449s (userspace) = 13.551s. Sep 10 01:10:09.456624 login[1358]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Sep 10 01:10:09.457674 login[1359]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Sep 10 01:10:09.464963 systemd[1]: Created slice user-500.slice. Sep 10 01:10:09.465840 systemd[1]: Starting user-runtime-dir@500.service... Sep 10 01:10:09.471675 systemd-logind[1239]: New session 1 of user core. Sep 10 01:10:09.474131 systemd-logind[1239]: New session 2 of user core. Sep 10 01:10:09.476841 systemd[1]: Finished user-runtime-dir@500.service. Sep 10 01:10:09.477934 systemd[1]: Starting user@500.service... Sep 10 01:10:09.480568 (systemd)[1365]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Sep 10 01:10:09.534231 systemd[1365]: Queued start job for default target default.target. Sep 10 01:10:09.534650 systemd[1365]: Reached target paths.target. Sep 10 01:10:09.534665 systemd[1365]: Reached target sockets.target. Sep 10 01:10:09.534674 systemd[1365]: Reached target timers.target. Sep 10 01:10:09.534681 systemd[1365]: Reached target basic.target. Sep 10 01:10:09.534719 systemd[1365]: Reached target default.target. Sep 10 01:10:09.534738 systemd[1365]: Startup finished in 50ms. Sep 10 01:10:09.535010 systemd[1]: Started user@500.service. Sep 10 01:10:09.535805 systemd[1]: Started session-1.scope. Sep 10 01:10:09.536313 systemd[1]: Started session-2.scope. Sep 10 01:10:10.068463 kubelet[1362]: E0910 01:10:10.068436 1362 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 10 01:10:10.069698 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 10 01:10:10.069772 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 10 01:10:20.320449 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Sep 10 01:10:20.320610 systemd[1]: Stopped kubelet.service. Sep 10 01:10:20.321821 systemd[1]: Starting kubelet.service... Sep 10 01:10:20.653864 systemd[1]: Started kubelet.service. Sep 10 01:10:20.689673 kubelet[1396]: E0910 01:10:20.689648 1396 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 10 01:10:20.691836 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 10 01:10:20.691912 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 10 01:10:30.906354 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Sep 10 01:10:30.906519 systemd[1]: Stopped kubelet.service. Sep 10 01:10:30.907712 systemd[1]: Starting kubelet.service... Sep 10 01:10:31.195534 systemd[1]: Started kubelet.service. Sep 10 01:10:31.260823 kubelet[1405]: E0910 01:10:31.260783 1405 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 10 01:10:31.262106 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 10 01:10:31.262184 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 10 01:10:37.640604 systemd[1]: Created slice system-sshd.slice. Sep 10 01:10:37.641543 systemd[1]: Started sshd@0-139.178.70.105:22-147.75.109.163:37642.service. Sep 10 01:10:37.689827 sshd[1411]: Accepted publickey for core from 147.75.109.163 port 37642 ssh2: RSA SHA256:0IUR5emySKOryc09IkQfiEMy48OZjcmwN/1tG3dFsA8 Sep 10 01:10:37.690844 sshd[1411]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 01:10:37.693918 systemd[1]: Started session-3.scope. Sep 10 01:10:37.694338 systemd-logind[1239]: New session 3 of user core. Sep 10 01:10:37.742880 systemd[1]: Started sshd@1-139.178.70.105:22-147.75.109.163:37648.service. Sep 10 01:10:37.770661 sshd[1416]: Accepted publickey for core from 147.75.109.163 port 37648 ssh2: RSA SHA256:0IUR5emySKOryc09IkQfiEMy48OZjcmwN/1tG3dFsA8 Sep 10 01:10:37.771809 sshd[1416]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 01:10:37.775233 systemd[1]: Started session-4.scope. Sep 10 01:10:37.775474 systemd-logind[1239]: New session 4 of user core. Sep 10 01:10:37.825663 sshd[1416]: pam_unix(sshd:session): session closed for user core Sep 10 01:10:37.827807 systemd[1]: Started sshd@2-139.178.70.105:22-147.75.109.163:37656.service. Sep 10 01:10:37.829233 systemd-logind[1239]: Session 4 logged out. Waiting for processes to exit. Sep 10 01:10:37.829400 systemd[1]: sshd@1-139.178.70.105:22-147.75.109.163:37648.service: Deactivated successfully. Sep 10 01:10:37.829815 systemd[1]: session-4.scope: Deactivated successfully. Sep 10 01:10:37.830669 systemd-logind[1239]: Removed session 4. Sep 10 01:10:37.855786 sshd[1421]: Accepted publickey for core from 147.75.109.163 port 37656 ssh2: RSA SHA256:0IUR5emySKOryc09IkQfiEMy48OZjcmwN/1tG3dFsA8 Sep 10 01:10:37.856480 sshd[1421]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 01:10:37.859359 systemd[1]: Started session-5.scope. Sep 10 01:10:37.859654 systemd-logind[1239]: New session 5 of user core. Sep 10 01:10:37.907620 sshd[1421]: pam_unix(sshd:session): session closed for user core Sep 10 01:10:37.909646 systemd[1]: Started sshd@3-139.178.70.105:22-147.75.109.163:37662.service. Sep 10 01:10:37.909986 systemd[1]: sshd@2-139.178.70.105:22-147.75.109.163:37656.service: Deactivated successfully. Sep 10 01:10:37.910477 systemd[1]: session-5.scope: Deactivated successfully. Sep 10 01:10:37.911173 systemd-logind[1239]: Session 5 logged out. Waiting for processes to exit. Sep 10 01:10:37.912040 systemd-logind[1239]: Removed session 5. Sep 10 01:10:37.939009 sshd[1427]: Accepted publickey for core from 147.75.109.163 port 37662 ssh2: RSA SHA256:0IUR5emySKOryc09IkQfiEMy48OZjcmwN/1tG3dFsA8 Sep 10 01:10:37.940107 sshd[1427]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 01:10:37.943138 systemd-logind[1239]: New session 6 of user core. Sep 10 01:10:37.943989 systemd[1]: Started session-6.scope. Sep 10 01:10:37.995018 sshd[1427]: pam_unix(sshd:session): session closed for user core Sep 10 01:10:37.996828 systemd[1]: Started sshd@4-139.178.70.105:22-147.75.109.163:37678.service. Sep 10 01:10:37.998485 systemd[1]: sshd@3-139.178.70.105:22-147.75.109.163:37662.service: Deactivated successfully. Sep 10 01:10:37.998849 systemd[1]: session-6.scope: Deactivated successfully. Sep 10 01:10:37.999233 systemd-logind[1239]: Session 6 logged out. Waiting for processes to exit. Sep 10 01:10:37.999829 systemd-logind[1239]: Removed session 6. Sep 10 01:10:38.026738 sshd[1433]: Accepted publickey for core from 147.75.109.163 port 37678 ssh2: RSA SHA256:0IUR5emySKOryc09IkQfiEMy48OZjcmwN/1tG3dFsA8 Sep 10 01:10:38.027574 sshd[1433]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 01:10:38.030264 systemd-logind[1239]: New session 7 of user core. Sep 10 01:10:38.030829 systemd[1]: Started session-7.scope. Sep 10 01:10:38.097220 sudo[1437]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Sep 10 01:10:38.097384 sudo[1437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 10 01:10:38.105462 dbus-daemon[1230]: Ѝ%*BV: received setenforce notice (enforcing=360240736) Sep 10 01:10:38.105578 sudo[1437]: pam_unix(sudo:session): session closed for user root Sep 10 01:10:38.107461 sshd[1433]: pam_unix(sshd:session): session closed for user core Sep 10 01:10:38.110253 systemd[1]: Started sshd@5-139.178.70.105:22-147.75.109.163:37684.service. Sep 10 01:10:38.110628 systemd[1]: sshd@4-139.178.70.105:22-147.75.109.163:37678.service: Deactivated successfully. Sep 10 01:10:38.111116 systemd[1]: session-7.scope: Deactivated successfully. Sep 10 01:10:38.111624 systemd-logind[1239]: Session 7 logged out. Waiting for processes to exit. Sep 10 01:10:38.112565 systemd-logind[1239]: Removed session 7. Sep 10 01:10:38.139902 sshd[1440]: Accepted publickey for core from 147.75.109.163 port 37684 ssh2: RSA SHA256:0IUR5emySKOryc09IkQfiEMy48OZjcmwN/1tG3dFsA8 Sep 10 01:10:38.140805 sshd[1440]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 01:10:38.143677 systemd-logind[1239]: New session 8 of user core. Sep 10 01:10:38.144186 systemd[1]: Started session-8.scope. Sep 10 01:10:38.193663 sudo[1445]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Sep 10 01:10:38.194453 sudo[1445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 10 01:10:38.196158 sudo[1445]: pam_unix(sudo:session): session closed for user root Sep 10 01:10:38.198907 sudo[1444]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Sep 10 01:10:38.199037 sudo[1444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 10 01:10:38.205149 systemd[1]: Stopping audit-rules.service... Sep 10 01:10:38.204000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 10 01:10:38.206981 kernel: kauditd_printk_skb: 294 callbacks suppressed Sep 10 01:10:38.207068 kernel: audit: type=1305 audit(1757466638.204:214): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 10 01:10:38.207407 auditctl[1448]: No rules Sep 10 01:10:38.204000 audit[1448]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff1f39cc00 a2=420 a3=0 items=0 ppid=1 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.207675 systemd[1]: audit-rules.service: Deactivated successfully. Sep 10 01:10:38.207765 systemd[1]: Stopped audit-rules.service. Sep 10 01:10:38.208849 systemd[1]: Starting audit-rules.service... Sep 10 01:10:38.213485 kernel: audit: type=1300 audit(1757466638.204:214): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff1f39cc00 a2=420 a3=0 items=0 ppid=1 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.213531 kernel: audit: type=1327 audit(1757466638.204:214): proctitle=2F7362696E2F617564697463746C002D44 Sep 10 01:10:38.204000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Sep 10 01:10:38.206000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:38.216380 kernel: audit: type=1131 audit(1757466638.206:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:38.223422 augenrules[1465]: No rules Sep 10 01:10:38.223935 systemd[1]: Finished audit-rules.service. Sep 10 01:10:38.222000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:38.224418 sudo[1444]: pam_unix(sudo:session): session closed for user root Sep 10 01:10:38.223000 audit[1444]: USER_END pid=1444 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 01:10:38.227305 systemd[1]: Started sshd@6-139.178.70.105:22-147.75.109.163:37700.service. Sep 10 01:10:38.230327 kernel: audit: type=1130 audit(1757466638.222:216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:38.230365 kernel: audit: type=1106 audit(1757466638.223:217): pid=1444 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 01:10:38.230421 sshd[1440]: pam_unix(sshd:session): session closed for user core Sep 10 01:10:38.223000 audit[1444]: CRED_DISP pid=1444 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 01:10:38.233301 kernel: audit: type=1104 audit(1757466638.223:218): pid=1444 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 01:10:38.226000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.105:22-147.75.109.163:37700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:38.236335 kernel: audit: type=1130 audit(1757466638.226:219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.105:22-147.75.109.163:37700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:38.235000 audit[1440]: USER_END pid=1440 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:10:38.237414 systemd[1]: sshd@5-139.178.70.105:22-147.75.109.163:37684.service: Deactivated successfully. Sep 10 01:10:38.237811 systemd[1]: session-8.scope: Deactivated successfully. Sep 10 01:10:38.241478 kernel: audit: type=1106 audit(1757466638.235:220): pid=1440 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:10:38.241217 systemd-logind[1239]: Session 8 logged out. Waiting for processes to exit. Sep 10 01:10:38.235000 audit[1440]: CRED_DISP pid=1440 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:10:38.236000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-139.178.70.105:22-147.75.109.163:37684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:38.245056 systemd-logind[1239]: Removed session 8. Sep 10 01:10:38.245561 kernel: audit: type=1104 audit(1757466638.235:221): pid=1440 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:10:38.256000 audit[1470]: USER_ACCT pid=1470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:10:38.258029 sshd[1470]: Accepted publickey for core from 147.75.109.163 port 37700 ssh2: RSA SHA256:0IUR5emySKOryc09IkQfiEMy48OZjcmwN/1tG3dFsA8 Sep 10 01:10:38.257000 audit[1470]: CRED_ACQ pid=1470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:10:38.257000 audit[1470]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe93f6a9a0 a2=3 a3=0 items=0 ppid=1 pid=1470 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.257000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 01:10:38.259561 sshd[1470]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 01:10:38.263468 systemd[1]: Started session-9.scope. Sep 10 01:10:38.263906 systemd-logind[1239]: New session 9 of user core. Sep 10 01:10:38.266000 audit[1470]: USER_START pid=1470 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:10:38.267000 audit[1473]: CRED_ACQ pid=1473 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:10:38.313000 audit[1474]: USER_ACCT pid=1474 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 01:10:38.313000 audit[1474]: CRED_REFR pid=1474 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 01:10:38.315152 sudo[1474]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Sep 10 01:10:38.315368 sudo[1474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 10 01:10:38.315000 audit[1474]: USER_START pid=1474 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 01:10:38.330971 systemd[1]: Starting docker.service... Sep 10 01:10:38.356007 env[1484]: time="2025-09-10T01:10:38.355973870Z" level=info msg="Starting up" Sep 10 01:10:38.356703 env[1484]: time="2025-09-10T01:10:38.356687506Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 10 01:10:38.356703 env[1484]: time="2025-09-10T01:10:38.356699667Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 10 01:10:38.356754 env[1484]: time="2025-09-10T01:10:38.356711265Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 10 01:10:38.356754 env[1484]: time="2025-09-10T01:10:38.356717205Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 10 01:10:38.357639 env[1484]: time="2025-09-10T01:10:38.357623462Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 10 01:10:38.357639 env[1484]: time="2025-09-10T01:10:38.357634400Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 10 01:10:38.357700 env[1484]: time="2025-09-10T01:10:38.357641599Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 10 01:10:38.357700 env[1484]: time="2025-09-10T01:10:38.357646410Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 10 01:10:38.398591 env[1484]: time="2025-09-10T01:10:38.398566982Z" level=info msg="Loading containers: start." Sep 10 01:10:38.440000 audit[1514]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1514 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.440000 audit[1514]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fffc52049e0 a2=0 a3=7fffc52049cc items=0 ppid=1484 pid=1514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.440000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Sep 10 01:10:38.441000 audit[1516]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1516 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.441000 audit[1516]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffff362db60 a2=0 a3=7ffff362db4c items=0 ppid=1484 pid=1516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.441000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Sep 10 01:10:38.442000 audit[1518]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1518 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.442000 audit[1518]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fffcf6bfb80 a2=0 a3=7fffcf6bfb6c items=0 ppid=1484 pid=1518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.442000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 10 01:10:38.444000 audit[1520]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1520 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.444000 audit[1520]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff570cdf50 a2=0 a3=7fff570cdf3c items=0 ppid=1484 pid=1520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.444000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 10 01:10:38.452000 audit[1522]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1522 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.452000 audit[1522]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffca3f04ae0 a2=0 a3=7ffca3f04acc items=0 ppid=1484 pid=1522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.452000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Sep 10 01:10:38.480000 audit[1527]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1527 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.480000 audit[1527]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff2c1ccaa0 a2=0 a3=7fff2c1cca8c items=0 ppid=1484 pid=1527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.480000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Sep 10 01:10:38.509000 audit[1529]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1529 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.509000 audit[1529]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc7c1d7de0 a2=0 a3=7ffc7c1d7dcc items=0 ppid=1484 pid=1529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.509000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Sep 10 01:10:38.511000 audit[1531]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1531 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.511000 audit[1531]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffca75bf180 a2=0 a3=7ffca75bf16c items=0 ppid=1484 pid=1531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.511000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Sep 10 01:10:38.512000 audit[1533]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1533 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.512000 audit[1533]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffc637abd00 a2=0 a3=7ffc637abcec items=0 ppid=1484 pid=1533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.512000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 10 01:10:38.522000 audit[1537]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1537 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.522000 audit[1537]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffedb767bd0 a2=0 a3=7ffedb767bbc items=0 ppid=1484 pid=1537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.522000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 10 01:10:38.527000 audit[1538]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1538 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.527000 audit[1538]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd8d1bddf0 a2=0 a3=7ffd8d1bdddc items=0 ppid=1484 pid=1538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.527000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 10 01:10:38.539343 kernel: Initializing XFRM netlink socket Sep 10 01:10:38.568552 env[1484]: time="2025-09-10T01:10:38.568530138Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Sep 10 01:10:38.583000 audit[1546]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1546 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.583000 audit[1546]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7fff22f53bc0 a2=0 a3=7fff22f53bac items=0 ppid=1484 pid=1546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.583000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Sep 10 01:10:38.598000 audit[1549]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1549 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.598000 audit[1549]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffde375aa90 a2=0 a3=7ffde375aa7c items=0 ppid=1484 pid=1549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.598000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Sep 10 01:10:38.599000 audit[1552]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1552 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.599000 audit[1552]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe49489d40 a2=0 a3=7ffe49489d2c items=0 ppid=1484 pid=1552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.599000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Sep 10 01:10:38.601000 audit[1554]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1554 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.601000 audit[1554]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffdfba431c0 a2=0 a3=7ffdfba431ac items=0 ppid=1484 pid=1554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.601000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Sep 10 01:10:38.602000 audit[1556]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1556 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.602000 audit[1556]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffd72f706d0 a2=0 a3=7ffd72f706bc items=0 ppid=1484 pid=1556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.602000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Sep 10 01:10:38.603000 audit[1558]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1558 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.603000 audit[1558]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffc0f420f50 a2=0 a3=7ffc0f420f3c items=0 ppid=1484 pid=1558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.603000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Sep 10 01:10:38.604000 audit[1560]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1560 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.604000 audit[1560]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffd44ea8d40 a2=0 a3=7ffd44ea8d2c items=0 ppid=1484 pid=1560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.604000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Sep 10 01:10:38.628000 audit[1563]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1563 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.628000 audit[1563]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffc7e1a0730 a2=0 a3=7ffc7e1a071c items=0 ppid=1484 pid=1563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.628000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Sep 10 01:10:38.630000 audit[1565]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1565 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.630000 audit[1565]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fffadca7a60 a2=0 a3=7fffadca7a4c items=0 ppid=1484 pid=1565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.630000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 10 01:10:38.631000 audit[1567]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1567 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.631000 audit[1567]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffc4291ceb0 a2=0 a3=7ffc4291ce9c items=0 ppid=1484 pid=1567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.631000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 10 01:10:38.633000 audit[1569]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1569 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.633000 audit[1569]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe61573c00 a2=0 a3=7ffe61573bec items=0 ppid=1484 pid=1569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.633000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Sep 10 01:10:38.635454 systemd-networkd[1063]: docker0: Link UP Sep 10 01:10:38.676000 audit[1573]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1573 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.676000 audit[1573]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffccfb72110 a2=0 a3=7ffccfb720fc items=0 ppid=1484 pid=1573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.676000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 10 01:10:38.680000 audit[1574]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1574 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:38.680000 audit[1574]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff2de5b540 a2=0 a3=7fff2de5b52c items=0 ppid=1484 pid=1574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:38.680000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 10 01:10:38.682338 env[1484]: time="2025-09-10T01:10:38.682310452Z" level=info msg="Loading containers: done." Sep 10 01:10:38.693259 env[1484]: time="2025-09-10T01:10:38.693234475Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Sep 10 01:10:38.693495 env[1484]: time="2025-09-10T01:10:38.693483623Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Sep 10 01:10:38.693615 env[1484]: time="2025-09-10T01:10:38.693605346Z" level=info msg="Daemon has completed initialization" Sep 10 01:10:38.702253 systemd[1]: Started docker.service. Sep 10 01:10:38.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:38.709576 env[1484]: time="2025-09-10T01:10:38.709518726Z" level=info msg="API listen on /run/docker.sock" Sep 10 01:10:39.970351 env[1267]: time="2025-09-10T01:10:39.970308021Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.4\"" Sep 10 01:10:40.830920 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1550099163.mount: Deactivated successfully. Sep 10 01:10:41.406335 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Sep 10 01:10:41.406499 systemd[1]: Stopped kubelet.service. Sep 10 01:10:41.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:41.405000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:41.407765 systemd[1]: Starting kubelet.service... Sep 10 01:10:41.472000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:41.473495 systemd[1]: Started kubelet.service. Sep 10 01:10:41.592402 kubelet[1612]: E0910 01:10:41.592366 1612 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 10 01:10:41.592000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 10 01:10:41.593520 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 10 01:10:41.593595 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 10 01:10:42.528425 env[1267]: time="2025-09-10T01:10:42.528332007Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:42.535005 env[1267]: time="2025-09-10T01:10:42.534980662Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1f41885d0a91155d5a5e670b2862eed338c7f12b0e8a5bbc88b1ab4a2d505ae8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:42.538905 env[1267]: time="2025-09-10T01:10:42.538891783Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:42.540948 env[1267]: time="2025-09-10T01:10:42.540934968Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:0d441d0d347145b3f02f20cb313239cdae86067643d7f70803fab8bac2d28876,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:42.541370 env[1267]: time="2025-09-10T01:10:42.541356129Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.4\" returns image reference \"sha256:1f41885d0a91155d5a5e670b2862eed338c7f12b0e8a5bbc88b1ab4a2d505ae8\"" Sep 10 01:10:42.541842 env[1267]: time="2025-09-10T01:10:42.541829446Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.4\"" Sep 10 01:10:44.050332 env[1267]: time="2025-09-10T01:10:44.050285494Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:44.051423 env[1267]: time="2025-09-10T01:10:44.051404164Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:358ab71c1a1ea4846ad0b3dff0d9db6b124236b64bc8a6b79dc874f65dc0d492,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:44.052626 env[1267]: time="2025-09-10T01:10:44.052606540Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:44.053784 env[1267]: time="2025-09-10T01:10:44.053767152Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:bd22c2af2f30a8f818568b4d5fe131098fdd38267e9e07872cfc33e8f5876bc3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:44.054177 env[1267]: time="2025-09-10T01:10:44.054158232Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.4\" returns image reference \"sha256:358ab71c1a1ea4846ad0b3dff0d9db6b124236b64bc8a6b79dc874f65dc0d492\"" Sep 10 01:10:44.054959 env[1267]: time="2025-09-10T01:10:44.054929954Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.4\"" Sep 10 01:10:45.508667 env[1267]: time="2025-09-10T01:10:45.508635751Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:45.515276 env[1267]: time="2025-09-10T01:10:45.515258830Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ab4ad8a84c3c69c18494ef32fa087b32f7c44d71e6acba463d2c7dda798c3d66,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:45.518152 env[1267]: time="2025-09-10T01:10:45.518134544Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:45.523611 env[1267]: time="2025-09-10T01:10:45.523598141Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:71533e5a960e2955a54164905e92dac516ec874a23e0bf31304db82650101a4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:45.523946 env[1267]: time="2025-09-10T01:10:45.523927985Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.4\" returns image reference \"sha256:ab4ad8a84c3c69c18494ef32fa087b32f7c44d71e6acba463d2c7dda798c3d66\"" Sep 10 01:10:45.524306 env[1267]: time="2025-09-10T01:10:45.524293369Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.4\"" Sep 10 01:10:47.043592 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount706258151.mount: Deactivated successfully. Sep 10 01:10:47.664427 env[1267]: time="2025-09-10T01:10:47.664387612Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:47.677135 env[1267]: time="2025-09-10T01:10:47.677096690Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1b2ea5e018dbbbd2efb8e5c540a6d3c463d77f250d3904429402ee057f09c64e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:47.684155 env[1267]: time="2025-09-10T01:10:47.684119323Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:47.692145 env[1267]: time="2025-09-10T01:10:47.692108008Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:bb04e9247da3aaeb96406b4d530a79fc865695b6807353dd1a28871df0d7f837,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:47.692336 env[1267]: time="2025-09-10T01:10:47.692303447Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.4\" returns image reference \"sha256:1b2ea5e018dbbbd2efb8e5c540a6d3c463d77f250d3904429402ee057f09c64e\"" Sep 10 01:10:47.692745 env[1267]: time="2025-09-10T01:10:47.692729366Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Sep 10 01:10:48.268138 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount867007025.mount: Deactivated successfully. Sep 10 01:10:49.366482 env[1267]: time="2025-09-10T01:10:49.366440689Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:49.379742 env[1267]: time="2025-09-10T01:10:49.379716471Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:49.389010 env[1267]: time="2025-09-10T01:10:49.388978980Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:49.400876 env[1267]: time="2025-09-10T01:10:49.400846483Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:49.401246 env[1267]: time="2025-09-10T01:10:49.401231405Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b\"" Sep 10 01:10:49.401586 env[1267]: time="2025-09-10T01:10:49.401574627Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Sep 10 01:10:49.957889 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2124393974.mount: Deactivated successfully. Sep 10 01:10:49.960431 env[1267]: time="2025-09-10T01:10:49.960402393Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:49.961382 env[1267]: time="2025-09-10T01:10:49.961363779Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:49.962303 env[1267]: time="2025-09-10T01:10:49.962283653Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:49.963219 env[1267]: time="2025-09-10T01:10:49.963199161Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:49.963413 env[1267]: time="2025-09-10T01:10:49.963393388Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Sep 10 01:10:49.964050 env[1267]: time="2025-09-10T01:10:49.964033512Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Sep 10 01:10:50.532766 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4087798038.mount: Deactivated successfully. Sep 10 01:10:51.663638 kernel: kauditd_printk_skb: 88 callbacks suppressed Sep 10 01:10:51.663720 kernel: audit: type=1130 audit(1757466651.655:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:51.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:51.656273 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Sep 10 01:10:51.656412 systemd[1]: Stopped kubelet.service. Sep 10 01:10:51.657434 systemd[1]: Starting kubelet.service... Sep 10 01:10:51.666986 kernel: audit: type=1131 audit(1757466651.655:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:51.655000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:52.890738 update_engine[1240]: I0910 01:10:52.890445 1240 update_attempter.cc:509] Updating boot flags... Sep 10 01:10:52.961881 env[1267]: time="2025-09-10T01:10:52.961835397Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:52.997705 env[1267]: time="2025-09-10T01:10:52.997661520Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:53.018562 env[1267]: time="2025-09-10T01:10:53.018520702Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:53.039846 env[1267]: time="2025-09-10T01:10:53.039787823Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:53.040239 env[1267]: time="2025-09-10T01:10:53.040053531Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1\"" Sep 10 01:10:53.847000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:53.848495 systemd[1]: Started kubelet.service. Sep 10 01:10:53.851417 kernel: audit: type=1130 audit(1757466653.847:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:54.025506 kubelet[1649]: E0910 01:10:54.025479 1649 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 10 01:10:54.027359 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 10 01:10:54.027438 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 10 01:10:54.026000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 10 01:10:54.030336 kernel: audit: type=1131 audit(1757466654.026:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 10 01:10:55.926459 systemd[1]: Stopped kubelet.service. Sep 10 01:10:55.930997 kernel: audit: type=1130 audit(1757466655.925:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:55.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:55.929792 systemd[1]: Starting kubelet.service... Sep 10 01:10:55.925000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:55.935343 kernel: audit: type=1131 audit(1757466655.925:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:55.953041 systemd[1]: Reloading. Sep 10 01:10:56.017055 /usr/lib/systemd/system-generators/torcx-generator[1690]: time="2025-09-10T01:10:56Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 10 01:10:56.017074 /usr/lib/systemd/system-generators/torcx-generator[1690]: time="2025-09-10T01:10:56Z" level=info msg="torcx already run" Sep 10 01:10:56.075788 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 10 01:10:56.075907 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 10 01:10:56.087653 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 10 01:10:56.135053 kernel: audit: type=1400 audit(1757466656.126:266): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.135128 kernel: audit: type=1400 audit(1757466656.126:267): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.135146 kernel: audit: type=1400 audit(1757466656.126:268): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.137677 kernel: audit: type=1400 audit(1757466656.126:269): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.134000 audit: BPF prog-id=46 op=LOAD Sep 10 01:10:56.134000 audit: BPF prog-id=30 op=UNLOAD Sep 10 01:10:56.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit: BPF prog-id=47 op=LOAD Sep 10 01:10:56.139000 audit: BPF prog-id=41 op=UNLOAD Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit: BPF prog-id=48 op=LOAD Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit: BPF prog-id=49 op=LOAD Sep 10 01:10:56.139000 audit: BPF prog-id=42 op=UNLOAD Sep 10 01:10:56.139000 audit: BPF prog-id=43 op=UNLOAD Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.139000 audit: BPF prog-id=50 op=LOAD Sep 10 01:10:56.139000 audit: BPF prog-id=39 op=UNLOAD Sep 10 01:10:56.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.140000 audit: BPF prog-id=51 op=LOAD Sep 10 01:10:56.140000 audit: BPF prog-id=40 op=UNLOAD Sep 10 01:10:56.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.141000 audit: BPF prog-id=52 op=LOAD Sep 10 01:10:56.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.141000 audit: BPF prog-id=53 op=LOAD Sep 10 01:10:56.141000 audit: BPF prog-id=31 op=UNLOAD Sep 10 01:10:56.141000 audit: BPF prog-id=32 op=UNLOAD Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit: BPF prog-id=54 op=LOAD Sep 10 01:10:56.142000 audit: BPF prog-id=33 op=UNLOAD Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit: BPF prog-id=55 op=LOAD Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit: BPF prog-id=56 op=LOAD Sep 10 01:10:56.142000 audit: BPF prog-id=34 op=UNLOAD Sep 10 01:10:56.142000 audit: BPF prog-id=35 op=UNLOAD Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit: BPF prog-id=57 op=LOAD Sep 10 01:10:56.142000 audit: BPF prog-id=44 op=UNLOAD Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit: BPF prog-id=58 op=LOAD Sep 10 01:10:56.143000 audit: BPF prog-id=36 op=UNLOAD Sep 10 01:10:56.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit: BPF prog-id=59 op=LOAD Sep 10 01:10:56.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:56.143000 audit: BPF prog-id=60 op=LOAD Sep 10 01:10:56.143000 audit: BPF prog-id=37 op=UNLOAD Sep 10 01:10:56.143000 audit: BPF prog-id=38 op=UNLOAD Sep 10 01:10:56.200000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 10 01:10:56.201505 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Sep 10 01:10:56.201622 systemd[1]: kubelet.service: Failed with result 'signal'. Sep 10 01:10:56.201864 systemd[1]: Stopped kubelet.service. Sep 10 01:10:56.203820 systemd[1]: Starting kubelet.service... Sep 10 01:10:56.574933 systemd[1]: Started kubelet.service. Sep 10 01:10:56.573000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:10:56.652521 kubelet[1754]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 10 01:10:56.652521 kubelet[1754]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 10 01:10:56.652521 kubelet[1754]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 10 01:10:56.652779 kubelet[1754]: I0910 01:10:56.652549 1754 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 10 01:10:56.963114 kubelet[1754]: I0910 01:10:56.963083 1754 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Sep 10 01:10:56.963114 kubelet[1754]: I0910 01:10:56.963106 1754 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 10 01:10:56.963352 kubelet[1754]: I0910 01:10:56.963289 1754 server.go:956] "Client rotation is on, will bootstrap in background" Sep 10 01:10:57.051970 kubelet[1754]: E0910 01:10:57.051936 1754 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://139.178.70.105:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 139.178.70.105:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Sep 10 01:10:57.053717 kubelet[1754]: I0910 01:10:57.053695 1754 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 10 01:10:57.079328 kubelet[1754]: E0910 01:10:57.079273 1754 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 10 01:10:57.079469 kubelet[1754]: I0910 01:10:57.079459 1754 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 10 01:10:57.083157 kubelet[1754]: I0910 01:10:57.083136 1754 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 10 01:10:57.083467 kubelet[1754]: I0910 01:10:57.083446 1754 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 10 01:10:57.083629 kubelet[1754]: I0910 01:10:57.083509 1754 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 10 01:10:57.083731 kubelet[1754]: I0910 01:10:57.083722 1754 topology_manager.go:138] "Creating topology manager with none policy" Sep 10 01:10:57.083778 kubelet[1754]: I0910 01:10:57.083771 1754 container_manager_linux.go:303] "Creating device plugin manager" Sep 10 01:10:57.083893 kubelet[1754]: I0910 01:10:57.083886 1754 state_mem.go:36] "Initialized new in-memory state store" Sep 10 01:10:57.088587 kubelet[1754]: I0910 01:10:57.088564 1754 kubelet.go:480] "Attempting to sync node with API server" Sep 10 01:10:57.088698 kubelet[1754]: I0910 01:10:57.088689 1754 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 10 01:10:57.088768 kubelet[1754]: I0910 01:10:57.088761 1754 kubelet.go:386] "Adding apiserver pod source" Sep 10 01:10:57.174930 kubelet[1754]: I0910 01:10:57.174886 1754 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 10 01:10:57.248941 kubelet[1754]: E0910 01:10:57.248849 1754 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://139.178.70.105:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 139.178.70.105:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Sep 10 01:10:57.248941 kubelet[1754]: E0910 01:10:57.248911 1754 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://139.178.70.105:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 139.178.70.105:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Sep 10 01:10:57.251359 kubelet[1754]: I0910 01:10:57.251339 1754 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 10 01:10:57.254184 kubelet[1754]: I0910 01:10:57.254150 1754 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Sep 10 01:10:57.256898 kubelet[1754]: W0910 01:10:57.256863 1754 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Sep 10 01:10:57.267258 kubelet[1754]: I0910 01:10:57.267231 1754 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 10 01:10:57.267388 kubelet[1754]: I0910 01:10:57.267286 1754 server.go:1289] "Started kubelet" Sep 10 01:10:57.267715 kubelet[1754]: I0910 01:10:57.267688 1754 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Sep 10 01:10:57.267000 audit[1754]: AVC avc: denied { mac_admin } for pid=1754 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:57.269511 kernel: kauditd_printk_skb: 170 callbacks suppressed Sep 10 01:10:57.269629 kernel: audit: type=1400 audit(1757466657.267:440): avc: denied { mac_admin } for pid=1754 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:57.267000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 10 01:10:57.272354 kubelet[1754]: I0910 01:10:57.272324 1754 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 10 01:10:57.272478 kubelet[1754]: I0910 01:10:57.272463 1754 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 10 01:10:57.272643 kubelet[1754]: I0910 01:10:57.272632 1754 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 10 01:10:57.273472 kernel: audit: type=1401 audit(1757466657.267:440): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 10 01:10:57.273527 kernel: audit: type=1300 audit(1757466657.267:440): arch=c000003e syscall=188 success=no exit=-22 a0=c000b8eff0 a1=c000b6edc8 a2=c000b8efc0 a3=25 items=0 ppid=1 pid=1754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:57.267000 audit[1754]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b8eff0 a1=c000b6edc8 a2=c000b8efc0 a3=25 items=0 ppid=1 pid=1754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:57.274557 kubelet[1754]: I0910 01:10:57.274542 1754 server.go:317] "Adding debug handlers to kubelet server" Sep 10 01:10:57.267000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 10 01:10:57.280818 kernel: audit: type=1327 audit(1757466657.267:440): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 10 01:10:57.271000 audit[1754]: AVC avc: denied { mac_admin } for pid=1754 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:57.271000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 10 01:10:57.285406 kernel: audit: type=1400 audit(1757466657.271:441): avc: denied { mac_admin } for pid=1754 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:57.285470 kernel: audit: type=1401 audit(1757466657.271:441): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 10 01:10:57.285497 kernel: audit: type=1300 audit(1757466657.271:441): arch=c000003e syscall=188 success=no exit=-22 a0=c000b5f060 a1=c000b6ede0 a2=c000b8f080 a3=25 items=0 ppid=1 pid=1754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:57.271000 audit[1754]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b5f060 a1=c000b6ede0 a2=c000b8f080 a3=25 items=0 ppid=1 pid=1754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:57.288938 kubelet[1754]: I0910 01:10:57.288905 1754 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 10 01:10:57.271000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 10 01:10:57.289270 kubelet[1754]: I0910 01:10:57.289232 1754 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 10 01:10:57.289671 kubelet[1754]: I0910 01:10:57.289659 1754 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 10 01:10:57.292686 kernel: audit: type=1327 audit(1757466657.271:441): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 10 01:10:57.292790 kernel: audit: type=1325 audit(1757466657.280:442): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1770 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:57.280000 audit[1770]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1770 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:57.280000 audit[1770]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffe37f21a0 a2=0 a3=7fffe37f218c items=0 ppid=1754 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:57.295579 kubelet[1754]: E0910 01:10:57.292116 1754 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://139.178.70.105:6443/api/v1/namespaces/default/events\": dial tcp 139.178.70.105:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1863c69d0301fa02 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-09-10 01:10:57.267251714 +0000 UTC m=+0.688962723,LastTimestamp:2025-09-10 01:10:57.267251714 +0000 UTC m=+0.688962723,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Sep 10 01:10:57.296480 kubelet[1754]: I0910 01:10:57.296468 1754 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 10 01:10:57.296795 kubelet[1754]: E0910 01:10:57.296781 1754 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 01:10:57.297441 kubelet[1754]: I0910 01:10:57.297431 1754 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 10 01:10:57.297596 kubelet[1754]: I0910 01:10:57.297587 1754 reconciler.go:26] "Reconciler: start to sync state" Sep 10 01:10:57.298639 kernel: audit: type=1300 audit(1757466657.280:442): arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffe37f21a0 a2=0 a3=7fffe37f218c items=0 ppid=1754 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:57.298952 kubelet[1754]: E0910 01:10:57.298931 1754 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://139.178.70.105:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 139.178.70.105:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Sep 10 01:10:57.299098 kubelet[1754]: E0910 01:10:57.299079 1754 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.105:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.105:6443: connect: connection refused" interval="200ms" Sep 10 01:10:57.299370 kubelet[1754]: I0910 01:10:57.299358 1754 factory.go:223] Registration of the systemd container factory successfully Sep 10 01:10:57.280000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 10 01:10:57.283000 audit[1771]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1771 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:57.283000 audit[1771]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc65f34ac0 a2=0 a3=7ffc65f34aac items=0 ppid=1754 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:57.283000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 10 01:10:57.299696 kubelet[1754]: I0910 01:10:57.299684 1754 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 10 01:10:57.298000 audit[1774]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1774 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:57.298000 audit[1774]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc0796f430 a2=0 a3=7ffc0796f41c items=0 ppid=1754 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:57.298000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 10 01:10:57.301269 kubelet[1754]: I0910 01:10:57.301256 1754 factory.go:223] Registration of the containerd container factory successfully Sep 10 01:10:57.300000 audit[1776]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1776 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:57.300000 audit[1776]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffdfc9d9dd0 a2=0 a3=7ffdfc9d9dbc items=0 ppid=1754 pid=1776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:57.300000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 10 01:10:57.307000 audit[1779]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1779 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:57.307000 audit[1779]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7fff7a52e780 a2=0 a3=7fff7a52e76c items=0 ppid=1754 pid=1779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:57.307000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Sep 10 01:10:57.307000 audit[1781]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1781 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:10:57.307000 audit[1781]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffdf04cea60 a2=0 a3=7ffdf04cea4c items=0 ppid=1754 pid=1781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:57.307000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 10 01:10:57.309582 kubelet[1754]: I0910 01:10:57.308548 1754 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Sep 10 01:10:57.309582 kubelet[1754]: I0910 01:10:57.309220 1754 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Sep 10 01:10:57.309582 kubelet[1754]: I0910 01:10:57.309231 1754 status_manager.go:230] "Starting to sync pod status with apiserver" Sep 10 01:10:57.309582 kubelet[1754]: I0910 01:10:57.309250 1754 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 10 01:10:57.309582 kubelet[1754]: I0910 01:10:57.309255 1754 kubelet.go:2436] "Starting kubelet main sync loop" Sep 10 01:10:57.309582 kubelet[1754]: E0910 01:10:57.309283 1754 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 10 01:10:57.308000 audit[1782]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1782 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:57.308000 audit[1782]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff8dfb4460 a2=0 a3=7fff8dfb444c items=0 ppid=1754 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:57.308000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 10 01:10:57.309000 audit[1783]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1783 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:57.309000 audit[1783]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcdbd89850 a2=0 a3=7ffcdbd8983c items=0 ppid=1754 pid=1783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:57.309000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 10 01:10:57.310000 audit[1784]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=1784 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:10:57.310000 audit[1784]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeee4effb0 a2=0 a3=7ffeee4eff9c items=0 ppid=1754 pid=1784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:57.310000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 10 01:10:57.310000 audit[1785]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=1785 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:10:57.310000 audit[1785]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd4f93d0a0 a2=0 a3=7ffd4f93d08c items=0 ppid=1754 pid=1785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:57.310000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 10 01:10:57.311000 audit[1786]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1786 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:10:57.311000 audit[1786]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffda79dc080 a2=0 a3=7ffda79dc06c items=0 ppid=1754 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:57.311000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 10 01:10:57.312000 audit[1787]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1787 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:10:57.312000 audit[1787]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffef7a8da20 a2=0 a3=7ffef7a8da0c items=0 ppid=1754 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:57.312000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 10 01:10:57.314641 kubelet[1754]: E0910 01:10:57.314615 1754 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://139.178.70.105:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 139.178.70.105:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Sep 10 01:10:57.328264 kubelet[1754]: E0910 01:10:57.328235 1754 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 10 01:10:57.331155 kubelet[1754]: I0910 01:10:57.331120 1754 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 10 01:10:57.331155 kubelet[1754]: I0910 01:10:57.331140 1754 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 10 01:10:57.331155 kubelet[1754]: I0910 01:10:57.331163 1754 state_mem.go:36] "Initialized new in-memory state store" Sep 10 01:10:57.332612 kubelet[1754]: I0910 01:10:57.332591 1754 policy_none.go:49] "None policy: Start" Sep 10 01:10:57.332667 kubelet[1754]: I0910 01:10:57.332615 1754 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 10 01:10:57.332667 kubelet[1754]: I0910 01:10:57.332628 1754 state_mem.go:35] "Initializing new in-memory state store" Sep 10 01:10:57.335852 systemd[1]: Created slice kubepods.slice. Sep 10 01:10:57.339100 systemd[1]: Created slice kubepods-burstable.slice. Sep 10 01:10:57.341874 systemd[1]: Created slice kubepods-besteffort.slice. Sep 10 01:10:57.346097 kubelet[1754]: E0910 01:10:57.346076 1754 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Sep 10 01:10:57.344000 audit[1754]: AVC avc: denied { mac_admin } for pid=1754 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:57.344000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 10 01:10:57.344000 audit[1754]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e16e10 a1=c000e42420 a2=c000e16de0 a3=25 items=0 ppid=1 pid=1754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:57.344000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 10 01:10:57.347556 kubelet[1754]: E0910 01:10:57.347543 1754 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Sep 10 01:10:57.347986 kubelet[1754]: I0910 01:10:57.347979 1754 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 10 01:10:57.348058 kubelet[1754]: I0910 01:10:57.348032 1754 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 10 01:10:57.348251 kubelet[1754]: I0910 01:10:57.348244 1754 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 10 01:10:57.348860 kubelet[1754]: E0910 01:10:57.348851 1754 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 10 01:10:57.348934 kubelet[1754]: E0910 01:10:57.348925 1754 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Sep 10 01:10:57.430430 systemd[1]: Created slice kubepods-burstable-pod8de7187202bee21b84740a213836f615.slice. Sep 10 01:10:57.435746 kubelet[1754]: E0910 01:10:57.435723 1754 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 10 01:10:57.442937 systemd[1]: Created slice kubepods-burstable-podd75e6f6978d9f275ea19380916c9cccd.slice. Sep 10 01:10:57.444294 kubelet[1754]: E0910 01:10:57.444280 1754 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 10 01:10:57.449102 kubelet[1754]: I0910 01:10:57.449082 1754 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 10 01:10:57.449386 kubelet[1754]: E0910 01:10:57.449363 1754 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://139.178.70.105:6443/api/v1/nodes\": dial tcp 139.178.70.105:6443: connect: connection refused" node="localhost" Sep 10 01:10:57.471396 systemd[1]: Created slice kubepods-burstable-pod8f63649365fc3bd7b71a060b8d9f2e77.slice. Sep 10 01:10:57.473542 kubelet[1754]: E0910 01:10:57.473524 1754 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 10 01:10:57.498775 kubelet[1754]: I0910 01:10:57.498747 1754 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8de7187202bee21b84740a213836f615-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"8de7187202bee21b84740a213836f615\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 01:10:57.502356 kubelet[1754]: I0910 01:10:57.498938 1754 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8de7187202bee21b84740a213836f615-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"8de7187202bee21b84740a213836f615\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 01:10:57.502356 kubelet[1754]: I0910 01:10:57.500356 1754 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d75e6f6978d9f275ea19380916c9cccd-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"d75e6f6978d9f275ea19380916c9cccd\") " pod="kube-system/kube-scheduler-localhost" Sep 10 01:10:57.502356 kubelet[1754]: I0910 01:10:57.500388 1754 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8f63649365fc3bd7b71a060b8d9f2e77-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"8f63649365fc3bd7b71a060b8d9f2e77\") " pod="kube-system/kube-apiserver-localhost" Sep 10 01:10:57.502356 kubelet[1754]: I0910 01:10:57.500404 1754 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/8de7187202bee21b84740a213836f615-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"8de7187202bee21b84740a213836f615\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 01:10:57.502356 kubelet[1754]: I0910 01:10:57.500413 1754 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8de7187202bee21b84740a213836f615-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"8de7187202bee21b84740a213836f615\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 01:10:57.502511 kubelet[1754]: I0910 01:10:57.500423 1754 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8de7187202bee21b84740a213836f615-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"8de7187202bee21b84740a213836f615\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 01:10:57.502511 kubelet[1754]: I0910 01:10:57.500431 1754 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8f63649365fc3bd7b71a060b8d9f2e77-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"8f63649365fc3bd7b71a060b8d9f2e77\") " pod="kube-system/kube-apiserver-localhost" Sep 10 01:10:57.502511 kubelet[1754]: I0910 01:10:57.500439 1754 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8f63649365fc3bd7b71a060b8d9f2e77-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"8f63649365fc3bd7b71a060b8d9f2e77\") " pod="kube-system/kube-apiserver-localhost" Sep 10 01:10:57.502511 kubelet[1754]: E0910 01:10:57.499984 1754 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.105:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.105:6443: connect: connection refused" interval="400ms" Sep 10 01:10:57.650831 kubelet[1754]: I0910 01:10:57.650804 1754 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 10 01:10:57.651078 kubelet[1754]: E0910 01:10:57.651057 1754 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://139.178.70.105:6443/api/v1/nodes\": dial tcp 139.178.70.105:6443: connect: connection refused" node="localhost" Sep 10 01:10:57.738373 env[1267]: time="2025-09-10T01:10:57.738279446Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:8de7187202bee21b84740a213836f615,Namespace:kube-system,Attempt:0,}" Sep 10 01:10:57.745600 env[1267]: time="2025-09-10T01:10:57.745302613Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:d75e6f6978d9f275ea19380916c9cccd,Namespace:kube-system,Attempt:0,}" Sep 10 01:10:57.775253 env[1267]: time="2025-09-10T01:10:57.774612528Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:8f63649365fc3bd7b71a060b8d9f2e77,Namespace:kube-system,Attempt:0,}" Sep 10 01:10:57.900805 kubelet[1754]: E0910 01:10:57.900773 1754 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.105:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.105:6443: connect: connection refused" interval="800ms" Sep 10 01:10:58.053023 kubelet[1754]: I0910 01:10:58.052725 1754 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 10 01:10:58.053127 kubelet[1754]: E0910 01:10:58.053109 1754 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://139.178.70.105:6443/api/v1/nodes\": dial tcp 139.178.70.105:6443: connect: connection refused" node="localhost" Sep 10 01:10:58.241392 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount461703274.mount: Deactivated successfully. Sep 10 01:10:58.248359 env[1267]: time="2025-09-10T01:10:58.248309125Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:58.249055 env[1267]: time="2025-09-10T01:10:58.249040323Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:58.250031 env[1267]: time="2025-09-10T01:10:58.250017840Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:58.250527 env[1267]: time="2025-09-10T01:10:58.250514518Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:58.251355 env[1267]: time="2025-09-10T01:10:58.251334225Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:58.251962 env[1267]: time="2025-09-10T01:10:58.251948667Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:58.253669 env[1267]: time="2025-09-10T01:10:58.253645135Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:58.254216 env[1267]: time="2025-09-10T01:10:58.254197390Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:58.255946 env[1267]: time="2025-09-10T01:10:58.255929696Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:58.256390 env[1267]: time="2025-09-10T01:10:58.256376914Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:58.256804 env[1267]: time="2025-09-10T01:10:58.256792092Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:58.258106 env[1267]: time="2025-09-10T01:10:58.258091621Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:10:58.282424 env[1267]: time="2025-09-10T01:10:58.278746133Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 01:10:58.282424 env[1267]: time="2025-09-10T01:10:58.278772270Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 01:10:58.282424 env[1267]: time="2025-09-10T01:10:58.278779557Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 01:10:58.282424 env[1267]: time="2025-09-10T01:10:58.278909216Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9a9e1f6e1801ca0bb93836c607ee1f5cc423dcf06a7a84c8ac3a657b9fb512f1 pid=1798 runtime=io.containerd.runc.v2 Sep 10 01:10:58.282602 env[1267]: time="2025-09-10T01:10:58.276479207Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 01:10:58.282602 env[1267]: time="2025-09-10T01:10:58.276504716Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 01:10:58.282602 env[1267]: time="2025-09-10T01:10:58.276511878Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 01:10:58.282602 env[1267]: time="2025-09-10T01:10:58.276588457Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c005c27892f23fa7327de7f8d60a3dfd8be8effce84fd9b96b55c4384fd2d326 pid=1812 runtime=io.containerd.runc.v2 Sep 10 01:10:58.297543 systemd[1]: Started cri-containerd-9a9e1f6e1801ca0bb93836c607ee1f5cc423dcf06a7a84c8ac3a657b9fb512f1.scope. Sep 10 01:10:58.300936 env[1267]: time="2025-09-10T01:10:58.299731419Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 01:10:58.300936 env[1267]: time="2025-09-10T01:10:58.299755722Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 01:10:58.300936 env[1267]: time="2025-09-10T01:10:58.299763126Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 01:10:58.300936 env[1267]: time="2025-09-10T01:10:58.299836796Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/76c942ff090c238c530c335b3d2b8fc6735d0650dc98765d975198a4dcb66ecf pid=1848 runtime=io.containerd.runc.v2 Sep 10 01:10:58.310191 systemd[1]: Started cri-containerd-c005c27892f23fa7327de7f8d60a3dfd8be8effce84fd9b96b55c4384fd2d326.scope. Sep 10 01:10:58.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.318000 audit: BPF prog-id=61 op=LOAD Sep 10 01:10:58.318000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.318000 audit[1826]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1798 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961396531663665313830316361306262393338333663363037656531 Sep 10 01:10:58.318000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.318000 audit[1826]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=1798 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961396531663665313830316361306262393338333663363037656531 Sep 10 01:10:58.319000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.319000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.319000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.319000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.319000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.319000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.319000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.319000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.319000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.319000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.319000 audit: BPF prog-id=62 op=LOAD Sep 10 01:10:58.319000 audit[1826]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000196f30 items=0 ppid=1798 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961396531663665313830316361306262393338333663363037656531 Sep 10 01:10:58.319000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.319000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.319000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.319000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.319000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.319000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.319000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.319000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.319000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.319000 audit: BPF prog-id=63 op=LOAD Sep 10 01:10:58.319000 audit[1826]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000196f78 items=0 ppid=1798 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961396531663665313830316361306262393338333663363037656531 Sep 10 01:10:58.320000 audit: BPF prog-id=63 op=UNLOAD Sep 10 01:10:58.320000 audit: BPF prog-id=62 op=UNLOAD Sep 10 01:10:58.320000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.320000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.320000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.320000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.320000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.320000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.320000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.320000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.320000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.320000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.320000 audit: BPF prog-id=64 op=LOAD Sep 10 01:10:58.320000 audit[1826]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000197388 items=0 ppid=1798 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961396531663665313830316361306262393338333663363037656531 Sep 10 01:10:58.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.325000 audit: BPF prog-id=65 op=LOAD Sep 10 01:10:58.325000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.325000 audit[1827]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1812 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330303563323738393266323366613733323764653766386436306133 Sep 10 01:10:58.326000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.326000 audit[1827]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1812 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330303563323738393266323366613733323764653766386436306133 Sep 10 01:10:58.326000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.326000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.326000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.326000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.326000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.326000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.326000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.326000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.326000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.326000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.326000 audit: BPF prog-id=66 op=LOAD Sep 10 01:10:58.326000 audit[1827]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000352350 items=0 ppid=1812 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330303563323738393266323366613733323764653766386436306133 Sep 10 01:10:58.326000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.326000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.326000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.326000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.326000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.326000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.326000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.326000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.326000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.326000 audit: BPF prog-id=67 op=LOAD Sep 10 01:10:58.326000 audit[1827]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000352398 items=0 ppid=1812 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330303563323738393266323366613733323764653766386436306133 Sep 10 01:10:58.327000 audit: BPF prog-id=67 op=UNLOAD Sep 10 01:10:58.327000 audit: BPF prog-id=66 op=UNLOAD Sep 10 01:10:58.327000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.327000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.327000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.327000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.327000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.327000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.327000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.327000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.327000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.327000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.327000 audit: BPF prog-id=68 op=LOAD Sep 10 01:10:58.327000 audit[1827]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003527a8 items=0 ppid=1812 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.327000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330303563323738393266323366613733323764653766386436306133 Sep 10 01:10:58.334259 systemd[1]: Started cri-containerd-76c942ff090c238c530c335b3d2b8fc6735d0650dc98765d975198a4dcb66ecf.scope. Sep 10 01:10:58.355002 env[1267]: time="2025-09-10T01:10:58.354875338Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:8de7187202bee21b84740a213836f615,Namespace:kube-system,Attempt:0,} returns sandbox id \"9a9e1f6e1801ca0bb93836c607ee1f5cc423dcf06a7a84c8ac3a657b9fb512f1\"" Sep 10 01:10:58.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.357000 audit: BPF prog-id=69 op=LOAD Sep 10 01:10:58.359181 env[1267]: time="2025-09-10T01:10:58.359057469Z" level=info msg="CreateContainer within sandbox \"9a9e1f6e1801ca0bb93836c607ee1f5cc423dcf06a7a84c8ac3a657b9fb512f1\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Sep 10 01:10:58.359000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.359000 audit[1864]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1848 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.359000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736633934326666303930633233386335333063333335623364326238 Sep 10 01:10:58.359000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.359000 audit[1864]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1848 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.359000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736633934326666303930633233386335333063333335623364326238 Sep 10 01:10:58.359000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.359000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.359000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.359000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.359000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.359000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.359000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.359000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.359000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.359000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.359000 audit: BPF prog-id=70 op=LOAD Sep 10 01:10:58.359000 audit[1864]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000309200 items=0 ppid=1848 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.359000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736633934326666303930633233386335333063333335623364326238 Sep 10 01:10:58.360000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.360000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.360000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.360000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.360000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.360000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.360000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.360000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.360000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.360000 audit: BPF prog-id=71 op=LOAD Sep 10 01:10:58.360000 audit[1864]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000309248 items=0 ppid=1848 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736633934326666303930633233386335333063333335623364326238 Sep 10 01:10:58.361000 audit: BPF prog-id=71 op=UNLOAD Sep 10 01:10:58.361000 audit: BPF prog-id=70 op=UNLOAD Sep 10 01:10:58.362000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.362000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.362000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.362000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.362000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.362000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.362000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.362000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.362000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.362000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.362000 audit: BPF prog-id=72 op=LOAD Sep 10 01:10:58.362000 audit[1864]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000309658 items=0 ppid=1848 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736633934326666303930633233386335333063333335623364326238 Sep 10 01:10:58.370283 env[1267]: time="2025-09-10T01:10:58.370251114Z" level=info msg="CreateContainer within sandbox \"9a9e1f6e1801ca0bb93836c607ee1f5cc423dcf06a7a84c8ac3a657b9fb512f1\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"4b6a8ac61a37fdce0164765b3f8d9a612db95e14499ac39d297966a7200d852d\"" Sep 10 01:10:58.374572 env[1267]: time="2025-09-10T01:10:58.374546467Z" level=info msg="StartContainer for \"4b6a8ac61a37fdce0164765b3f8d9a612db95e14499ac39d297966a7200d852d\"" Sep 10 01:10:58.389793 env[1267]: time="2025-09-10T01:10:58.389759092Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:d75e6f6978d9f275ea19380916c9cccd,Namespace:kube-system,Attempt:0,} returns sandbox id \"76c942ff090c238c530c335b3d2b8fc6735d0650dc98765d975198a4dcb66ecf\"" Sep 10 01:10:58.391874 env[1267]: time="2025-09-10T01:10:58.391854814Z" level=info msg="CreateContainer within sandbox \"76c942ff090c238c530c335b3d2b8fc6735d0650dc98765d975198a4dcb66ecf\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Sep 10 01:10:58.396415 env[1267]: time="2025-09-10T01:10:58.396388737Z" level=info msg="CreateContainer within sandbox \"76c942ff090c238c530c335b3d2b8fc6735d0650dc98765d975198a4dcb66ecf\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"ee62937825b138c75dba09dbdba44ff73839eb841733417bb809dc9eb10b5f99\"" Sep 10 01:10:58.396858 env[1267]: time="2025-09-10T01:10:58.396844642Z" level=info msg="StartContainer for \"ee62937825b138c75dba09dbdba44ff73839eb841733417bb809dc9eb10b5f99\"" Sep 10 01:10:58.400087 env[1267]: time="2025-09-10T01:10:58.400026645Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:8f63649365fc3bd7b71a060b8d9f2e77,Namespace:kube-system,Attempt:0,} returns sandbox id \"c005c27892f23fa7327de7f8d60a3dfd8be8effce84fd9b96b55c4384fd2d326\"" Sep 10 01:10:58.402195 systemd[1]: Started cri-containerd-4b6a8ac61a37fdce0164765b3f8d9a612db95e14499ac39d297966a7200d852d.scope. Sep 10 01:10:58.408212 env[1267]: time="2025-09-10T01:10:58.408188457Z" level=info msg="CreateContainer within sandbox \"c005c27892f23fa7327de7f8d60a3dfd8be8effce84fd9b96b55c4384fd2d326\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Sep 10 01:10:58.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.413000 audit: BPF prog-id=73 op=LOAD Sep 10 01:10:58.414000 audit[1906]: AVC avc: denied { bpf } for pid=1906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.414000 audit[1906]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1798 pid=1906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462366138616336316133376664636530313634373635623366386439 Sep 10 01:10:58.414000 audit[1906]: AVC avc: denied { perfmon } for pid=1906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.414000 audit[1906]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1798 pid=1906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462366138616336316133376664636530313634373635623366386439 Sep 10 01:10:58.414000 audit[1906]: AVC avc: denied { bpf } for pid=1906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.414000 audit[1906]: AVC avc: denied { bpf } for pid=1906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.414000 audit[1906]: AVC avc: denied { bpf } for pid=1906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.414000 audit[1906]: AVC avc: denied { perfmon } for pid=1906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.414000 audit[1906]: AVC avc: denied { perfmon } for pid=1906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.414000 audit[1906]: AVC avc: denied { perfmon } for pid=1906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.414000 audit[1906]: AVC avc: denied { perfmon } for pid=1906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.414000 audit[1906]: AVC avc: denied { perfmon } for pid=1906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.414000 audit[1906]: AVC avc: denied { bpf } for pid=1906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.414000 audit[1906]: AVC avc: denied { bpf } for pid=1906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.414000 audit: BPF prog-id=74 op=LOAD Sep 10 01:10:58.414000 audit[1906]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0000249d0 items=0 ppid=1798 pid=1906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462366138616336316133376664636530313634373635623366386439 Sep 10 01:10:58.415000 audit[1906]: AVC avc: denied { bpf } for pid=1906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.415000 audit[1906]: AVC avc: denied { bpf } for pid=1906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.415000 audit[1906]: AVC avc: denied { perfmon } for pid=1906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.415000 audit[1906]: AVC avc: denied { perfmon } for pid=1906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.415000 audit[1906]: AVC avc: denied { perfmon } for pid=1906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.415000 audit[1906]: AVC avc: denied { perfmon } for pid=1906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.415000 audit[1906]: AVC avc: denied { perfmon } for pid=1906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.415000 audit[1906]: AVC avc: denied { bpf } for pid=1906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.415000 audit[1906]: AVC avc: denied { bpf } for pid=1906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.415000 audit: BPF prog-id=75 op=LOAD Sep 10 01:10:58.415000 audit[1906]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024a18 items=0 ppid=1798 pid=1906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462366138616336316133376664636530313634373635623366386439 Sep 10 01:10:58.415000 audit: BPF prog-id=75 op=UNLOAD Sep 10 01:10:58.415000 audit: BPF prog-id=74 op=UNLOAD Sep 10 01:10:58.415000 audit[1906]: AVC avc: denied { bpf } for pid=1906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.415000 audit[1906]: AVC avc: denied { bpf } for pid=1906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.415000 audit[1906]: AVC avc: denied { bpf } for pid=1906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.415000 audit[1906]: AVC avc: denied { perfmon } for pid=1906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.415000 audit[1906]: AVC avc: denied { perfmon } for pid=1906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.415000 audit[1906]: AVC avc: denied { perfmon } for pid=1906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.415000 audit[1906]: AVC avc: denied { perfmon } for pid=1906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.415000 audit[1906]: AVC avc: denied { perfmon } for pid=1906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.415000 audit[1906]: AVC avc: denied { bpf } for pid=1906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.415000 audit[1906]: AVC avc: denied { bpf } for pid=1906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.415000 audit: BPF prog-id=76 op=LOAD Sep 10 01:10:58.415000 audit[1906]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000024e28 items=0 ppid=1798 pid=1906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462366138616336316133376664636530313634373635623366386439 Sep 10 01:10:58.426897 systemd[1]: Started cri-containerd-ee62937825b138c75dba09dbdba44ff73839eb841733417bb809dc9eb10b5f99.scope. Sep 10 01:10:58.429695 env[1267]: time="2025-09-10T01:10:58.429667239Z" level=info msg="CreateContainer within sandbox \"c005c27892f23fa7327de7f8d60a3dfd8be8effce84fd9b96b55c4384fd2d326\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"e60e8faa0148dbd5962165c737f30efc0fdfb66086efd0e085583074de87f405\"" Sep 10 01:10:58.431467 env[1267]: time="2025-09-10T01:10:58.431439607Z" level=info msg="StartContainer for \"e60e8faa0148dbd5962165c737f30efc0fdfb66086efd0e085583074de87f405\"" Sep 10 01:10:58.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.442000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.442000 audit: BPF prog-id=77 op=LOAD Sep 10 01:10:58.442000 audit[1941]: AVC avc: denied { bpf } for pid=1941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.442000 audit[1941]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1848 pid=1941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565363239333738323562313338633735646261303964626462613434 Sep 10 01:10:58.443000 audit[1941]: AVC avc: denied { perfmon } for pid=1941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.443000 audit[1941]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1848 pid=1941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565363239333738323562313338633735646261303964626462613434 Sep 10 01:10:58.443000 audit[1941]: AVC avc: denied { bpf } for pid=1941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.443000 audit[1941]: AVC avc: denied { bpf } for pid=1941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.443000 audit[1941]: AVC avc: denied { bpf } for pid=1941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.443000 audit[1941]: AVC avc: denied { perfmon } for pid=1941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.443000 audit[1941]: AVC avc: denied { perfmon } for pid=1941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.443000 audit[1941]: AVC avc: denied { perfmon } for pid=1941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.443000 audit[1941]: AVC avc: denied { perfmon } for pid=1941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.443000 audit[1941]: AVC avc: denied { perfmon } for pid=1941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.443000 audit[1941]: AVC avc: denied { bpf } for pid=1941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.443000 audit[1941]: AVC avc: denied { bpf } for pid=1941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.443000 audit: BPF prog-id=78 op=LOAD Sep 10 01:10:58.443000 audit[1941]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00028f880 items=0 ppid=1848 pid=1941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565363239333738323562313338633735646261303964626462613434 Sep 10 01:10:58.444000 audit[1941]: AVC avc: denied { bpf } for pid=1941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.444000 audit[1941]: AVC avc: denied { bpf } for pid=1941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.444000 audit[1941]: AVC avc: denied { perfmon } for pid=1941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.444000 audit[1941]: AVC avc: denied { perfmon } for pid=1941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.444000 audit[1941]: AVC avc: denied { perfmon } for pid=1941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.444000 audit[1941]: AVC avc: denied { perfmon } for pid=1941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.444000 audit[1941]: AVC avc: denied { perfmon } for pid=1941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.444000 audit[1941]: AVC avc: denied { bpf } for pid=1941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.444000 audit[1941]: AVC avc: denied { bpf } for pid=1941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.444000 audit: BPF prog-id=79 op=LOAD Sep 10 01:10:58.444000 audit[1941]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00028f8c8 items=0 ppid=1848 pid=1941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565363239333738323562313338633735646261303964626462613434 Sep 10 01:10:58.444000 audit: BPF prog-id=79 op=UNLOAD Sep 10 01:10:58.444000 audit: BPF prog-id=78 op=UNLOAD Sep 10 01:10:58.444000 audit[1941]: AVC avc: denied { bpf } for pid=1941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.444000 audit[1941]: AVC avc: denied { bpf } for pid=1941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.444000 audit[1941]: AVC avc: denied { bpf } for pid=1941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.444000 audit[1941]: AVC avc: denied { perfmon } for pid=1941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.444000 audit[1941]: AVC avc: denied { perfmon } for pid=1941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.444000 audit[1941]: AVC avc: denied { perfmon } for pid=1941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.444000 audit[1941]: AVC avc: denied { perfmon } for pid=1941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.444000 audit[1941]: AVC avc: denied { perfmon } for pid=1941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.444000 audit[1941]: AVC avc: denied { bpf } for pid=1941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.444000 audit[1941]: AVC avc: denied { bpf } for pid=1941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.444000 audit: BPF prog-id=80 op=LOAD Sep 10 01:10:58.444000 audit[1941]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00028fcd8 items=0 ppid=1848 pid=1941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565363239333738323562313338633735646261303964626462613434 Sep 10 01:10:58.457273 env[1267]: time="2025-09-10T01:10:58.457241518Z" level=info msg="StartContainer for \"4b6a8ac61a37fdce0164765b3f8d9a612db95e14499ac39d297966a7200d852d\" returns successfully" Sep 10 01:10:58.461947 systemd[1]: Started cri-containerd-e60e8faa0148dbd5962165c737f30efc0fdfb66086efd0e085583074de87f405.scope. Sep 10 01:10:58.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.474000 audit: BPF prog-id=81 op=LOAD Sep 10 01:10:58.475000 audit[1974]: AVC avc: denied { bpf } for pid=1974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.475000 audit[1974]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1812 pid=1974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536306538666161303134386462643539363231363563373337663330 Sep 10 01:10:58.475000 audit[1974]: AVC avc: denied { perfmon } for pid=1974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.475000 audit[1974]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1812 pid=1974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536306538666161303134386462643539363231363563373337663330 Sep 10 01:10:58.475000 audit[1974]: AVC avc: denied { bpf } for pid=1974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.475000 audit[1974]: AVC avc: denied { bpf } for pid=1974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.475000 audit[1974]: AVC avc: denied { bpf } for pid=1974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.475000 audit[1974]: AVC avc: denied { perfmon } for pid=1974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.475000 audit[1974]: AVC avc: denied { perfmon } for pid=1974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.475000 audit[1974]: AVC avc: denied { perfmon } for pid=1974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.475000 audit[1974]: AVC avc: denied { perfmon } for pid=1974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.475000 audit[1974]: AVC avc: denied { perfmon } for pid=1974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.475000 audit[1974]: AVC avc: denied { bpf } for pid=1974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.475000 audit[1974]: AVC avc: denied { bpf } for pid=1974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.475000 audit: BPF prog-id=82 op=LOAD Sep 10 01:10:58.475000 audit[1974]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000352070 items=0 ppid=1812 pid=1974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536306538666161303134386462643539363231363563373337663330 Sep 10 01:10:58.475000 audit[1974]: AVC avc: denied { bpf } for pid=1974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.475000 audit[1974]: AVC avc: denied { bpf } for pid=1974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.475000 audit[1974]: AVC avc: denied { perfmon } for pid=1974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.475000 audit[1974]: AVC avc: denied { perfmon } for pid=1974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.475000 audit[1974]: AVC avc: denied { perfmon } for pid=1974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.475000 audit[1974]: AVC avc: denied { perfmon } for pid=1974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.475000 audit[1974]: AVC avc: denied { perfmon } for pid=1974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.475000 audit[1974]: AVC avc: denied { bpf } for pid=1974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.475000 audit[1974]: AVC avc: denied { bpf } for pid=1974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.475000 audit: BPF prog-id=83 op=LOAD Sep 10 01:10:58.475000 audit[1974]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003520b8 items=0 ppid=1812 pid=1974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536306538666161303134386462643539363231363563373337663330 Sep 10 01:10:58.475000 audit: BPF prog-id=83 op=UNLOAD Sep 10 01:10:58.476000 audit: BPF prog-id=82 op=UNLOAD Sep 10 01:10:58.476000 audit[1974]: AVC avc: denied { bpf } for pid=1974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.476000 audit[1974]: AVC avc: denied { bpf } for pid=1974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.476000 audit[1974]: AVC avc: denied { bpf } for pid=1974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.476000 audit[1974]: AVC avc: denied { perfmon } for pid=1974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.476000 audit[1974]: AVC avc: denied { perfmon } for pid=1974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.476000 audit[1974]: AVC avc: denied { perfmon } for pid=1974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.476000 audit[1974]: AVC avc: denied { perfmon } for pid=1974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.476000 audit[1974]: AVC avc: denied { perfmon } for pid=1974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.476000 audit[1974]: AVC avc: denied { bpf } for pid=1974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.476000 audit[1974]: AVC avc: denied { bpf } for pid=1974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:10:58.476000 audit: BPF prog-id=84 op=LOAD Sep 10 01:10:58.476000 audit[1974]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003524c8 items=0 ppid=1812 pid=1974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:10:58.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536306538666161303134386462643539363231363563373337663330 Sep 10 01:10:58.482471 env[1267]: time="2025-09-10T01:10:58.482433409Z" level=info msg="StartContainer for \"ee62937825b138c75dba09dbdba44ff73839eb841733417bb809dc9eb10b5f99\" returns successfully" Sep 10 01:10:58.501441 env[1267]: time="2025-09-10T01:10:58.501417221Z" level=info msg="StartContainer for \"e60e8faa0148dbd5962165c737f30efc0fdfb66086efd0e085583074de87f405\" returns successfully" Sep 10 01:10:58.548437 kubelet[1754]: E0910 01:10:58.548406 1754 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://139.178.70.105:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 139.178.70.105:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Sep 10 01:10:58.602286 kubelet[1754]: E0910 01:10:58.602210 1754 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://139.178.70.105:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 139.178.70.105:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Sep 10 01:10:58.637860 kubelet[1754]: E0910 01:10:58.637830 1754 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://139.178.70.105:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 139.178.70.105:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Sep 10 01:10:58.701473 kubelet[1754]: E0910 01:10:58.701446 1754 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.105:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.105:6443: connect: connection refused" interval="1.6s" Sep 10 01:10:58.773560 kubelet[1754]: E0910 01:10:58.773527 1754 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://139.178.70.105:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 139.178.70.105:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Sep 10 01:10:58.854844 kubelet[1754]: I0910 01:10:58.854791 1754 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 10 01:10:58.855125 kubelet[1754]: E0910 01:10:58.855098 1754 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://139.178.70.105:6443/api/v1/nodes\": dial tcp 139.178.70.105:6443: connect: connection refused" node="localhost" Sep 10 01:10:59.157397 kubelet[1754]: E0910 01:10:59.157373 1754 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://139.178.70.105:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 139.178.70.105:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Sep 10 01:10:59.332196 kubelet[1754]: E0910 01:10:59.332179 1754 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 10 01:10:59.333640 kubelet[1754]: E0910 01:10:59.333624 1754 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 10 01:10:59.334927 kubelet[1754]: E0910 01:10:59.334914 1754 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 10 01:10:59.955000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:10:59.955000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000c28000 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:10:59.955000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:10:59.956000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:10:59.956000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000154580 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:10:59.956000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:11:00.335969 kubelet[1754]: E0910 01:11:00.335897 1754 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 10 01:11:00.336689 kubelet[1754]: E0910 01:11:00.336675 1754 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Sep 10 01:11:00.456290 kubelet[1754]: I0910 01:11:00.456273 1754 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 10 01:11:00.701000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6730 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:11:00.701000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c006c299e0 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:11:00.701000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:11:00.701000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:11:00.701000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c004820000 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:11:00.701000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:11:00.702000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:11:00.702000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c0089c3960 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:11:00.702000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:11:00.703000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6736 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:11:00.703000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c004820150 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:11:00.703000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:11:00.713000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:11:00.713000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c0089c3da0 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:11:00.713000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:11:00.713000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:11:00.713000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c004820b40 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:11:00.713000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:11:00.814959 kubelet[1754]: E0910 01:11:00.814933 1754 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Sep 10 01:11:00.966458 kubelet[1754]: I0910 01:11:00.966380 1754 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Sep 10 01:11:00.966597 kubelet[1754]: E0910 01:11:00.966584 1754 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Sep 10 01:11:00.975086 kubelet[1754]: E0910 01:11:00.975059 1754 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 01:11:01.075699 kubelet[1754]: E0910 01:11:01.075655 1754 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 01:11:01.197791 kubelet[1754]: I0910 01:11:01.197756 1754 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Sep 10 01:11:01.201609 kubelet[1754]: E0910 01:11:01.201582 1754 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Sep 10 01:11:01.201778 kubelet[1754]: I0910 01:11:01.201766 1754 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Sep 10 01:11:01.203249 kubelet[1754]: E0910 01:11:01.203226 1754 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Sep 10 01:11:01.203249 kubelet[1754]: I0910 01:11:01.203242 1754 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Sep 10 01:11:01.204868 kubelet[1754]: E0910 01:11:01.204852 1754 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Sep 10 01:11:01.232238 kubelet[1754]: I0910 01:11:01.232142 1754 apiserver.go:52] "Watching apiserver" Sep 10 01:11:01.297901 kubelet[1754]: I0910 01:11:01.297861 1754 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Sep 10 01:11:01.336787 kubelet[1754]: I0910 01:11:01.336760 1754 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Sep 10 01:11:01.338652 kubelet[1754]: E0910 01:11:01.338625 1754 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Sep 10 01:11:02.765936 systemd[1]: Reloading. Sep 10 01:11:02.823053 /usr/lib/systemd/system-generators/torcx-generator[2048]: time="2025-09-10T01:11:02Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 10 01:11:02.823073 /usr/lib/systemd/system-generators/torcx-generator[2048]: time="2025-09-10T01:11:02Z" level=info msg="torcx already run" Sep 10 01:11:02.882561 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 10 01:11:02.882575 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 10 01:11:02.894910 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 10 01:11:02.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.954675 kernel: kauditd_printk_skb: 404 callbacks suppressed Sep 10 01:11:02.954804 kernel: audit: type=1400 audit(1757466662.945:571): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.954833 kernel: audit: type=1400 audit(1757466662.945:572): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.954849 kernel: audit: type=1400 audit(1757466662.945:573): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.954870 kernel: audit: type=1400 audit(1757466662.945:574): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.959874 kernel: audit: type=1400 audit(1757466662.945:575): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.959946 kernel: audit: type=1400 audit(1757466662.945:576): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.965006 kernel: audit: type=1400 audit(1757466662.945:577): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.965101 kernel: audit: type=1400 audit(1757466662.945:578): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.967585 kernel: audit: type=1400 audit(1757466662.945:579): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.972575 kernel: audit: type=1400 audit(1757466662.949:580): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.949000 audit: BPF prog-id=85 op=LOAD Sep 10 01:11:02.949000 audit: BPF prog-id=46 op=UNLOAD Sep 10 01:11:02.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.951000 audit: BPF prog-id=86 op=LOAD Sep 10 01:11:02.951000 audit: BPF prog-id=77 op=UNLOAD Sep 10 01:11:02.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.956000 audit: BPF prog-id=87 op=LOAD Sep 10 01:11:02.956000 audit: BPF prog-id=73 op=UNLOAD Sep 10 01:11:02.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.969000 audit: BPF prog-id=88 op=LOAD Sep 10 01:11:02.969000 audit: BPF prog-id=47 op=UNLOAD Sep 10 01:11:02.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.972000 audit: BPF prog-id=89 op=LOAD Sep 10 01:11:02.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.972000 audit: BPF prog-id=90 op=LOAD Sep 10 01:11:02.972000 audit: BPF prog-id=48 op=UNLOAD Sep 10 01:11:02.972000 audit: BPF prog-id=49 op=UNLOAD Sep 10 01:11:02.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.973000 audit: BPF prog-id=91 op=LOAD Sep 10 01:11:02.973000 audit: BPF prog-id=50 op=UNLOAD Sep 10 01:11:02.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.974000 audit: BPF prog-id=92 op=LOAD Sep 10 01:11:02.974000 audit: BPF prog-id=51 op=UNLOAD Sep 10 01:11:02.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.975000 audit: BPF prog-id=93 op=LOAD Sep 10 01:11:02.975000 audit: BPF prog-id=69 op=UNLOAD Sep 10 01:11:02.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.976000 audit: BPF prog-id=94 op=LOAD Sep 10 01:11:02.976000 audit: BPF prog-id=81 op=UNLOAD Sep 10 01:11:02.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.978000 audit: BPF prog-id=95 op=LOAD Sep 10 01:11:02.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.978000 audit: BPF prog-id=96 op=LOAD Sep 10 01:11:02.978000 audit: BPF prog-id=52 op=UNLOAD Sep 10 01:11:02.978000 audit: BPF prog-id=53 op=UNLOAD Sep 10 01:11:02.979000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.979000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.979000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.979000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.979000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.979000 audit: BPF prog-id=97 op=LOAD Sep 10 01:11:02.979000 audit: BPF prog-id=54 op=UNLOAD Sep 10 01:11:02.979000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.979000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.979000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.980000 audit: BPF prog-id=98 op=LOAD Sep 10 01:11:02.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.980000 audit: BPF prog-id=99 op=LOAD Sep 10 01:11:02.980000 audit: BPF prog-id=55 op=UNLOAD Sep 10 01:11:02.980000 audit: BPF prog-id=56 op=UNLOAD Sep 10 01:11:02.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.981000 audit: BPF prog-id=100 op=LOAD Sep 10 01:11:02.981000 audit: BPF prog-id=57 op=UNLOAD Sep 10 01:11:02.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.982000 audit: BPF prog-id=101 op=LOAD Sep 10 01:11:02.982000 audit: BPF prog-id=65 op=UNLOAD Sep 10 01:11:02.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.982000 audit: BPF prog-id=102 op=LOAD Sep 10 01:11:02.983000 audit: BPF prog-id=58 op=UNLOAD Sep 10 01:11:02.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.983000 audit: BPF prog-id=103 op=LOAD Sep 10 01:11:02.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.983000 audit: BPF prog-id=104 op=LOAD Sep 10 01:11:02.983000 audit: BPF prog-id=59 op=UNLOAD Sep 10 01:11:02.983000 audit: BPF prog-id=60 op=UNLOAD Sep 10 01:11:02.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:02.984000 audit: BPF prog-id=105 op=LOAD Sep 10 01:11:02.985000 audit: BPF prog-id=61 op=UNLOAD Sep 10 01:11:03.000002 systemd[1]: Stopping kubelet.service... Sep 10 01:11:03.016567 systemd[1]: kubelet.service: Deactivated successfully. Sep 10 01:11:03.016689 systemd[1]: Stopped kubelet.service. Sep 10 01:11:03.018088 systemd[1]: Starting kubelet.service... Sep 10 01:11:03.015000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:11:04.262000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=6761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 10 01:11:04.262000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000aa2200 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:11:04.262000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:11:04.327000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:11:04.328655 systemd[1]: Started kubelet.service. Sep 10 01:11:04.399935 kubelet[2111]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 10 01:11:04.400269 kubelet[2111]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 10 01:11:04.400375 kubelet[2111]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 10 01:11:04.400586 kubelet[2111]: I0910 01:11:04.400567 2111 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 10 01:11:04.413547 kubelet[2111]: I0910 01:11:04.413519 2111 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Sep 10 01:11:04.413547 kubelet[2111]: I0910 01:11:04.413537 2111 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 10 01:11:04.413688 kubelet[2111]: I0910 01:11:04.413680 2111 server.go:956] "Client rotation is on, will bootstrap in background" Sep 10 01:11:04.414711 kubelet[2111]: I0910 01:11:04.414698 2111 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Sep 10 01:11:04.427179 kubelet[2111]: I0910 01:11:04.427154 2111 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 10 01:11:04.487403 kubelet[2111]: E0910 01:11:04.487379 2111 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 10 01:11:04.487948 kubelet[2111]: I0910 01:11:04.487938 2111 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 10 01:11:04.492655 kubelet[2111]: I0910 01:11:04.492635 2111 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 10 01:11:04.511320 kubelet[2111]: I0910 01:11:04.511256 2111 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 10 01:11:04.512276 kubelet[2111]: I0910 01:11:04.511357 2111 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 10 01:11:04.512994 kubelet[2111]: I0910 01:11:04.512280 2111 topology_manager.go:138] "Creating topology manager with none policy" Sep 10 01:11:04.512994 kubelet[2111]: I0910 01:11:04.512289 2111 container_manager_linux.go:303] "Creating device plugin manager" Sep 10 01:11:04.521648 kubelet[2111]: I0910 01:11:04.521583 2111 state_mem.go:36] "Initialized new in-memory state store" Sep 10 01:11:04.523982 kubelet[2111]: I0910 01:11:04.523969 2111 kubelet.go:480] "Attempting to sync node with API server" Sep 10 01:11:04.523982 kubelet[2111]: I0910 01:11:04.523982 2111 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 10 01:11:04.524068 kubelet[2111]: I0910 01:11:04.523999 2111 kubelet.go:386] "Adding apiserver pod source" Sep 10 01:11:04.524068 kubelet[2111]: I0910 01:11:04.524009 2111 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 10 01:11:04.538968 kubelet[2111]: I0910 01:11:04.538620 2111 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 10 01:11:04.538968 kubelet[2111]: I0910 01:11:04.538916 2111 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Sep 10 01:11:04.540597 kubelet[2111]: I0910 01:11:04.540579 2111 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 10 01:11:04.540654 kubelet[2111]: I0910 01:11:04.540606 2111 server.go:1289] "Started kubelet" Sep 10 01:11:04.540000 audit[2111]: AVC avc: denied { mac_admin } for pid=2111 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:04.540000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 10 01:11:04.540000 audit[2111]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0007b09c0 a1=c0006f9350 a2=c0007b0990 a3=25 items=0 ppid=1 pid=2111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:04.540000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 10 01:11:04.540000 audit[2111]: AVC avc: denied { mac_admin } for pid=2111 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:04.540000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 10 01:11:04.540000 audit[2111]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000702e20 a1=c0006f9368 a2=c0007b0a50 a3=25 items=0 ppid=1 pid=2111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:04.540000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 10 01:11:04.541990 kubelet[2111]: I0910 01:11:04.541617 2111 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 10 01:11:04.541990 kubelet[2111]: I0910 01:11:04.541645 2111 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 10 01:11:04.545430 kubelet[2111]: I0910 01:11:04.545395 2111 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 10 01:11:04.556865 kubelet[2111]: E0910 01:11:04.554461 2111 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 10 01:11:04.557367 kubelet[2111]: I0910 01:11:04.557339 2111 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Sep 10 01:11:04.557942 kubelet[2111]: I0910 01:11:04.557929 2111 server.go:317] "Adding debug handlers to kubelet server" Sep 10 01:11:04.559034 kubelet[2111]: I0910 01:11:04.559020 2111 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 10 01:11:04.559169 kubelet[2111]: E0910 01:11:04.559154 2111 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Sep 10 01:11:04.561105 kubelet[2111]: I0910 01:11:04.560594 2111 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 10 01:11:04.561105 kubelet[2111]: I0910 01:11:04.560656 2111 reconciler.go:26] "Reconciler: start to sync state" Sep 10 01:11:04.562689 kubelet[2111]: I0910 01:11:04.562598 2111 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Sep 10 01:11:04.564443 kubelet[2111]: I0910 01:11:04.563276 2111 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Sep 10 01:11:04.564443 kubelet[2111]: I0910 01:11:04.563290 2111 status_manager.go:230] "Starting to sync pod status with apiserver" Sep 10 01:11:04.564443 kubelet[2111]: I0910 01:11:04.563310 2111 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 10 01:11:04.564443 kubelet[2111]: I0910 01:11:04.563321 2111 kubelet.go:2436] "Starting kubelet main sync loop" Sep 10 01:11:04.564443 kubelet[2111]: E0910 01:11:04.563350 2111 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 10 01:11:04.567451 kubelet[2111]: I0910 01:11:04.566951 2111 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 10 01:11:04.567451 kubelet[2111]: I0910 01:11:04.567061 2111 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 10 01:11:04.567451 kubelet[2111]: I0910 01:11:04.567335 2111 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 10 01:11:04.574889 kubelet[2111]: I0910 01:11:04.574680 2111 factory.go:223] Registration of the systemd container factory successfully Sep 10 01:11:04.574889 kubelet[2111]: I0910 01:11:04.574760 2111 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 10 01:11:04.576385 kubelet[2111]: I0910 01:11:04.576038 2111 factory.go:223] Registration of the containerd container factory successfully Sep 10 01:11:04.625023 kubelet[2111]: I0910 01:11:04.624783 2111 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 10 01:11:04.625023 kubelet[2111]: I0910 01:11:04.624795 2111 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 10 01:11:04.625023 kubelet[2111]: I0910 01:11:04.624808 2111 state_mem.go:36] "Initialized new in-memory state store" Sep 10 01:11:04.625023 kubelet[2111]: I0910 01:11:04.624888 2111 state_mem.go:88] "Updated default CPUSet" cpuSet="" Sep 10 01:11:04.625023 kubelet[2111]: I0910 01:11:04.624896 2111 state_mem.go:96] "Updated CPUSet assignments" assignments={} Sep 10 01:11:04.625023 kubelet[2111]: I0910 01:11:04.624907 2111 policy_none.go:49] "None policy: Start" Sep 10 01:11:04.625023 kubelet[2111]: I0910 01:11:04.624913 2111 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 10 01:11:04.625023 kubelet[2111]: I0910 01:11:04.624919 2111 state_mem.go:35] "Initializing new in-memory state store" Sep 10 01:11:04.625023 kubelet[2111]: I0910 01:11:04.624970 2111 state_mem.go:75] "Updated machine memory state" Sep 10 01:11:04.627888 kubelet[2111]: E0910 01:11:04.627401 2111 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Sep 10 01:11:04.627888 kubelet[2111]: E0910 01:11:04.627432 2111 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Sep 10 01:11:04.627888 kubelet[2111]: I0910 01:11:04.627500 2111 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 10 01:11:04.627888 kubelet[2111]: I0910 01:11:04.627506 2111 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 10 01:11:04.627888 kubelet[2111]: I0910 01:11:04.627765 2111 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 10 01:11:04.626000 audit[2111]: AVC avc: denied { mac_admin } for pid=2111 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:04.626000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 10 01:11:04.626000 audit[2111]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000bae900 a1=c000c8e300 a2=c000bae8d0 a3=25 items=0 ppid=1 pid=2111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:04.626000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 10 01:11:04.628808 kubelet[2111]: E0910 01:11:04.628776 2111 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 10 01:11:04.665066 kubelet[2111]: I0910 01:11:04.664748 2111 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Sep 10 01:11:04.666124 kubelet[2111]: I0910 01:11:04.666108 2111 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Sep 10 01:11:04.668500 kubelet[2111]: I0910 01:11:04.668031 2111 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Sep 10 01:11:04.729535 kubelet[2111]: I0910 01:11:04.729084 2111 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Sep 10 01:11:04.734020 kubelet[2111]: I0910 01:11:04.734000 2111 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Sep 10 01:11:04.734098 kubelet[2111]: I0910 01:11:04.734047 2111 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Sep 10 01:11:04.783522 kubelet[2111]: I0910 01:11:04.783445 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d75e6f6978d9f275ea19380916c9cccd-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"d75e6f6978d9f275ea19380916c9cccd\") " pod="kube-system/kube-scheduler-localhost" Sep 10 01:11:04.783522 kubelet[2111]: I0910 01:11:04.783478 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8f63649365fc3bd7b71a060b8d9f2e77-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"8f63649365fc3bd7b71a060b8d9f2e77\") " pod="kube-system/kube-apiserver-localhost" Sep 10 01:11:04.783522 kubelet[2111]: I0910 01:11:04.783489 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8de7187202bee21b84740a213836f615-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"8de7187202bee21b84740a213836f615\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 01:11:04.783522 kubelet[2111]: I0910 01:11:04.783499 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/8de7187202bee21b84740a213836f615-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"8de7187202bee21b84740a213836f615\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 01:11:04.783522 kubelet[2111]: I0910 01:11:04.783512 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8de7187202bee21b84740a213836f615-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"8de7187202bee21b84740a213836f615\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 01:11:04.783690 kubelet[2111]: I0910 01:11:04.783529 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8de7187202bee21b84740a213836f615-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"8de7187202bee21b84740a213836f615\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 01:11:04.783690 kubelet[2111]: I0910 01:11:04.783547 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8f63649365fc3bd7b71a060b8d9f2e77-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"8f63649365fc3bd7b71a060b8d9f2e77\") " pod="kube-system/kube-apiserver-localhost" Sep 10 01:11:04.783690 kubelet[2111]: I0910 01:11:04.783557 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8f63649365fc3bd7b71a060b8d9f2e77-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"8f63649365fc3bd7b71a060b8d9f2e77\") " pod="kube-system/kube-apiserver-localhost" Sep 10 01:11:04.783690 kubelet[2111]: I0910 01:11:04.783566 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8de7187202bee21b84740a213836f615-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"8de7187202bee21b84740a213836f615\") " pod="kube-system/kube-controller-manager-localhost" Sep 10 01:11:05.548023 kubelet[2111]: I0910 01:11:05.547998 2111 apiserver.go:52] "Watching apiserver" Sep 10 01:11:05.561661 kubelet[2111]: I0910 01:11:05.561638 2111 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Sep 10 01:11:05.614029 kubelet[2111]: I0910 01:11:05.614008 2111 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Sep 10 01:11:05.614422 kubelet[2111]: I0910 01:11:05.614409 2111 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Sep 10 01:11:05.620095 kubelet[2111]: E0910 01:11:05.620075 2111 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Sep 10 01:11:05.620220 kubelet[2111]: E0910 01:11:05.620206 2111 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Sep 10 01:11:05.628119 kubelet[2111]: I0910 01:11:05.628081 2111 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.6280728899999999 podStartE2EDuration="1.62807289s" podCreationTimestamp="2025-09-10 01:11:04 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-10 01:11:05.627773411 +0000 UTC m=+1.273354838" watchObservedRunningTime="2025-09-10 01:11:05.62807289 +0000 UTC m=+1.273654310" Sep 10 01:11:05.632572 kubelet[2111]: I0910 01:11:05.632530 2111 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.63251876 podStartE2EDuration="1.63251876s" podCreationTimestamp="2025-09-10 01:11:04 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-10 01:11:05.631908453 +0000 UTC m=+1.277489874" watchObservedRunningTime="2025-09-10 01:11:05.63251876 +0000 UTC m=+1.278100193" Sep 10 01:11:05.639381 kubelet[2111]: I0910 01:11:05.639346 2111 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.639337193 podStartE2EDuration="1.639337193s" podCreationTimestamp="2025-09-10 01:11:04 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-10 01:11:05.635273997 +0000 UTC m=+1.280855426" watchObservedRunningTime="2025-09-10 01:11:05.639337193 +0000 UTC m=+1.284918621" Sep 10 01:11:07.311000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:11:07.311000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000b440a0 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:11:07.311000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:11:07.312000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:11:07.312000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000b44420 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:11:07.312000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:11:07.312000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:11:07.312000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000b44600 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:11:07.312000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:11:07.313000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:11:07.313000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001113380 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:11:07.313000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:11:08.190239 kubelet[2111]: I0910 01:11:08.190216 2111 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Sep 10 01:11:08.190656 env[1267]: time="2025-09-10T01:11:08.190637088Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Sep 10 01:11:08.190913 kubelet[2111]: I0910 01:11:08.190898 2111 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Sep 10 01:11:09.276562 systemd[1]: Created slice kubepods-besteffort-podb1422349_a58d_4f67_8029_be139224f174.slice. Sep 10 01:11:09.311543 kubelet[2111]: I0910 01:11:09.311526 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b1422349-a58d-4f67-8029-be139224f174-xtables-lock\") pod \"kube-proxy-4pfpx\" (UID: \"b1422349-a58d-4f67-8029-be139224f174\") " pod="kube-system/kube-proxy-4pfpx" Sep 10 01:11:09.311785 kubelet[2111]: I0910 01:11:09.311774 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-47r4m\" (UniqueName: \"kubernetes.io/projected/b1422349-a58d-4f67-8029-be139224f174-kube-api-access-47r4m\") pod \"kube-proxy-4pfpx\" (UID: \"b1422349-a58d-4f67-8029-be139224f174\") " pod="kube-system/kube-proxy-4pfpx" Sep 10 01:11:09.311842 kubelet[2111]: I0910 01:11:09.311834 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b1422349-a58d-4f67-8029-be139224f174-lib-modules\") pod \"kube-proxy-4pfpx\" (UID: \"b1422349-a58d-4f67-8029-be139224f174\") " pod="kube-system/kube-proxy-4pfpx" Sep 10 01:11:09.311903 kubelet[2111]: I0910 01:11:09.311895 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/b1422349-a58d-4f67-8029-be139224f174-kube-proxy\") pod \"kube-proxy-4pfpx\" (UID: \"b1422349-a58d-4f67-8029-be139224f174\") " pod="kube-system/kube-proxy-4pfpx" Sep 10 01:11:09.348543 systemd[1]: Created slice kubepods-besteffort-pod903a54db_a713_4bab_981f_fd2ccb37bdc1.slice. Sep 10 01:11:09.412568 kubelet[2111]: I0910 01:11:09.412496 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/903a54db-a713-4bab-981f-fd2ccb37bdc1-var-lib-calico\") pod \"tigera-operator-755d956888-mwczx\" (UID: \"903a54db-a713-4bab-981f-fd2ccb37bdc1\") " pod="tigera-operator/tigera-operator-755d956888-mwczx" Sep 10 01:11:09.412683 kubelet[2111]: I0910 01:11:09.412667 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-c9qv8\" (UniqueName: \"kubernetes.io/projected/903a54db-a713-4bab-981f-fd2ccb37bdc1-kube-api-access-c9qv8\") pod \"tigera-operator-755d956888-mwczx\" (UID: \"903a54db-a713-4bab-981f-fd2ccb37bdc1\") " pod="tigera-operator/tigera-operator-755d956888-mwczx" Sep 10 01:11:09.420214 kubelet[2111]: I0910 01:11:09.420173 2111 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Sep 10 01:11:09.582245 env[1267]: time="2025-09-10T01:11:09.582180065Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-4pfpx,Uid:b1422349-a58d-4f67-8029-be139224f174,Namespace:kube-system,Attempt:0,}" Sep 10 01:11:09.592950 env[1267]: time="2025-09-10T01:11:09.592833240Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 01:11:09.592950 env[1267]: time="2025-09-10T01:11:09.592857545Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 01:11:09.592950 env[1267]: time="2025-09-10T01:11:09.592864362Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 01:11:09.593102 env[1267]: time="2025-09-10T01:11:09.592957593Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7644ea70bbea33b217b2843c2204de6dcc6034c3de298db96ce966c24988cc53 pid=2164 runtime=io.containerd.runc.v2 Sep 10 01:11:09.605115 systemd[1]: Started cri-containerd-7644ea70bbea33b217b2843c2204de6dcc6034c3de298db96ce966c24988cc53.scope. Sep 10 01:11:09.620343 kernel: kauditd_printk_skb: 263 callbacks suppressed Sep 10 01:11:09.620482 kernel: audit: type=1400 audit(1757466669.614:825): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.620518 kernel: audit: type=1400 audit(1757466669.614:826): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.624276 kernel: audit: type=1400 audit(1757466669.614:827): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.624375 kernel: audit: type=1400 audit(1757466669.614:828): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.629141 kernel: audit: type=1400 audit(1757466669.614:829): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.629187 kernel: audit: type=1400 audit(1757466669.614:830): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.633984 kernel: audit: type=1400 audit(1757466669.614:831): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.634020 kernel: audit: type=1400 audit(1757466669.614:832): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.639409 kernel: audit: type=1400 audit(1757466669.614:833): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.642214 kernel: audit: type=1400 audit(1757466669.615:834): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.615000 audit: BPF prog-id=106 op=LOAD Sep 10 01:11:09.619000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.619000 audit[2175]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2164 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:09.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736343465613730626265613333623231376232383433633232303464 Sep 10 01:11:09.619000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.619000 audit[2175]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2164 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:09.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736343465613730626265613333623231376232383433633232303464 Sep 10 01:11:09.619000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.619000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.619000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.619000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.619000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.619000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.619000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.619000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.619000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.619000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.619000 audit: BPF prog-id=107 op=LOAD Sep 10 01:11:09.619000 audit[2175]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00028a660 items=0 ppid=2164 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:09.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736343465613730626265613333623231376232383433633232303464 Sep 10 01:11:09.623000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.623000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.623000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.623000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.623000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.623000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.623000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.623000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.623000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.623000 audit: BPF prog-id=108 op=LOAD Sep 10 01:11:09.623000 audit[2175]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00028a6a8 items=0 ppid=2164 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:09.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736343465613730626265613333623231376232383433633232303464 Sep 10 01:11:09.625000 audit: BPF prog-id=108 op=UNLOAD Sep 10 01:11:09.625000 audit: BPF prog-id=107 op=UNLOAD Sep 10 01:11:09.625000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.625000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.625000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.625000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.625000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.625000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.625000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.625000 audit[2175]: AVC avc: denied { perfmon } for pid=2175 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.625000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.625000 audit[2175]: AVC avc: denied { bpf } for pid=2175 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.625000 audit: BPF prog-id=109 op=LOAD Sep 10 01:11:09.625000 audit[2175]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00028aab8 items=0 ppid=2164 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:09.625000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736343465613730626265613333623231376232383433633232303464 Sep 10 01:11:09.649513 env[1267]: time="2025-09-10T01:11:09.649482924Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-4pfpx,Uid:b1422349-a58d-4f67-8029-be139224f174,Namespace:kube-system,Attempt:0,} returns sandbox id \"7644ea70bbea33b217b2843c2204de6dcc6034c3de298db96ce966c24988cc53\"" Sep 10 01:11:09.653224 env[1267]: time="2025-09-10T01:11:09.653200094Z" level=info msg="CreateContainer within sandbox \"7644ea70bbea33b217b2843c2204de6dcc6034c3de298db96ce966c24988cc53\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Sep 10 01:11:09.654448 env[1267]: time="2025-09-10T01:11:09.654420144Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-mwczx,Uid:903a54db-a713-4bab-981f-fd2ccb37bdc1,Namespace:tigera-operator,Attempt:0,}" Sep 10 01:11:09.662641 env[1267]: time="2025-09-10T01:11:09.662612964Z" level=info msg="CreateContainer within sandbox \"7644ea70bbea33b217b2843c2204de6dcc6034c3de298db96ce966c24988cc53\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"4908c10b9a62319b9e1050d0afb7a13f6f0a151c30a6d2dfc9c44b06d307d548\"" Sep 10 01:11:09.664255 env[1267]: time="2025-09-10T01:11:09.664232419Z" level=info msg="StartContainer for \"4908c10b9a62319b9e1050d0afb7a13f6f0a151c30a6d2dfc9c44b06d307d548\"" Sep 10 01:11:09.666475 env[1267]: time="2025-09-10T01:11:09.666429526Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 01:11:09.666615 env[1267]: time="2025-09-10T01:11:09.666601941Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 01:11:09.666686 env[1267]: time="2025-09-10T01:11:09.666673042Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 01:11:09.666868 env[1267]: time="2025-09-10T01:11:09.666841300Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f029ed326167d1ac97c2fb51a6efb0755ba2bf00282d33fefeea30d71593b289 pid=2206 runtime=io.containerd.runc.v2 Sep 10 01:11:09.678202 systemd[1]: Started cri-containerd-f029ed326167d1ac97c2fb51a6efb0755ba2bf00282d33fefeea30d71593b289.scope. Sep 10 01:11:09.687245 systemd[1]: Started cri-containerd-4908c10b9a62319b9e1050d0afb7a13f6f0a151c30a6d2dfc9c44b06d307d548.scope. Sep 10 01:11:09.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.700000 audit: BPF prog-id=110 op=LOAD Sep 10 01:11:09.701000 audit[2216]: AVC avc: denied { bpf } for pid=2216 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.701000 audit[2216]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2206 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:09.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630323965643332363136376431616339376332666235316136656662 Sep 10 01:11:09.701000 audit[2216]: AVC avc: denied { perfmon } for pid=2216 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.701000 audit[2216]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2206 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:09.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630323965643332363136376431616339376332666235316136656662 Sep 10 01:11:09.701000 audit[2216]: AVC avc: denied { bpf } for pid=2216 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.701000 audit[2216]: AVC avc: denied { bpf } for pid=2216 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.701000 audit[2216]: AVC avc: denied { bpf } for pid=2216 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.701000 audit[2216]: AVC avc: denied { perfmon } for pid=2216 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.701000 audit[2216]: AVC avc: denied { perfmon } for pid=2216 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.701000 audit[2216]: AVC avc: denied { perfmon } for pid=2216 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.701000 audit[2216]: AVC avc: denied { perfmon } for pid=2216 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.701000 audit[2216]: AVC avc: denied { perfmon } for pid=2216 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.701000 audit[2216]: AVC avc: denied { bpf } for pid=2216 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.701000 audit[2216]: AVC avc: denied { bpf } for pid=2216 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.701000 audit: BPF prog-id=111 op=LOAD Sep 10 01:11:09.701000 audit[2216]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002287c0 items=0 ppid=2206 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:09.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630323965643332363136376431616339376332666235316136656662 Sep 10 01:11:09.702000 audit[2216]: AVC avc: denied { bpf } for pid=2216 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.702000 audit[2216]: AVC avc: denied { bpf } for pid=2216 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.702000 audit[2216]: AVC avc: denied { perfmon } for pid=2216 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.702000 audit[2216]: AVC avc: denied { perfmon } for pid=2216 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.702000 audit[2216]: AVC avc: denied { perfmon } for pid=2216 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.702000 audit[2216]: AVC avc: denied { perfmon } for pid=2216 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.702000 audit[2216]: AVC avc: denied { perfmon } for pid=2216 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.702000 audit[2216]: AVC avc: denied { bpf } for pid=2216 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.702000 audit[2216]: AVC avc: denied { bpf } for pid=2216 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.702000 audit: BPF prog-id=112 op=LOAD Sep 10 01:11:09.702000 audit[2216]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000228808 items=0 ppid=2206 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:09.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630323965643332363136376431616339376332666235316136656662 Sep 10 01:11:09.702000 audit: BPF prog-id=112 op=UNLOAD Sep 10 01:11:09.702000 audit: BPF prog-id=111 op=UNLOAD Sep 10 01:11:09.702000 audit[2216]: AVC avc: denied { bpf } for pid=2216 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.702000 audit[2216]: AVC avc: denied { bpf } for pid=2216 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.702000 audit[2216]: AVC avc: denied { bpf } for pid=2216 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.702000 audit[2216]: AVC avc: denied { perfmon } for pid=2216 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.702000 audit[2216]: AVC avc: denied { perfmon } for pid=2216 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.702000 audit[2216]: AVC avc: denied { perfmon } for pid=2216 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.702000 audit[2216]: AVC avc: denied { perfmon } for pid=2216 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.702000 audit[2216]: AVC avc: denied { perfmon } for pid=2216 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.702000 audit[2216]: AVC avc: denied { bpf } for pid=2216 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.702000 audit[2216]: AVC avc: denied { bpf } for pid=2216 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.702000 audit: BPF prog-id=113 op=LOAD Sep 10 01:11:09.702000 audit[2216]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000228c18 items=0 ppid=2206 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:09.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630323965643332363136376431616339376332666235316136656662 Sep 10 01:11:09.704000 audit[2228]: AVC avc: denied { perfmon } for pid=2228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.704000 audit[2228]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f6bdd7ba198 items=0 ppid=2164 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:09.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439303863313062396136323331396239653130353064306166623761 Sep 10 01:11:09.704000 audit[2228]: AVC avc: denied { bpf } for pid=2228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.704000 audit[2228]: AVC avc: denied { bpf } for pid=2228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.704000 audit[2228]: AVC avc: denied { bpf } for pid=2228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.704000 audit[2228]: AVC avc: denied { perfmon } for pid=2228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.704000 audit[2228]: AVC avc: denied { perfmon } for pid=2228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.704000 audit[2228]: AVC avc: denied { perfmon } for pid=2228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.704000 audit[2228]: AVC avc: denied { perfmon } for pid=2228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.704000 audit[2228]: AVC avc: denied { perfmon } for pid=2228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.704000 audit[2228]: AVC avc: denied { bpf } for pid=2228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.704000 audit[2228]: AVC avc: denied { bpf } for pid=2228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.704000 audit: BPF prog-id=114 op=LOAD Sep 10 01:11:09.704000 audit[2228]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0002c5c88 items=0 ppid=2164 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:09.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439303863313062396136323331396239653130353064306166623761 Sep 10 01:11:09.705000 audit[2228]: AVC avc: denied { bpf } for pid=2228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.705000 audit[2228]: AVC avc: denied { bpf } for pid=2228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.705000 audit[2228]: AVC avc: denied { perfmon } for pid=2228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.705000 audit[2228]: AVC avc: denied { perfmon } for pid=2228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.705000 audit[2228]: AVC avc: denied { perfmon } for pid=2228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.705000 audit[2228]: AVC avc: denied { perfmon } for pid=2228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.705000 audit[2228]: AVC avc: denied { perfmon } for pid=2228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.705000 audit[2228]: AVC avc: denied { bpf } for pid=2228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.705000 audit[2228]: AVC avc: denied { bpf } for pid=2228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.705000 audit: BPF prog-id=115 op=LOAD Sep 10 01:11:09.705000 audit[2228]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0002c5cd8 items=0 ppid=2164 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:09.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439303863313062396136323331396239653130353064306166623761 Sep 10 01:11:09.705000 audit: BPF prog-id=115 op=UNLOAD Sep 10 01:11:09.705000 audit: BPF prog-id=114 op=UNLOAD Sep 10 01:11:09.705000 audit[2228]: AVC avc: denied { bpf } for pid=2228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.705000 audit[2228]: AVC avc: denied { bpf } for pid=2228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.705000 audit[2228]: AVC avc: denied { bpf } for pid=2228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.705000 audit[2228]: AVC avc: denied { perfmon } for pid=2228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.705000 audit[2228]: AVC avc: denied { perfmon } for pid=2228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.705000 audit[2228]: AVC avc: denied { perfmon } for pid=2228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.705000 audit[2228]: AVC avc: denied { perfmon } for pid=2228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.705000 audit[2228]: AVC avc: denied { perfmon } for pid=2228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.705000 audit[2228]: AVC avc: denied { bpf } for pid=2228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.705000 audit[2228]: AVC avc: denied { bpf } for pid=2228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:09.705000 audit: BPF prog-id=116 op=LOAD Sep 10 01:11:09.705000 audit[2228]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0002c5d68 items=0 ppid=2164 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:09.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439303863313062396136323331396239653130353064306166623761 Sep 10 01:11:09.720123 env[1267]: time="2025-09-10T01:11:09.720096985Z" level=info msg="StartContainer for \"4908c10b9a62319b9e1050d0afb7a13f6f0a151c30a6d2dfc9c44b06d307d548\" returns successfully" Sep 10 01:11:09.734533 env[1267]: time="2025-09-10T01:11:09.734502366Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-mwczx,Uid:903a54db-a713-4bab-981f-fd2ccb37bdc1,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"f029ed326167d1ac97c2fb51a6efb0755ba2bf00282d33fefeea30d71593b289\"" Sep 10 01:11:09.736609 env[1267]: time="2025-09-10T01:11:09.736590757Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\"" Sep 10 01:11:10.166000 audit[2310]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2310 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.166000 audit[2310]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe330c8230 a2=0 a3=7ffe330c821c items=0 ppid=2249 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.166000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 10 01:11:10.170000 audit[2313]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2313 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.170000 audit[2313]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc5ca51570 a2=0 a3=7ffc5ca5155c items=0 ppid=2249 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.170000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 10 01:11:10.176000 audit[2314]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2314 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.176000 audit[2314]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffb7f2e640 a2=0 a3=7fffb7f2e62c items=0 ppid=2249 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.176000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 10 01:11:10.177000 audit[2315]: NETFILTER_CFG table=filter:41 family=10 entries=1 op=nft_register_chain pid=2315 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.177000 audit[2315]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcfdb51d20 a2=0 a3=7ffcfdb51d0c items=0 ppid=2249 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.177000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 10 01:11:10.181000 audit[2316]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_chain pid=2316 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.181000 audit[2316]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffee15d0b10 a2=0 a3=7ffee15d0afc items=0 ppid=2249 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.181000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 10 01:11:10.181000 audit[2317]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2317 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.181000 audit[2317]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe37ebb020 a2=0 a3=7ffe37ebb00c items=0 ppid=2249 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.181000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 10 01:11:10.275000 audit[2318]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2318 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.275000 audit[2318]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fff7f509ab0 a2=0 a3=7fff7f509a9c items=0 ppid=2249 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.275000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 10 01:11:10.279000 audit[2320]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2320 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.279000 audit[2320]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd6ec5c0c0 a2=0 a3=7ffd6ec5c0ac items=0 ppid=2249 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.279000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Sep 10 01:11:10.282000 audit[2323]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.282000 audit[2323]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffcda0edcc0 a2=0 a3=7ffcda0edcac items=0 ppid=2249 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.282000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Sep 10 01:11:10.283000 audit[2324]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2324 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.283000 audit[2324]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd872542d0 a2=0 a3=7ffd872542bc items=0 ppid=2249 pid=2324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.283000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 10 01:11:10.285000 audit[2326]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2326 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.285000 audit[2326]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc076d62b0 a2=0 a3=7ffc076d629c items=0 ppid=2249 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.285000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 10 01:11:10.286000 audit[2327]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.286000 audit[2327]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd54a129a0 a2=0 a3=7ffd54a1298c items=0 ppid=2249 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.286000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 10 01:11:10.289000 audit[2329]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2329 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.289000 audit[2329]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd6c766b60 a2=0 a3=7ffd6c766b4c items=0 ppid=2249 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.289000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 10 01:11:10.292000 audit[2332]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2332 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.292000 audit[2332]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc1c4ebb60 a2=0 a3=7ffc1c4ebb4c items=0 ppid=2249 pid=2332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.292000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Sep 10 01:11:10.292000 audit[2333]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2333 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.292000 audit[2333]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc2d3727a0 a2=0 a3=7ffc2d37278c items=0 ppid=2249 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.292000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 10 01:11:10.294000 audit[2335]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2335 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.294000 audit[2335]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff6c6a5610 a2=0 a3=7fff6c6a55fc items=0 ppid=2249 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.294000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 10 01:11:10.295000 audit[2336]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2336 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.295000 audit[2336]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc9f6c4d40 a2=0 a3=7ffc9f6c4d2c items=0 ppid=2249 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.295000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 10 01:11:10.297000 audit[2338]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2338 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.297000 audit[2338]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffca4b6f700 a2=0 a3=7ffca4b6f6ec items=0 ppid=2249 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.297000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 10 01:11:10.299000 audit[2341]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2341 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.299000 audit[2341]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc6677c350 a2=0 a3=7ffc6677c33c items=0 ppid=2249 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.299000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 10 01:11:10.302000 audit[2344]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2344 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.302000 audit[2344]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffefa0e27e0 a2=0 a3=7ffefa0e27cc items=0 ppid=2249 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.302000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 10 01:11:10.302000 audit[2345]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2345 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.302000 audit[2345]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc5f638cb0 a2=0 a3=7ffc5f638c9c items=0 ppid=2249 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.302000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 10 01:11:10.304000 audit[2347]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2347 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.304000 audit[2347]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffe8ea4e2f0 a2=0 a3=7ffe8ea4e2dc items=0 ppid=2249 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.304000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 10 01:11:10.306000 audit[2350]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2350 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.306000 audit[2350]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd14002350 a2=0 a3=7ffd1400233c items=0 ppid=2249 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.306000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 10 01:11:10.307000 audit[2351]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2351 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.307000 audit[2351]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffee99543b0 a2=0 a3=7ffee995439c items=0 ppid=2249 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.307000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 10 01:11:10.309000 audit[2353]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2353 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 10 01:11:10.309000 audit[2353]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffdb6720bf0 a2=0 a3=7ffdb6720bdc items=0 ppid=2249 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.309000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 10 01:11:10.330000 audit[2359]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2359 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:10.330000 audit[2359]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffecf318550 a2=0 a3=7ffecf31853c items=0 ppid=2249 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.330000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:10.339000 audit[2359]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2359 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:10.339000 audit[2359]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffecf318550 a2=0 a3=7ffecf31853c items=0 ppid=2249 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.339000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:10.340000 audit[2364]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2364 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.340000 audit[2364]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc5acb62c0 a2=0 a3=7ffc5acb62ac items=0 ppid=2249 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.340000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 10 01:11:10.342000 audit[2366]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2366 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.342000 audit[2366]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd8ee65290 a2=0 a3=7ffd8ee6527c items=0 ppid=2249 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.342000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Sep 10 01:11:10.344000 audit[2369]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2369 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.344000 audit[2369]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffddfc971c0 a2=0 a3=7ffddfc971ac items=0 ppid=2249 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.344000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Sep 10 01:11:10.345000 audit[2370]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2370 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.345000 audit[2370]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffd4b77460 a2=0 a3=7fffd4b7744c items=0 ppid=2249 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.345000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 10 01:11:10.346000 audit[2372]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2372 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.346000 audit[2372]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff60b1d0e0 a2=0 a3=7fff60b1d0cc items=0 ppid=2249 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.346000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 10 01:11:10.347000 audit[2373]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2373 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.347000 audit[2373]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd275a7c80 a2=0 a3=7ffd275a7c6c items=0 ppid=2249 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.347000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 10 01:11:10.348000 audit[2375]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2375 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.348000 audit[2375]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffceabfe5d0 a2=0 a3=7ffceabfe5bc items=0 ppid=2249 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.348000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Sep 10 01:11:10.350000 audit[2378]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2378 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.350000 audit[2378]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffe0b81a2d0 a2=0 a3=7ffe0b81a2bc items=0 ppid=2249 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.350000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 10 01:11:10.351000 audit[2379]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2379 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.351000 audit[2379]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff7ae65b20 a2=0 a3=7fff7ae65b0c items=0 ppid=2249 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.351000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 10 01:11:10.353000 audit[2381]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2381 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.353000 audit[2381]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc1cde47f0 a2=0 a3=7ffc1cde47dc items=0 ppid=2249 pid=2381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.353000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 10 01:11:10.353000 audit[2382]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2382 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.353000 audit[2382]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd442d0c60 a2=0 a3=7ffd442d0c4c items=0 ppid=2249 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.353000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 10 01:11:10.355000 audit[2384]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2384 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.355000 audit[2384]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff372e09e0 a2=0 a3=7fff372e09cc items=0 ppid=2249 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.355000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 10 01:11:10.357000 audit[2387]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2387 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.357000 audit[2387]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffccf227550 a2=0 a3=7ffccf22753c items=0 ppid=2249 pid=2387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.357000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 10 01:11:10.359000 audit[2390]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2390 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.359000 audit[2390]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd8cf98540 a2=0 a3=7ffd8cf9852c items=0 ppid=2249 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.359000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Sep 10 01:11:10.360000 audit[2391]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2391 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.360000 audit[2391]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffbfa2c130 a2=0 a3=7fffbfa2c11c items=0 ppid=2249 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.360000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 10 01:11:10.361000 audit[2393]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2393 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.361000 audit[2393]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffe5d2de400 a2=0 a3=7ffe5d2de3ec items=0 ppid=2249 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.361000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 10 01:11:10.363000 audit[2396]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2396 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.363000 audit[2396]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffcd2f7b0c0 a2=0 a3=7ffcd2f7b0ac items=0 ppid=2249 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.363000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 10 01:11:10.364000 audit[2397]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2397 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.364000 audit[2397]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff6c90c380 a2=0 a3=7fff6c90c36c items=0 ppid=2249 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.364000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 10 01:11:10.365000 audit[2399]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2399 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.365000 audit[2399]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffd80d6f760 a2=0 a3=7ffd80d6f74c items=0 ppid=2249 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.365000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 10 01:11:10.366000 audit[2400]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2400 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.366000 audit[2400]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffda95848f0 a2=0 a3=7ffda95848dc items=0 ppid=2249 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.366000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 10 01:11:10.368000 audit[2402]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2402 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.368000 audit[2402]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff759a3990 a2=0 a3=7fff759a397c items=0 ppid=2249 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.368000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 10 01:11:10.370000 audit[2405]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2405 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 10 01:11:10.370000 audit[2405]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc3f305ee0 a2=0 a3=7ffc3f305ecc items=0 ppid=2249 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.370000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 10 01:11:10.372000 audit[2407]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2407 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 10 01:11:10.372000 audit[2407]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffe550ee100 a2=0 a3=7ffe550ee0ec items=0 ppid=2249 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.372000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:10.372000 audit[2407]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2407 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 10 01:11:10.372000 audit[2407]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffe550ee100 a2=0 a3=7ffe550ee0ec items=0 ppid=2249 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:10.372000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:10.426788 systemd[1]: run-containerd-runc-k8s.io-7644ea70bbea33b217b2843c2204de6dcc6034c3de298db96ce966c24988cc53-runc.Yjdxgq.mount: Deactivated successfully. Sep 10 01:11:11.458614 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount297461195.mount: Deactivated successfully. Sep 10 01:11:12.068861 env[1267]: time="2025-09-10T01:11:12.068834487Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:12.069546 env[1267]: time="2025-09-10T01:11:12.069528520Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1911afdd8478c6ca3036ff85614050d5d19acc0f0c3f6a5a7b3e34b38dd309c9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:12.070337 env[1267]: time="2025-09-10T01:11:12.070311548Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:12.071109 env[1267]: time="2025-09-10T01:11:12.071093740Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:00a7a9b62f9b9a4e0856128b078539783b8352b07f707bff595cb604cc580f6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:12.071522 env[1267]: time="2025-09-10T01:11:12.071503928Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\" returns image reference \"sha256:1911afdd8478c6ca3036ff85614050d5d19acc0f0c3f6a5a7b3e34b38dd309c9\"" Sep 10 01:11:12.076442 env[1267]: time="2025-09-10T01:11:12.076421410Z" level=info msg="CreateContainer within sandbox \"f029ed326167d1ac97c2fb51a6efb0755ba2bf00282d33fefeea30d71593b289\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Sep 10 01:11:12.081904 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount202538618.mount: Deactivated successfully. Sep 10 01:11:12.084837 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1018861924.mount: Deactivated successfully. Sep 10 01:11:12.086538 env[1267]: time="2025-09-10T01:11:12.086511168Z" level=info msg="CreateContainer within sandbox \"f029ed326167d1ac97c2fb51a6efb0755ba2bf00282d33fefeea30d71593b289\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"147e2987ff6977a909404d4b2e8020af625dafcd587f7106b97c168f0e8ebe30\"" Sep 10 01:11:12.086902 env[1267]: time="2025-09-10T01:11:12.086890415Z" level=info msg="StartContainer for \"147e2987ff6977a909404d4b2e8020af625dafcd587f7106b97c168f0e8ebe30\"" Sep 10 01:11:12.099599 systemd[1]: Started cri-containerd-147e2987ff6977a909404d4b2e8020af625dafcd587f7106b97c168f0e8ebe30.scope. Sep 10 01:11:12.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.107000 audit: BPF prog-id=117 op=LOAD Sep 10 01:11:12.107000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.107000 audit[2416]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2206 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:12.107000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134376532393837666636393737613930393430346434623265383032 Sep 10 01:11:12.107000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.107000 audit[2416]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2206 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:12.107000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134376532393837666636393737613930393430346434623265383032 Sep 10 01:11:12.108000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.108000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.108000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.108000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.108000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.108000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.108000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.108000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.108000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.108000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.108000 audit: BPF prog-id=118 op=LOAD Sep 10 01:11:12.108000 audit[2416]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00026bdc0 items=0 ppid=2206 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:12.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134376532393837666636393737613930393430346434623265383032 Sep 10 01:11:12.108000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.108000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.108000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.108000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.108000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.108000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.108000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.108000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.108000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.108000 audit: BPF prog-id=119 op=LOAD Sep 10 01:11:12.108000 audit[2416]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00026be08 items=0 ppid=2206 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:12.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134376532393837666636393737613930393430346434623265383032 Sep 10 01:11:12.109000 audit: BPF prog-id=119 op=UNLOAD Sep 10 01:11:12.109000 audit: BPF prog-id=118 op=UNLOAD Sep 10 01:11:12.109000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.109000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.109000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.109000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.109000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.109000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.109000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.109000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.109000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.109000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:12.109000 audit: BPF prog-id=120 op=LOAD Sep 10 01:11:12.109000 audit[2416]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003b0218 items=0 ppid=2206 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:12.109000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134376532393837666636393737613930393430346434623265383032 Sep 10 01:11:12.123845 env[1267]: time="2025-09-10T01:11:12.123810516Z" level=info msg="StartContainer for \"147e2987ff6977a909404d4b2e8020af625dafcd587f7106b97c168f0e8ebe30\" returns successfully" Sep 10 01:11:12.662791 kubelet[2111]: I0910 01:11:12.662525 2111 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-4pfpx" podStartSLOduration=3.662513171 podStartE2EDuration="3.662513171s" podCreationTimestamp="2025-09-10 01:11:09 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-10 01:11:10.631589724 +0000 UTC m=+6.277171152" watchObservedRunningTime="2025-09-10 01:11:12.662513171 +0000 UTC m=+8.308094593" Sep 10 01:11:13.629363 kubelet[2111]: I0910 01:11:13.629304 2111 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-755d956888-mwczx" podStartSLOduration=2.290972822 podStartE2EDuration="4.629290282s" podCreationTimestamp="2025-09-10 01:11:09 +0000 UTC" firstStartedPulling="2025-09-10 01:11:09.735843204 +0000 UTC m=+5.381424630" lastFinishedPulling="2025-09-10 01:11:12.074160673 +0000 UTC m=+7.719742090" observedRunningTime="2025-09-10 01:11:12.662754781 +0000 UTC m=+8.308336209" watchObservedRunningTime="2025-09-10 01:11:13.629290282 +0000 UTC m=+9.274871709" Sep 10 01:11:17.610000 audit[1474]: USER_END pid=1474 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 01:11:17.612111 sudo[1474]: pam_unix(sudo:session): session closed for user root Sep 10 01:11:17.614972 kernel: kauditd_printk_skb: 357 callbacks suppressed Sep 10 01:11:17.615012 kernel: audit: type=1106 audit(1757466677.610:936): pid=1474 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 01:11:17.610000 audit[1474]: CRED_DISP pid=1474 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 01:11:17.620777 kernel: audit: type=1104 audit(1757466677.610:937): pid=1474 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 10 01:11:17.654732 sshd[1470]: pam_unix(sshd:session): session closed for user core Sep 10 01:11:17.661000 audit[1470]: USER_END pid=1470 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:11:17.661000 audit[1470]: CRED_DISP pid=1470 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:11:17.670266 kernel: audit: type=1106 audit(1757466677.661:938): pid=1470 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:11:17.670359 kernel: audit: type=1104 audit(1757466677.661:939): pid=1470 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:11:17.685000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.105:22-147.75.109.163:37700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:11:17.686445 systemd[1]: sshd@6-139.178.70.105:22-147.75.109.163:37700.service: Deactivated successfully. Sep 10 01:11:17.686934 systemd[1]: session-9.scope: Deactivated successfully. Sep 10 01:11:17.687020 systemd[1]: session-9.scope: Consumed 3.401s CPU time. Sep 10 01:11:17.689971 systemd-logind[1239]: Session 9 logged out. Waiting for processes to exit. Sep 10 01:11:17.690410 kernel: audit: type=1131 audit(1757466677.685:940): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.105:22-147.75.109.163:37700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:11:17.690700 systemd-logind[1239]: Removed session 9. Sep 10 01:11:18.357000 audit[2492]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2492 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:18.357000 audit[2492]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffd34550e90 a2=0 a3=7ffd34550e7c items=0 ppid=2249 pid=2492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:18.364790 kernel: audit: type=1325 audit(1757466678.357:941): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2492 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:18.364847 kernel: audit: type=1300 audit(1757466678.357:941): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffd34550e90 a2=0 a3=7ffd34550e7c items=0 ppid=2249 pid=2492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:18.364868 kernel: audit: type=1327 audit(1757466678.357:941): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:18.357000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:18.366000 audit[2492]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2492 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:18.366000 audit[2492]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd34550e90 a2=0 a3=0 items=0 ppid=2249 pid=2492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:18.375657 kernel: audit: type=1325 audit(1757466678.366:942): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2492 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:18.375721 kernel: audit: type=1300 audit(1757466678.366:942): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd34550e90 a2=0 a3=0 items=0 ppid=2249 pid=2492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:18.366000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:18.384000 audit[2494]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2494 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:18.384000 audit[2494]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffff2c4bcd0 a2=0 a3=7ffff2c4bcbc items=0 ppid=2249 pid=2494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:18.384000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:18.394000 audit[2494]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2494 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:18.394000 audit[2494]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffff2c4bcd0 a2=0 a3=0 items=0 ppid=2249 pid=2494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:18.394000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:19.651000 audit[2497]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2497 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:19.651000 audit[2497]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffd33adf200 a2=0 a3=7ffd33adf1ec items=0 ppid=2249 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:19.651000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:19.653000 audit[2497]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2497 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:19.653000 audit[2497]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd33adf200 a2=0 a3=0 items=0 ppid=2249 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:19.653000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:19.915266 systemd[1]: Created slice kubepods-besteffort-pod0c5f9fb5_5a2f_422d_8b62_99df7edca538.slice. Sep 10 01:11:20.008345 kubelet[2111]: I0910 01:11:20.008281 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/0c5f9fb5-5a2f-422d-8b62-99df7edca538-typha-certs\") pod \"calico-typha-6c8dc6d4c9-rjd64\" (UID: \"0c5f9fb5-5a2f-422d-8b62-99df7edca538\") " pod="calico-system/calico-typha-6c8dc6d4c9-rjd64" Sep 10 01:11:20.008345 kubelet[2111]: I0910 01:11:20.008337 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kltc8\" (UniqueName: \"kubernetes.io/projected/0c5f9fb5-5a2f-422d-8b62-99df7edca538-kube-api-access-kltc8\") pod \"calico-typha-6c8dc6d4c9-rjd64\" (UID: \"0c5f9fb5-5a2f-422d-8b62-99df7edca538\") " pod="calico-system/calico-typha-6c8dc6d4c9-rjd64" Sep 10 01:11:20.008809 kubelet[2111]: I0910 01:11:20.008356 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0c5f9fb5-5a2f-422d-8b62-99df7edca538-tigera-ca-bundle\") pod \"calico-typha-6c8dc6d4c9-rjd64\" (UID: \"0c5f9fb5-5a2f-422d-8b62-99df7edca538\") " pod="calico-system/calico-typha-6c8dc6d4c9-rjd64" Sep 10 01:11:20.231864 env[1267]: time="2025-09-10T01:11:20.231781234Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6c8dc6d4c9-rjd64,Uid:0c5f9fb5-5a2f-422d-8b62-99df7edca538,Namespace:calico-system,Attempt:0,}" Sep 10 01:11:20.292398 systemd[1]: Created slice kubepods-besteffort-podceee7076_3006_475e_89bc_89280ed67b1e.slice. Sep 10 01:11:20.304920 env[1267]: time="2025-09-10T01:11:20.304283882Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 01:11:20.304920 env[1267]: time="2025-09-10T01:11:20.304313316Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 01:11:20.304920 env[1267]: time="2025-09-10T01:11:20.304335393Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 01:11:20.304920 env[1267]: time="2025-09-10T01:11:20.304864595Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d350382b7a78a49f2469b885ec43776d768cf830983b7092b475d9723387f8df pid=2508 runtime=io.containerd.runc.v2 Sep 10 01:11:20.328186 systemd[1]: Started cri-containerd-d350382b7a78a49f2469b885ec43776d768cf830983b7092b475d9723387f8df.scope. Sep 10 01:11:20.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit: BPF prog-id=121 op=LOAD Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2508 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:20.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433353033383262376137386134396632343639623838356563343337 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2508 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:20.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433353033383262376137386134396632343639623838356563343337 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit: BPF prog-id=122 op=LOAD Sep 10 01:11:20.345000 audit[2519]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000384b20 items=0 ppid=2508 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:20.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433353033383262376137386134396632343639623838356563343337 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit: BPF prog-id=123 op=LOAD Sep 10 01:11:20.345000 audit[2519]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000384b68 items=0 ppid=2508 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:20.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433353033383262376137386134396632343639623838356563343337 Sep 10 01:11:20.345000 audit: BPF prog-id=123 op=UNLOAD Sep 10 01:11:20.345000 audit: BPF prog-id=122 op=UNLOAD Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.345000 audit: BPF prog-id=124 op=LOAD Sep 10 01:11:20.345000 audit[2519]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000384f78 items=0 ppid=2508 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:20.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433353033383262376137386134396632343639623838356563343337 Sep 10 01:11:20.372037 env[1267]: time="2025-09-10T01:11:20.372006340Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6c8dc6d4c9-rjd64,Uid:0c5f9fb5-5a2f-422d-8b62-99df7edca538,Namespace:calico-system,Attempt:0,} returns sandbox id \"d350382b7a78a49f2469b885ec43776d768cf830983b7092b475d9723387f8df\"" Sep 10 01:11:20.396767 env[1267]: time="2025-09-10T01:11:20.396738133Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\"" Sep 10 01:11:20.410250 kubelet[2111]: I0910 01:11:20.410220 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/ceee7076-3006-475e-89bc-89280ed67b1e-policysync\") pod \"calico-node-6t48x\" (UID: \"ceee7076-3006-475e-89bc-89280ed67b1e\") " pod="calico-system/calico-node-6t48x" Sep 10 01:11:20.410367 kubelet[2111]: I0910 01:11:20.410259 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ceee7076-3006-475e-89bc-89280ed67b1e-tigera-ca-bundle\") pod \"calico-node-6t48x\" (UID: \"ceee7076-3006-475e-89bc-89280ed67b1e\") " pod="calico-system/calico-node-6t48x" Sep 10 01:11:20.410367 kubelet[2111]: I0910 01:11:20.410286 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/ceee7076-3006-475e-89bc-89280ed67b1e-var-lib-calico\") pod \"calico-node-6t48x\" (UID: \"ceee7076-3006-475e-89bc-89280ed67b1e\") " pod="calico-system/calico-node-6t48x" Sep 10 01:11:20.410367 kubelet[2111]: I0910 01:11:20.410297 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/ceee7076-3006-475e-89bc-89280ed67b1e-var-run-calico\") pod \"calico-node-6t48x\" (UID: \"ceee7076-3006-475e-89bc-89280ed67b1e\") " pod="calico-system/calico-node-6t48x" Sep 10 01:11:20.410367 kubelet[2111]: I0910 01:11:20.410308 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/ceee7076-3006-475e-89bc-89280ed67b1e-cni-bin-dir\") pod \"calico-node-6t48x\" (UID: \"ceee7076-3006-475e-89bc-89280ed67b1e\") " pod="calico-system/calico-node-6t48x" Sep 10 01:11:20.410367 kubelet[2111]: I0910 01:11:20.410335 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/ceee7076-3006-475e-89bc-89280ed67b1e-node-certs\") pod \"calico-node-6t48x\" (UID: \"ceee7076-3006-475e-89bc-89280ed67b1e\") " pod="calico-system/calico-node-6t48x" Sep 10 01:11:20.410478 kubelet[2111]: I0910 01:11:20.410346 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/ceee7076-3006-475e-89bc-89280ed67b1e-cni-net-dir\") pod \"calico-node-6t48x\" (UID: \"ceee7076-3006-475e-89bc-89280ed67b1e\") " pod="calico-system/calico-node-6t48x" Sep 10 01:11:20.410478 kubelet[2111]: I0910 01:11:20.410354 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/ceee7076-3006-475e-89bc-89280ed67b1e-lib-modules\") pod \"calico-node-6t48x\" (UID: \"ceee7076-3006-475e-89bc-89280ed67b1e\") " pod="calico-system/calico-node-6t48x" Sep 10 01:11:20.410478 kubelet[2111]: I0910 01:11:20.410371 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/ceee7076-3006-475e-89bc-89280ed67b1e-cni-log-dir\") pod \"calico-node-6t48x\" (UID: \"ceee7076-3006-475e-89bc-89280ed67b1e\") " pod="calico-system/calico-node-6t48x" Sep 10 01:11:20.410478 kubelet[2111]: I0910 01:11:20.410380 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/ceee7076-3006-475e-89bc-89280ed67b1e-xtables-lock\") pod \"calico-node-6t48x\" (UID: \"ceee7076-3006-475e-89bc-89280ed67b1e\") " pod="calico-system/calico-node-6t48x" Sep 10 01:11:20.410478 kubelet[2111]: I0910 01:11:20.410389 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-v7pn6\" (UniqueName: \"kubernetes.io/projected/ceee7076-3006-475e-89bc-89280ed67b1e-kube-api-access-v7pn6\") pod \"calico-node-6t48x\" (UID: \"ceee7076-3006-475e-89bc-89280ed67b1e\") " pod="calico-system/calico-node-6t48x" Sep 10 01:11:20.410605 kubelet[2111]: I0910 01:11:20.410399 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/ceee7076-3006-475e-89bc-89280ed67b1e-flexvol-driver-host\") pod \"calico-node-6t48x\" (UID: \"ceee7076-3006-475e-89bc-89280ed67b1e\") " pod="calico-system/calico-node-6t48x" Sep 10 01:11:20.556166 kubelet[2111]: E0910 01:11:20.556115 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.556263 kubelet[2111]: W0910 01:11:20.556251 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.556334 kubelet[2111]: E0910 01:11:20.556322 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.594470 env[1267]: time="2025-09-10T01:11:20.594445959Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-6t48x,Uid:ceee7076-3006-475e-89bc-89280ed67b1e,Namespace:calico-system,Attempt:0,}" Sep 10 01:11:20.631165 kubelet[2111]: E0910 01:11:20.631093 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-588jm" podUID="433ded13-351c-45da-a35c-464e9f991379" Sep 10 01:11:20.673464 kubelet[2111]: E0910 01:11:20.673441 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.673464 kubelet[2111]: W0910 01:11:20.673456 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.673464 kubelet[2111]: E0910 01:11:20.673470 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.673645 kubelet[2111]: E0910 01:11:20.673572 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.673645 kubelet[2111]: W0910 01:11:20.673577 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.673645 kubelet[2111]: E0910 01:11:20.673582 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.673797 kubelet[2111]: E0910 01:11:20.673787 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.673797 kubelet[2111]: W0910 01:11:20.673794 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.673859 kubelet[2111]: E0910 01:11:20.673800 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.673930 kubelet[2111]: E0910 01:11:20.673920 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.673930 kubelet[2111]: W0910 01:11:20.673926 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.673999 kubelet[2111]: E0910 01:11:20.673932 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.674031 kubelet[2111]: E0910 01:11:20.674021 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.674031 kubelet[2111]: W0910 01:11:20.674027 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.674084 kubelet[2111]: E0910 01:11:20.674032 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.674126 kubelet[2111]: E0910 01:11:20.674116 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.674126 kubelet[2111]: W0910 01:11:20.674123 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.675928 kubelet[2111]: E0910 01:11:20.674128 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.675928 kubelet[2111]: E0910 01:11:20.674206 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.675928 kubelet[2111]: W0910 01:11:20.674211 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.675928 kubelet[2111]: E0910 01:11:20.674215 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.675928 kubelet[2111]: E0910 01:11:20.674291 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.675928 kubelet[2111]: W0910 01:11:20.674296 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.675928 kubelet[2111]: E0910 01:11:20.674300 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.675928 kubelet[2111]: E0910 01:11:20.674386 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.675928 kubelet[2111]: W0910 01:11:20.674390 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.675928 kubelet[2111]: E0910 01:11:20.674394 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.676137 kubelet[2111]: E0910 01:11:20.674473 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.676137 kubelet[2111]: W0910 01:11:20.674477 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.676137 kubelet[2111]: E0910 01:11:20.674481 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.676137 kubelet[2111]: E0910 01:11:20.674561 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.676137 kubelet[2111]: W0910 01:11:20.674565 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.676137 kubelet[2111]: E0910 01:11:20.674569 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.676137 kubelet[2111]: E0910 01:11:20.674647 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.676137 kubelet[2111]: W0910 01:11:20.674652 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.676137 kubelet[2111]: E0910 01:11:20.674656 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.676137 kubelet[2111]: E0910 01:11:20.674744 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.677512 kubelet[2111]: W0910 01:11:20.674748 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.677512 kubelet[2111]: E0910 01:11:20.674753 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.677512 kubelet[2111]: E0910 01:11:20.674869 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.677512 kubelet[2111]: W0910 01:11:20.674875 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.677512 kubelet[2111]: E0910 01:11:20.674879 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.677512 kubelet[2111]: E0910 01:11:20.675012 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.677512 kubelet[2111]: W0910 01:11:20.675018 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.677512 kubelet[2111]: E0910 01:11:20.675023 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.677512 kubelet[2111]: E0910 01:11:20.675491 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.677512 kubelet[2111]: W0910 01:11:20.675497 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.677786 kubelet[2111]: E0910 01:11:20.675504 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.677786 kubelet[2111]: E0910 01:11:20.675630 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.677786 kubelet[2111]: W0910 01:11:20.675635 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.677786 kubelet[2111]: E0910 01:11:20.675647 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.677786 kubelet[2111]: E0910 01:11:20.675753 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.677786 kubelet[2111]: W0910 01:11:20.675759 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.677786 kubelet[2111]: E0910 01:11:20.675771 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.677786 kubelet[2111]: E0910 01:11:20.675914 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.677786 kubelet[2111]: W0910 01:11:20.675919 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.677786 kubelet[2111]: E0910 01:11:20.675926 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.678037 kubelet[2111]: E0910 01:11:20.676019 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.678037 kubelet[2111]: W0910 01:11:20.676023 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.678037 kubelet[2111]: E0910 01:11:20.676028 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.686736 env[1267]: time="2025-09-10T01:11:20.686677300Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 01:11:20.686736 env[1267]: time="2025-09-10T01:11:20.686707927Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 01:11:20.686736 env[1267]: time="2025-09-10T01:11:20.686714929Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 01:11:20.687083 env[1267]: time="2025-09-10T01:11:20.687054334Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0dc67000b96b0d120770e248353574abf3e7b83182d6ab49857cb237f494a092 pid=2573 runtime=io.containerd.runc.v2 Sep 10 01:11:20.690000 audit[2589]: NETFILTER_CFG table=filter:95 family=2 entries=20 op=nft_register_rule pid=2589 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:20.690000 audit[2589]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffcdbd21870 a2=0 a3=7ffcdbd2185c items=0 ppid=2249 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:20.690000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:20.699000 audit[2589]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2589 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:20.699000 audit[2589]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcdbd21870 a2=0 a3=0 items=0 ppid=2249 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:20.699000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:20.701606 systemd[1]: Started cri-containerd-0dc67000b96b0d120770e248353574abf3e7b83182d6ab49857cb237f494a092.scope. Sep 10 01:11:20.712938 kubelet[2111]: E0910 01:11:20.712721 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.712938 kubelet[2111]: W0910 01:11:20.712737 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.712938 kubelet[2111]: E0910 01:11:20.712750 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.712938 kubelet[2111]: I0910 01:11:20.712770 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qvtsh\" (UniqueName: \"kubernetes.io/projected/433ded13-351c-45da-a35c-464e9f991379-kube-api-access-qvtsh\") pod \"csi-node-driver-588jm\" (UID: \"433ded13-351c-45da-a35c-464e9f991379\") " pod="calico-system/csi-node-driver-588jm" Sep 10 01:11:20.712938 kubelet[2111]: E0910 01:11:20.712886 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.712938 kubelet[2111]: W0910 01:11:20.712892 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.712938 kubelet[2111]: E0910 01:11:20.712902 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.712938 kubelet[2111]: I0910 01:11:20.712917 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/433ded13-351c-45da-a35c-464e9f991379-kubelet-dir\") pod \"csi-node-driver-588jm\" (UID: \"433ded13-351c-45da-a35c-464e9f991379\") " pod="calico-system/csi-node-driver-588jm" Sep 10 01:11:20.716855 kubelet[2111]: E0910 01:11:20.713209 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.716855 kubelet[2111]: W0910 01:11:20.713215 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.716855 kubelet[2111]: E0910 01:11:20.713224 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.716855 kubelet[2111]: E0910 01:11:20.713359 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.716855 kubelet[2111]: W0910 01:11:20.713364 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.716855 kubelet[2111]: E0910 01:11:20.713369 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.716855 kubelet[2111]: E0910 01:11:20.713483 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.716855 kubelet[2111]: W0910 01:11:20.713489 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.716855 kubelet[2111]: E0910 01:11:20.713502 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.717078 kubelet[2111]: I0910 01:11:20.713519 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/433ded13-351c-45da-a35c-464e9f991379-varrun\") pod \"csi-node-driver-588jm\" (UID: \"433ded13-351c-45da-a35c-464e9f991379\") " pod="calico-system/csi-node-driver-588jm" Sep 10 01:11:20.717078 kubelet[2111]: E0910 01:11:20.715368 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.717078 kubelet[2111]: W0910 01:11:20.715379 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.717078 kubelet[2111]: E0910 01:11:20.715389 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.717078 kubelet[2111]: E0910 01:11:20.715499 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.717078 kubelet[2111]: W0910 01:11:20.715504 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.717078 kubelet[2111]: E0910 01:11:20.715511 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.717078 kubelet[2111]: E0910 01:11:20.715595 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.717078 kubelet[2111]: W0910 01:11:20.715600 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.717276 kubelet[2111]: E0910 01:11:20.715605 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.717276 kubelet[2111]: I0910 01:11:20.715659 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/433ded13-351c-45da-a35c-464e9f991379-socket-dir\") pod \"csi-node-driver-588jm\" (UID: \"433ded13-351c-45da-a35c-464e9f991379\") " pod="calico-system/csi-node-driver-588jm" Sep 10 01:11:20.717276 kubelet[2111]: E0910 01:11:20.715723 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.717276 kubelet[2111]: W0910 01:11:20.715727 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.717276 kubelet[2111]: E0910 01:11:20.715731 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.717276 kubelet[2111]: E0910 01:11:20.715808 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.717276 kubelet[2111]: W0910 01:11:20.715813 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.717276 kubelet[2111]: E0910 01:11:20.715818 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.717276 kubelet[2111]: E0910 01:11:20.715908 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.717483 kubelet[2111]: W0910 01:11:20.715914 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.717483 kubelet[2111]: E0910 01:11:20.715922 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.717483 kubelet[2111]: I0910 01:11:20.715937 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/433ded13-351c-45da-a35c-464e9f991379-registration-dir\") pod \"csi-node-driver-588jm\" (UID: \"433ded13-351c-45da-a35c-464e9f991379\") " pod="calico-system/csi-node-driver-588jm" Sep 10 01:11:20.717483 kubelet[2111]: E0910 01:11:20.716058 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.717483 kubelet[2111]: W0910 01:11:20.716073 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.717483 kubelet[2111]: E0910 01:11:20.716087 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.717483 kubelet[2111]: E0910 01:11:20.716201 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.717483 kubelet[2111]: W0910 01:11:20.716205 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.717483 kubelet[2111]: E0910 01:11:20.716222 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.717681 kubelet[2111]: E0910 01:11:20.716391 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.717681 kubelet[2111]: W0910 01:11:20.716396 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.717681 kubelet[2111]: E0910 01:11:20.716402 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.717681 kubelet[2111]: E0910 01:11:20.716523 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.717681 kubelet[2111]: W0910 01:11:20.716529 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.717681 kubelet[2111]: E0910 01:11:20.716543 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit: BPF prog-id=125 op=LOAD Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2573 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:20.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064633637303030623936623064313230373730653234383335333537 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2573 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:20.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064633637303030623936623064313230373730653234383335333537 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit: BPF prog-id=126 op=LOAD Sep 10 01:11:20.726000 audit[2583]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000289200 items=0 ppid=2573 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:20.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064633637303030623936623064313230373730653234383335333537 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit: BPF prog-id=127 op=LOAD Sep 10 01:11:20.726000 audit[2583]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000289248 items=0 ppid=2573 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:20.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064633637303030623936623064313230373730653234383335333537 Sep 10 01:11:20.726000 audit: BPF prog-id=127 op=UNLOAD Sep 10 01:11:20.726000 audit: BPF prog-id=126 op=UNLOAD Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:20.726000 audit: BPF prog-id=128 op=LOAD Sep 10 01:11:20.726000 audit[2583]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000289658 items=0 ppid=2573 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:20.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064633637303030623936623064313230373730653234383335333537 Sep 10 01:11:20.741345 env[1267]: time="2025-09-10T01:11:20.741292000Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-6t48x,Uid:ceee7076-3006-475e-89bc-89280ed67b1e,Namespace:calico-system,Attempt:0,} returns sandbox id \"0dc67000b96b0d120770e248353574abf3e7b83182d6ab49857cb237f494a092\"" Sep 10 01:11:20.816615 kubelet[2111]: E0910 01:11:20.816550 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.816715 kubelet[2111]: W0910 01:11:20.816703 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.816780 kubelet[2111]: E0910 01:11:20.816769 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.819770 kubelet[2111]: E0910 01:11:20.819759 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.819831 kubelet[2111]: W0910 01:11:20.819821 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.819892 kubelet[2111]: E0910 01:11:20.819884 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.820078 kubelet[2111]: E0910 01:11:20.820071 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.820130 kubelet[2111]: W0910 01:11:20.820122 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.820181 kubelet[2111]: E0910 01:11:20.820172 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.820347 kubelet[2111]: E0910 01:11:20.820340 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.820393 kubelet[2111]: W0910 01:11:20.820384 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.820448 kubelet[2111]: E0910 01:11:20.820440 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.820592 kubelet[2111]: E0910 01:11:20.820585 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.820638 kubelet[2111]: W0910 01:11:20.820630 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.820687 kubelet[2111]: E0910 01:11:20.820679 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.820833 kubelet[2111]: E0910 01:11:20.820827 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.820881 kubelet[2111]: W0910 01:11:20.820871 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.820932 kubelet[2111]: E0910 01:11:20.820924 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.824850 kubelet[2111]: E0910 01:11:20.824839 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.824916 kubelet[2111]: W0910 01:11:20.824905 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.824966 kubelet[2111]: E0910 01:11:20.824957 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.825141 kubelet[2111]: E0910 01:11:20.825134 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.825188 kubelet[2111]: W0910 01:11:20.825179 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.825239 kubelet[2111]: E0910 01:11:20.825231 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.825387 kubelet[2111]: E0910 01:11:20.825380 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.825436 kubelet[2111]: W0910 01:11:20.825428 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.825490 kubelet[2111]: E0910 01:11:20.825481 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.825624 kubelet[2111]: E0910 01:11:20.825618 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.825670 kubelet[2111]: W0910 01:11:20.825661 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.825720 kubelet[2111]: E0910 01:11:20.825711 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.825866 kubelet[2111]: E0910 01:11:20.825859 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.825912 kubelet[2111]: W0910 01:11:20.825904 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.825957 kubelet[2111]: E0910 01:11:20.825949 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.826096 kubelet[2111]: E0910 01:11:20.826089 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.826142 kubelet[2111]: W0910 01:11:20.826134 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.826197 kubelet[2111]: E0910 01:11:20.826189 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.826334 kubelet[2111]: E0910 01:11:20.826327 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.826384 kubelet[2111]: W0910 01:11:20.826376 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.826431 kubelet[2111]: E0910 01:11:20.826423 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.826562 kubelet[2111]: E0910 01:11:20.826555 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.826612 kubelet[2111]: W0910 01:11:20.826602 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.826666 kubelet[2111]: E0910 01:11:20.826658 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.827372 kubelet[2111]: E0910 01:11:20.827364 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.827431 kubelet[2111]: W0910 01:11:20.827422 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.827479 kubelet[2111]: E0910 01:11:20.827471 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.827672 kubelet[2111]: E0910 01:11:20.827664 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.827726 kubelet[2111]: W0910 01:11:20.827718 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.827778 kubelet[2111]: E0910 01:11:20.827769 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.827946 kubelet[2111]: E0910 01:11:20.827939 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.827995 kubelet[2111]: W0910 01:11:20.827987 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.828040 kubelet[2111]: E0910 01:11:20.828032 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.828211 kubelet[2111]: E0910 01:11:20.828204 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.828259 kubelet[2111]: W0910 01:11:20.828250 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.828312 kubelet[2111]: E0910 01:11:20.828304 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.828477 kubelet[2111]: E0910 01:11:20.828471 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.828524 kubelet[2111]: W0910 01:11:20.828515 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.828568 kubelet[2111]: E0910 01:11:20.828561 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.828720 kubelet[2111]: E0910 01:11:20.828713 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.828772 kubelet[2111]: W0910 01:11:20.828763 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.828822 kubelet[2111]: E0910 01:11:20.828814 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.828982 kubelet[2111]: E0910 01:11:20.828974 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.829038 kubelet[2111]: W0910 01:11:20.829029 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.829090 kubelet[2111]: E0910 01:11:20.829082 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.829262 kubelet[2111]: E0910 01:11:20.829255 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.829311 kubelet[2111]: W0910 01:11:20.829302 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.829382 kubelet[2111]: E0910 01:11:20.829374 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.830173 kubelet[2111]: E0910 01:11:20.829596 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.830173 kubelet[2111]: W0910 01:11:20.829605 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.830173 kubelet[2111]: E0910 01:11:20.829613 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.830173 kubelet[2111]: E0910 01:11:20.829696 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.830173 kubelet[2111]: W0910 01:11:20.829700 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.830173 kubelet[2111]: E0910 01:11:20.829705 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.830173 kubelet[2111]: E0910 01:11:20.829806 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.830173 kubelet[2111]: W0910 01:11:20.829811 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.830173 kubelet[2111]: E0910 01:11:20.829815 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:20.835115 kubelet[2111]: E0910 01:11:20.835099 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:20.835211 kubelet[2111]: W0910 01:11:20.835200 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:20.835267 kubelet[2111]: E0910 01:11:20.835259 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:21.115440 systemd[1]: run-containerd-runc-k8s.io-d350382b7a78a49f2469b885ec43776d768cf830983b7092b475d9723387f8df-runc.4RsWIu.mount: Deactivated successfully. Sep 10 01:11:22.093696 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3481938578.mount: Deactivated successfully. Sep 10 01:11:22.564555 kubelet[2111]: E0910 01:11:22.564520 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-588jm" podUID="433ded13-351c-45da-a35c-464e9f991379" Sep 10 01:11:23.256686 env[1267]: time="2025-09-10T01:11:23.256660632Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:23.270134 env[1267]: time="2025-09-10T01:11:23.270100944Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1d7bb7b0cce2924d35c7c26f6b6600409ea7c9535074c3d2e517ffbb3a0e0b36,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:23.275002 env[1267]: time="2025-09-10T01:11:23.274980401Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:23.282110 env[1267]: time="2025-09-10T01:11:23.282087842Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:f4a3d61ffda9c98a53adeb412c5af404ca3727a3cc2d0b4ef28d197bdd47ecaa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:23.282299 env[1267]: time="2025-09-10T01:11:23.282280336Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\" returns image reference \"sha256:1d7bb7b0cce2924d35c7c26f6b6600409ea7c9535074c3d2e517ffbb3a0e0b36\"" Sep 10 01:11:23.291933 env[1267]: time="2025-09-10T01:11:23.291915175Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\"" Sep 10 01:11:23.328002 env[1267]: time="2025-09-10T01:11:23.327966437Z" level=info msg="CreateContainer within sandbox \"d350382b7a78a49f2469b885ec43776d768cf830983b7092b475d9723387f8df\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Sep 10 01:11:23.336007 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3467776685.mount: Deactivated successfully. Sep 10 01:11:23.338353 env[1267]: time="2025-09-10T01:11:23.338309857Z" level=info msg="CreateContainer within sandbox \"d350382b7a78a49f2469b885ec43776d768cf830983b7092b475d9723387f8df\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"c726506fa55ffe5436651c5b4abc4970268b5d7360d8ea53a06bedc80bd6e0d8\"" Sep 10 01:11:23.339901 env[1267]: time="2025-09-10T01:11:23.339870610Z" level=info msg="StartContainer for \"c726506fa55ffe5436651c5b4abc4970268b5d7360d8ea53a06bedc80bd6e0d8\"" Sep 10 01:11:23.365755 systemd[1]: Started cri-containerd-c726506fa55ffe5436651c5b4abc4970268b5d7360d8ea53a06bedc80bd6e0d8.scope. Sep 10 01:11:23.385339 kernel: kauditd_printk_skb: 133 callbacks suppressed Sep 10 01:11:23.385413 kernel: audit: type=1400 audit(1757466683.380:985): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.385434 kernel: audit: type=1400 audit(1757466683.380:986): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.390464 kernel: audit: type=1400 audit(1757466683.380:987): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.392907 kernel: audit: type=1400 audit(1757466683.380:988): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.395430 kernel: audit: type=1400 audit(1757466683.380:989): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.395461 kernel: audit: type=1400 audit(1757466683.380:990): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.400365 kernel: audit: type=1400 audit(1757466683.380:991): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.403310 kernel: audit: type=1400 audit(1757466683.380:992): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.403370 kernel: audit: type=1400 audit(1757466683.380:993): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.408126 kernel: audit: type=1400 audit(1757466683.383:994): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.383000 audit: BPF prog-id=129 op=LOAD Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2508 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:23.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337323635303666613535666665353433363635316335623461626334 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2508 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:23.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337323635303666613535666665353433363635316335623461626334 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit: BPF prog-id=130 op=LOAD Sep 10 01:11:23.386000 audit[2658]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000369eb0 items=0 ppid=2508 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:23.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337323635303666613535666665353433363635316335623461626334 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit: BPF prog-id=131 op=LOAD Sep 10 01:11:23.386000 audit[2658]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000369ef8 items=0 ppid=2508 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:23.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337323635303666613535666665353433363635316335623461626334 Sep 10 01:11:23.386000 audit: BPF prog-id=131 op=UNLOAD Sep 10 01:11:23.386000 audit: BPF prog-id=130 op=UNLOAD Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:23.386000 audit: BPF prog-id=132 op=LOAD Sep 10 01:11:23.386000 audit[2658]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003d6308 items=0 ppid=2508 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:23.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337323635303666613535666665353433363635316335623461626334 Sep 10 01:11:23.436968 env[1267]: time="2025-09-10T01:11:23.436934285Z" level=info msg="StartContainer for \"c726506fa55ffe5436651c5b4abc4970268b5d7360d8ea53a06bedc80bd6e0d8\" returns successfully" Sep 10 01:11:23.695091 kubelet[2111]: E0910 01:11:23.695062 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.695091 kubelet[2111]: W0910 01:11:23.695082 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.695458 kubelet[2111]: E0910 01:11:23.695100 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.695458 kubelet[2111]: E0910 01:11:23.695310 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.695458 kubelet[2111]: W0910 01:11:23.695337 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.695458 kubelet[2111]: E0910 01:11:23.695346 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.695458 kubelet[2111]: E0910 01:11:23.695455 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.695593 kubelet[2111]: W0910 01:11:23.695470 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.695593 kubelet[2111]: E0910 01:11:23.695479 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.695679 kubelet[2111]: E0910 01:11:23.695661 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.695679 kubelet[2111]: W0910 01:11:23.695674 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.695742 kubelet[2111]: E0910 01:11:23.695682 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.695812 kubelet[2111]: E0910 01:11:23.695798 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.695848 kubelet[2111]: W0910 01:11:23.695814 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.695848 kubelet[2111]: E0910 01:11:23.695821 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.695939 kubelet[2111]: E0910 01:11:23.695925 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.695974 kubelet[2111]: W0910 01:11:23.695942 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.695974 kubelet[2111]: E0910 01:11:23.695951 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.696065 kubelet[2111]: E0910 01:11:23.696052 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.696101 kubelet[2111]: W0910 01:11:23.696062 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.696101 kubelet[2111]: E0910 01:11:23.696078 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.696228 kubelet[2111]: E0910 01:11:23.696200 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.696228 kubelet[2111]: W0910 01:11:23.696206 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.696228 kubelet[2111]: E0910 01:11:23.696212 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.696495 kubelet[2111]: E0910 01:11:23.696322 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.696495 kubelet[2111]: W0910 01:11:23.696330 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.696495 kubelet[2111]: E0910 01:11:23.696336 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.696495 kubelet[2111]: E0910 01:11:23.696431 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.696495 kubelet[2111]: W0910 01:11:23.696437 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.696495 kubelet[2111]: E0910 01:11:23.696442 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.704290 kubelet[2111]: E0910 01:11:23.696544 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.704290 kubelet[2111]: W0910 01:11:23.696549 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.704290 kubelet[2111]: E0910 01:11:23.696555 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.704290 kubelet[2111]: E0910 01:11:23.696692 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.704290 kubelet[2111]: W0910 01:11:23.696700 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.704290 kubelet[2111]: E0910 01:11:23.696706 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.704290 kubelet[2111]: E0910 01:11:23.696818 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.704290 kubelet[2111]: W0910 01:11:23.696824 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.704290 kubelet[2111]: E0910 01:11:23.696837 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.704290 kubelet[2111]: E0910 01:11:23.696949 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.704624 kubelet[2111]: W0910 01:11:23.696955 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.704624 kubelet[2111]: E0910 01:11:23.696970 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.704624 kubelet[2111]: E0910 01:11:23.697082 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.704624 kubelet[2111]: W0910 01:11:23.697089 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.704624 kubelet[2111]: E0910 01:11:23.697103 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.747614 kubelet[2111]: E0910 01:11:23.747594 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.748301 kubelet[2111]: W0910 01:11:23.747733 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.748301 kubelet[2111]: E0910 01:11:23.747751 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.748301 kubelet[2111]: E0910 01:11:23.747944 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.748301 kubelet[2111]: W0910 01:11:23.747950 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.748301 kubelet[2111]: E0910 01:11:23.747957 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.748301 kubelet[2111]: E0910 01:11:23.748092 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.748301 kubelet[2111]: W0910 01:11:23.748098 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.748301 kubelet[2111]: E0910 01:11:23.748105 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.748585 kubelet[2111]: E0910 01:11:23.748577 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.748651 kubelet[2111]: W0910 01:11:23.748640 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.748729 kubelet[2111]: E0910 01:11:23.748719 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.748911 kubelet[2111]: E0910 01:11:23.748902 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.748977 kubelet[2111]: W0910 01:11:23.748968 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.749040 kubelet[2111]: E0910 01:11:23.749024 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.749214 kubelet[2111]: E0910 01:11:23.749206 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.749284 kubelet[2111]: W0910 01:11:23.749274 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.749365 kubelet[2111]: E0910 01:11:23.749356 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.751842 kubelet[2111]: E0910 01:11:23.749560 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.751842 kubelet[2111]: W0910 01:11:23.749566 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.751842 kubelet[2111]: E0910 01:11:23.749572 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.751842 kubelet[2111]: E0910 01:11:23.749681 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.751842 kubelet[2111]: W0910 01:11:23.749687 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.751842 kubelet[2111]: E0910 01:11:23.749698 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.751842 kubelet[2111]: E0910 01:11:23.749825 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.751842 kubelet[2111]: W0910 01:11:23.749840 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.751842 kubelet[2111]: E0910 01:11:23.749846 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.751842 kubelet[2111]: E0910 01:11:23.750154 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.752155 kubelet[2111]: W0910 01:11:23.750163 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.752155 kubelet[2111]: E0910 01:11:23.750173 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.752155 kubelet[2111]: E0910 01:11:23.750832 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.752155 kubelet[2111]: W0910 01:11:23.750837 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.752155 kubelet[2111]: E0910 01:11:23.750843 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.752155 kubelet[2111]: E0910 01:11:23.750948 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.752155 kubelet[2111]: W0910 01:11:23.750954 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.752155 kubelet[2111]: E0910 01:11:23.750959 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.752155 kubelet[2111]: E0910 01:11:23.751219 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.752155 kubelet[2111]: W0910 01:11:23.751224 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.752397 kubelet[2111]: E0910 01:11:23.751231 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.752397 kubelet[2111]: E0910 01:11:23.751568 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.752397 kubelet[2111]: W0910 01:11:23.751574 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.752397 kubelet[2111]: E0910 01:11:23.751579 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.752397 kubelet[2111]: E0910 01:11:23.751671 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.752397 kubelet[2111]: W0910 01:11:23.751676 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.752397 kubelet[2111]: E0910 01:11:23.751688 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.752608 kubelet[2111]: E0910 01:11:23.752601 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.752669 kubelet[2111]: W0910 01:11:23.752660 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.752722 kubelet[2111]: E0910 01:11:23.752713 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.752967 kubelet[2111]: E0910 01:11:23.752954 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.754744 kubelet[2111]: W0910 01:11:23.753005 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.754744 kubelet[2111]: E0910 01:11:23.753024 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:23.754744 kubelet[2111]: E0910 01:11:23.753165 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:23.754744 kubelet[2111]: W0910 01:11:23.753170 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:23.754744 kubelet[2111]: E0910 01:11:23.753176 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.564362 kubelet[2111]: E0910 01:11:24.564334 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-588jm" podUID="433ded13-351c-45da-a35c-464e9f991379" Sep 10 01:11:24.658061 kubelet[2111]: I0910 01:11:24.650090 2111 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 10 01:11:24.701951 kubelet[2111]: E0910 01:11:24.701930 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.702227 kubelet[2111]: W0910 01:11:24.702215 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.702298 kubelet[2111]: E0910 01:11:24.702287 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.702509 kubelet[2111]: E0910 01:11:24.702501 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.702561 kubelet[2111]: W0910 01:11:24.702552 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.702624 kubelet[2111]: E0910 01:11:24.702613 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.702776 kubelet[2111]: E0910 01:11:24.702768 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.702825 kubelet[2111]: W0910 01:11:24.702816 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.702877 kubelet[2111]: E0910 01:11:24.702869 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.703037 kubelet[2111]: E0910 01:11:24.703030 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.703088 kubelet[2111]: W0910 01:11:24.703079 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.703139 kubelet[2111]: E0910 01:11:24.703130 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.703293 kubelet[2111]: E0910 01:11:24.703286 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.703355 kubelet[2111]: W0910 01:11:24.703347 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.703411 kubelet[2111]: E0910 01:11:24.703401 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.703563 kubelet[2111]: E0910 01:11:24.703555 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.703612 kubelet[2111]: W0910 01:11:24.703604 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.703663 kubelet[2111]: E0910 01:11:24.703654 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.703802 kubelet[2111]: E0910 01:11:24.703795 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.703850 kubelet[2111]: W0910 01:11:24.703842 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.703952 kubelet[2111]: E0910 01:11:24.703943 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.704100 kubelet[2111]: E0910 01:11:24.704093 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.704149 kubelet[2111]: W0910 01:11:24.704140 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.704199 kubelet[2111]: E0910 01:11:24.704191 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.704361 kubelet[2111]: E0910 01:11:24.704354 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.704419 kubelet[2111]: W0910 01:11:24.704409 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.704484 kubelet[2111]: E0910 01:11:24.704476 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.704624 kubelet[2111]: E0910 01:11:24.704618 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.704676 kubelet[2111]: W0910 01:11:24.704666 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.704731 kubelet[2111]: E0910 01:11:24.704723 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.704884 kubelet[2111]: E0910 01:11:24.704878 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.704935 kubelet[2111]: W0910 01:11:24.704927 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.704987 kubelet[2111]: E0910 01:11:24.704979 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.705130 kubelet[2111]: E0910 01:11:24.705121 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.705190 kubelet[2111]: W0910 01:11:24.705180 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.705422 kubelet[2111]: E0910 01:11:24.705270 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.705478 kubelet[2111]: E0910 01:11:24.705469 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.705542 kubelet[2111]: W0910 01:11:24.705532 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.705602 kubelet[2111]: E0910 01:11:24.705592 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.705744 kubelet[2111]: E0910 01:11:24.705737 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.705802 kubelet[2111]: W0910 01:11:24.705792 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.705854 kubelet[2111]: E0910 01:11:24.705844 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.706007 kubelet[2111]: E0910 01:11:24.706001 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.706057 kubelet[2111]: W0910 01:11:24.706049 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.706109 kubelet[2111]: E0910 01:11:24.706101 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.758806 kubelet[2111]: E0910 01:11:24.758641 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.758806 kubelet[2111]: W0910 01:11:24.758654 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.758806 kubelet[2111]: E0910 01:11:24.758667 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.759540 kubelet[2111]: E0910 01:11:24.759062 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.759540 kubelet[2111]: W0910 01:11:24.759075 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.759540 kubelet[2111]: E0910 01:11:24.759083 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.759540 kubelet[2111]: E0910 01:11:24.759199 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.759540 kubelet[2111]: W0910 01:11:24.759204 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.759540 kubelet[2111]: E0910 01:11:24.759210 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.759772 kubelet[2111]: E0910 01:11:24.759762 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.759805 kubelet[2111]: W0910 01:11:24.759770 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.759805 kubelet[2111]: E0910 01:11:24.759782 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.759898 kubelet[2111]: E0910 01:11:24.759885 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.759935 kubelet[2111]: W0910 01:11:24.759900 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.759935 kubelet[2111]: E0910 01:11:24.759908 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.759997 kubelet[2111]: E0910 01:11:24.759986 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.759997 kubelet[2111]: W0910 01:11:24.759994 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.760071 kubelet[2111]: E0910 01:11:24.759999 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.760096 kubelet[2111]: E0910 01:11:24.760091 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.760096 kubelet[2111]: W0910 01:11:24.760095 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.760135 kubelet[2111]: E0910 01:11:24.760099 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.760339 kubelet[2111]: E0910 01:11:24.760330 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.760396 kubelet[2111]: W0910 01:11:24.760387 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.760446 kubelet[2111]: E0910 01:11:24.760438 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.760593 kubelet[2111]: E0910 01:11:24.760587 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.760642 kubelet[2111]: W0910 01:11:24.760630 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.760713 kubelet[2111]: E0910 01:11:24.760703 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.761154 kubelet[2111]: E0910 01:11:24.761145 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.761218 kubelet[2111]: W0910 01:11:24.761210 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.761269 kubelet[2111]: E0910 01:11:24.761261 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.761453 kubelet[2111]: E0910 01:11:24.761446 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.761513 kubelet[2111]: W0910 01:11:24.761505 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.761569 kubelet[2111]: E0910 01:11:24.761561 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.761727 kubelet[2111]: E0910 01:11:24.761720 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.761784 kubelet[2111]: W0910 01:11:24.761775 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.761836 kubelet[2111]: E0910 01:11:24.761828 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.762001 kubelet[2111]: E0910 01:11:24.761995 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.762063 kubelet[2111]: W0910 01:11:24.762055 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.762114 kubelet[2111]: E0910 01:11:24.762105 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.762351 kubelet[2111]: E0910 01:11:24.762333 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.762390 kubelet[2111]: W0910 01:11:24.762350 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.762390 kubelet[2111]: E0910 01:11:24.762359 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.767481 kubelet[2111]: E0910 01:11:24.762440 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.767481 kubelet[2111]: W0910 01:11:24.762444 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.767481 kubelet[2111]: E0910 01:11:24.762449 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.767481 kubelet[2111]: E0910 01:11:24.762557 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.767481 kubelet[2111]: W0910 01:11:24.762562 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.767481 kubelet[2111]: E0910 01:11:24.762567 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.767481 kubelet[2111]: E0910 01:11:24.762739 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.767481 kubelet[2111]: W0910 01:11:24.762748 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.767481 kubelet[2111]: E0910 01:11:24.762757 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:24.767481 kubelet[2111]: E0910 01:11:24.762873 2111 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 10 01:11:24.772622 kubelet[2111]: W0910 01:11:24.762878 2111 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 10 01:11:24.772622 kubelet[2111]: E0910 01:11:24.762891 2111 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 10 01:11:25.525085 env[1267]: time="2025-09-10T01:11:25.525023996Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:25.526207 env[1267]: time="2025-09-10T01:11:25.526181398Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4f2b088ed6fdfc6a97ac0650a4ba8171107d6656ce265c592e4c8423fd10e5c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:25.527828 env[1267]: time="2025-09-10T01:11:25.527809107Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:25.529410 env[1267]: time="2025-09-10T01:11:25.529384555Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\" returns image reference \"sha256:4f2b088ed6fdfc6a97ac0650a4ba8171107d6656ce265c592e4c8423fd10e5c4\"" Sep 10 01:11:25.529595 env[1267]: time="2025-09-10T01:11:25.529553126Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:81bdfcd9dbd36624dc35354e8c181c75631ba40e6c7df5820f5f56cea36f0ef9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:25.533110 env[1267]: time="2025-09-10T01:11:25.533079524Z" level=info msg="CreateContainer within sandbox \"0dc67000b96b0d120770e248353574abf3e7b83182d6ab49857cb237f494a092\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Sep 10 01:11:25.541513 env[1267]: time="2025-09-10T01:11:25.541474300Z" level=info msg="CreateContainer within sandbox \"0dc67000b96b0d120770e248353574abf3e7b83182d6ab49857cb237f494a092\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"1998f28a2cab4c007466196abf79e98254b23b693d75d0b23fd4396f57ed12db\"" Sep 10 01:11:25.542054 env[1267]: time="2025-09-10T01:11:25.542033801Z" level=info msg="StartContainer for \"1998f28a2cab4c007466196abf79e98254b23b693d75d0b23fd4396f57ed12db\"" Sep 10 01:11:25.563209 systemd[1]: run-containerd-runc-k8s.io-1998f28a2cab4c007466196abf79e98254b23b693d75d0b23fd4396f57ed12db-runc.3j1coR.mount: Deactivated successfully. Sep 10 01:11:25.566125 systemd[1]: Started cri-containerd-1998f28a2cab4c007466196abf79e98254b23b693d75d0b23fd4396f57ed12db.scope. Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { perfmon } for pid=2768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=7f8ec4592db8 items=0 ppid=2573 pid=2768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:25.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139393866323861326361623463303037343636313936616266373965 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { bpf } for pid=2768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { bpf } for pid=2768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { bpf } for pid=2768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { perfmon } for pid=2768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { perfmon } for pid=2768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { perfmon } for pid=2768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { perfmon } for pid=2768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { perfmon } for pid=2768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { bpf } for pid=2768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { bpf } for pid=2768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit: BPF prog-id=133 op=LOAD Sep 10 01:11:25.576000 audit[2768]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c0001c5dd8 items=0 ppid=2573 pid=2768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:25.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139393866323861326361623463303037343636313936616266373965 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { bpf } for pid=2768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { bpf } for pid=2768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { perfmon } for pid=2768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { perfmon } for pid=2768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { perfmon } for pid=2768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { perfmon } for pid=2768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { perfmon } for pid=2768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { bpf } for pid=2768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { bpf } for pid=2768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit: BPF prog-id=134 op=LOAD Sep 10 01:11:25.576000 audit[2768]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c0001c5e28 items=0 ppid=2573 pid=2768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:25.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139393866323861326361623463303037343636313936616266373965 Sep 10 01:11:25.576000 audit: BPF prog-id=134 op=UNLOAD Sep 10 01:11:25.576000 audit: BPF prog-id=133 op=UNLOAD Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { bpf } for pid=2768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { bpf } for pid=2768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { bpf } for pid=2768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { perfmon } for pid=2768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { perfmon } for pid=2768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { perfmon } for pid=2768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { perfmon } for pid=2768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { perfmon } for pid=2768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { bpf } for pid=2768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit[2768]: AVC avc: denied { bpf } for pid=2768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:25.576000 audit: BPF prog-id=135 op=LOAD Sep 10 01:11:25.576000 audit[2768]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c0001c5eb8 items=0 ppid=2573 pid=2768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:25.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139393866323861326361623463303037343636313936616266373965 Sep 10 01:11:25.596567 systemd[1]: cri-containerd-1998f28a2cab4c007466196abf79e98254b23b693d75d0b23fd4396f57ed12db.scope: Deactivated successfully. Sep 10 01:11:25.597663 env[1267]: time="2025-09-10T01:11:25.597231801Z" level=info msg="StartContainer for \"1998f28a2cab4c007466196abf79e98254b23b693d75d0b23fd4396f57ed12db\" returns successfully" Sep 10 01:11:25.598000 audit: BPF prog-id=135 op=UNLOAD Sep 10 01:11:25.610824 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1998f28a2cab4c007466196abf79e98254b23b693d75d0b23fd4396f57ed12db-rootfs.mount: Deactivated successfully. Sep 10 01:11:25.736972 env[1267]: time="2025-09-10T01:11:25.736930112Z" level=info msg="shim disconnected" id=1998f28a2cab4c007466196abf79e98254b23b693d75d0b23fd4396f57ed12db Sep 10 01:11:25.737178 env[1267]: time="2025-09-10T01:11:25.737161720Z" level=warning msg="cleaning up after shim disconnected" id=1998f28a2cab4c007466196abf79e98254b23b693d75d0b23fd4396f57ed12db namespace=k8s.io Sep 10 01:11:25.737259 env[1267]: time="2025-09-10T01:11:25.737245649Z" level=info msg="cleaning up dead shim" Sep 10 01:11:25.749581 kubelet[2111]: I0910 01:11:25.746840 2111 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-6c8dc6d4c9-rjd64" podStartSLOduration=3.801625108 podStartE2EDuration="6.69694814s" podCreationTimestamp="2025-09-10 01:11:19 +0000 UTC" firstStartedPulling="2025-09-10 01:11:20.396452773 +0000 UTC m=+16.042034190" lastFinishedPulling="2025-09-10 01:11:23.291775806 +0000 UTC m=+18.937357222" observedRunningTime="2025-09-10 01:11:23.730111218 +0000 UTC m=+19.375692654" watchObservedRunningTime="2025-09-10 01:11:25.69694814 +0000 UTC m=+21.342529566" Sep 10 01:11:25.750698 env[1267]: time="2025-09-10T01:11:25.749720482Z" level=warning msg="cleanup warnings time=\"2025-09-10T01:11:25Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2810 runtime=io.containerd.runc.v2\n" Sep 10 01:11:26.330023 kubelet[2111]: I0910 01:11:26.329990 2111 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 10 01:11:26.369000 audit[2823]: NETFILTER_CFG table=filter:97 family=2 entries=21 op=nft_register_rule pid=2823 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:26.369000 audit[2823]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd6d13d1e0 a2=0 a3=7ffd6d13d1cc items=0 ppid=2249 pid=2823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:26.369000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:26.377000 audit[2823]: NETFILTER_CFG table=nat:98 family=2 entries=19 op=nft_register_chain pid=2823 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:26.377000 audit[2823]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffd6d13d1e0 a2=0 a3=7ffd6d13d1cc items=0 ppid=2249 pid=2823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:26.377000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:26.563600 kubelet[2111]: E0910 01:11:26.563574 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-588jm" podUID="433ded13-351c-45da-a35c-464e9f991379" Sep 10 01:11:26.656357 env[1267]: time="2025-09-10T01:11:26.655853211Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\"" Sep 10 01:11:28.564342 kubelet[2111]: E0910 01:11:28.564280 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-588jm" podUID="433ded13-351c-45da-a35c-464e9f991379" Sep 10 01:11:30.564792 kubelet[2111]: E0910 01:11:30.564763 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-588jm" podUID="433ded13-351c-45da-a35c-464e9f991379" Sep 10 01:11:31.282451 env[1267]: time="2025-09-10T01:11:31.282410499Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:31.304799 env[1267]: time="2025-09-10T01:11:31.304777981Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:034822460c2f667e1f4a7679c843cc35ce1bf2c25dec86f04e07fb403df7e458,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:31.315234 env[1267]: time="2025-09-10T01:11:31.315209618Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:31.321674 env[1267]: time="2025-09-10T01:11:31.321649395Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:73d1e391050490d54e5bee8ff2b1a50a8be1746c98dc530361b00e8c0ab63f87,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:31.322170 env[1267]: time="2025-09-10T01:11:31.322148723Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\" returns image reference \"sha256:034822460c2f667e1f4a7679c843cc35ce1bf2c25dec86f04e07fb403df7e458\"" Sep 10 01:11:31.370645 env[1267]: time="2025-09-10T01:11:31.370615465Z" level=info msg="CreateContainer within sandbox \"0dc67000b96b0d120770e248353574abf3e7b83182d6ab49857cb237f494a092\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Sep 10 01:11:31.394476 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount188997879.mount: Deactivated successfully. Sep 10 01:11:31.410009 env[1267]: time="2025-09-10T01:11:31.409983145Z" level=info msg="CreateContainer within sandbox \"0dc67000b96b0d120770e248353574abf3e7b83182d6ab49857cb237f494a092\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"8b4ec8258ffc7cb7e5c7101ded517bea1a549b75bd8b08b1682290fe6de69ac7\"" Sep 10 01:11:31.410456 env[1267]: time="2025-09-10T01:11:31.410440938Z" level=info msg="StartContainer for \"8b4ec8258ffc7cb7e5c7101ded517bea1a549b75bd8b08b1682290fe6de69ac7\"" Sep 10 01:11:31.427134 systemd[1]: Started cri-containerd-8b4ec8258ffc7cb7e5c7101ded517bea1a549b75bd8b08b1682290fe6de69ac7.scope. Sep 10 01:11:31.430364 systemd[1]: run-containerd-runc-k8s.io-8b4ec8258ffc7cb7e5c7101ded517bea1a549b75bd8b08b1682290fe6de69ac7-runc.rzbh57.mount: Deactivated successfully. Sep 10 01:11:31.448000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.453630 kernel: kauditd_printk_skb: 97 callbacks suppressed Sep 10 01:11:31.453685 kernel: audit: type=1400 audit(1757466691.448:1012): avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.448000 audit[2835]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fb087690508 items=0 ppid=2573 pid=2835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:31.457901 kernel: audit: type=1300 audit(1757466691.448:1012): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fb087690508 items=0 ppid=2573 pid=2835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:31.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862346563383235386666633763623765356337313031646564353137 Sep 10 01:11:31.463238 kernel: audit: type=1327 audit(1757466691.448:1012): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862346563383235386666633763623765356337313031646564353137 Sep 10 01:11:31.463270 kernel: audit: type=1400 audit(1757466691.448:1013): avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.448000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.448000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.448000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.471904 kernel: audit: type=1400 audit(1757466691.448:1013): avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.471935 kernel: audit: type=1400 audit(1757466691.448:1013): avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.448000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.448000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.477562 kernel: audit: type=1400 audit(1757466691.448:1013): avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.477604 kernel: audit: type=1400 audit(1757466691.448:1013): avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.477636 kernel: audit: type=1400 audit(1757466691.448:1013): avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.448000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.484004 kernel: audit: type=1400 audit(1757466691.448:1013): avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.448000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.448000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.448000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.448000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.448000 audit: BPF prog-id=136 op=LOAD Sep 10 01:11:31.448000 audit[2835]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000f7f58 items=0 ppid=2573 pid=2835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:31.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862346563383235386666633763623765356337313031646564353137 Sep 10 01:11:31.452000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.452000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.452000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.452000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.452000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.452000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.452000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.452000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.452000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.452000 audit: BPF prog-id=137 op=LOAD Sep 10 01:11:31.452000 audit[2835]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000f7fa8 items=0 ppid=2573 pid=2835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:31.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862346563383235386666633763623765356337313031646564353137 Sep 10 01:11:31.452000 audit: BPF prog-id=137 op=UNLOAD Sep 10 01:11:31.452000 audit: BPF prog-id=136 op=UNLOAD Sep 10 01:11:31.452000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.452000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.452000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.452000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.452000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.452000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.452000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.452000 audit[2835]: AVC avc: denied { perfmon } for pid=2835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.452000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.452000 audit[2835]: AVC avc: denied { bpf } for pid=2835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:31.452000 audit: BPF prog-id=138 op=LOAD Sep 10 01:11:31.452000 audit[2835]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003e8038 items=0 ppid=2573 pid=2835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:31.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862346563383235386666633763623765356337313031646564353137 Sep 10 01:11:31.545524 env[1267]: time="2025-09-10T01:11:31.545449240Z" level=info msg="StartContainer for \"8b4ec8258ffc7cb7e5c7101ded517bea1a549b75bd8b08b1682290fe6de69ac7\" returns successfully" Sep 10 01:11:32.565116 kubelet[2111]: E0910 01:11:32.565090 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-588jm" podUID="433ded13-351c-45da-a35c-464e9f991379" Sep 10 01:11:33.170819 env[1267]: time="2025-09-10T01:11:33.170742179Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 10 01:11:33.172410 systemd[1]: cri-containerd-8b4ec8258ffc7cb7e5c7101ded517bea1a549b75bd8b08b1682290fe6de69ac7.scope: Deactivated successfully. Sep 10 01:11:33.175000 audit: BPF prog-id=138 op=UNLOAD Sep 10 01:11:33.186933 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8b4ec8258ffc7cb7e5c7101ded517bea1a549b75bd8b08b1682290fe6de69ac7-rootfs.mount: Deactivated successfully. Sep 10 01:11:33.218635 kubelet[2111]: I0910 01:11:33.218609 2111 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Sep 10 01:11:33.324127 env[1267]: time="2025-09-10T01:11:33.324090964Z" level=info msg="shim disconnected" id=8b4ec8258ffc7cb7e5c7101ded517bea1a549b75bd8b08b1682290fe6de69ac7 Sep 10 01:11:33.324307 env[1267]: time="2025-09-10T01:11:33.324290901Z" level=warning msg="cleaning up after shim disconnected" id=8b4ec8258ffc7cb7e5c7101ded517bea1a549b75bd8b08b1682290fe6de69ac7 namespace=k8s.io Sep 10 01:11:33.324450 env[1267]: time="2025-09-10T01:11:33.324436184Z" level=info msg="cleaning up dead shim" Sep 10 01:11:33.331279 env[1267]: time="2025-09-10T01:11:33.331258751Z" level=warning msg="cleanup warnings time=\"2025-09-10T01:11:33Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2877 runtime=io.containerd.runc.v2\n" Sep 10 01:11:33.443723 systemd[1]: Created slice kubepods-burstable-pod5fd61191_5eac_4e78_9235_5003726f6150.slice. Sep 10 01:11:33.457201 systemd[1]: Created slice kubepods-burstable-pod9bad00c4_3e3e_4827_9970_a77e3259bf14.slice. Sep 10 01:11:33.462471 systemd[1]: Created slice kubepods-besteffort-pod0d86b565_8184_416c_b12b_737eb73d2b94.slice. Sep 10 01:11:33.468513 systemd[1]: Created slice kubepods-besteffort-pod373a83e4_9cfa_498c_a1d2_cf000ad59143.slice. Sep 10 01:11:33.472272 systemd[1]: Created slice kubepods-besteffort-poda8ed0f6a_7272_404d_b5b2_53b42e84380c.slice. Sep 10 01:11:33.495055 systemd[1]: Created slice kubepods-besteffort-podd71d6edf_1c94_4b55_bcb5_1de17de53829.slice. Sep 10 01:11:33.501001 systemd[1]: Created slice kubepods-besteffort-poda03727ef_5eb3_4502_ae0d_e1b45ce2893c.slice. Sep 10 01:11:33.504542 systemd[1]: Created slice kubepods-besteffort-pod4740b723_6bb8_4cda_a3af_27027890eb9b.slice. Sep 10 01:11:33.508940 kubelet[2111]: I0910 01:11:33.508914 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/9bad00c4-3e3e-4827-9970-a77e3259bf14-config-volume\") pod \"coredns-674b8bbfcf-sntmg\" (UID: \"9bad00c4-3e3e-4827-9970-a77e3259bf14\") " pod="kube-system/coredns-674b8bbfcf-sntmg" Sep 10 01:11:33.509056 kubelet[2111]: I0910 01:11:33.508944 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0d86b565-8184-416c-b12b-737eb73d2b94-tigera-ca-bundle\") pod \"calico-kube-controllers-67bb596d88-mtqfq\" (UID: \"0d86b565-8184-416c-b12b-737eb73d2b94\") " pod="calico-system/calico-kube-controllers-67bb596d88-mtqfq" Sep 10 01:11:33.509056 kubelet[2111]: I0910 01:11:33.508957 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wbdst\" (UniqueName: \"kubernetes.io/projected/0d86b565-8184-416c-b12b-737eb73d2b94-kube-api-access-wbdst\") pod \"calico-kube-controllers-67bb596d88-mtqfq\" (UID: \"0d86b565-8184-416c-b12b-737eb73d2b94\") " pod="calico-system/calico-kube-controllers-67bb596d88-mtqfq" Sep 10 01:11:33.509056 kubelet[2111]: I0910 01:11:33.508971 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gtj6q\" (UniqueName: \"kubernetes.io/projected/a8ed0f6a-7272-404d-b5b2-53b42e84380c-kube-api-access-gtj6q\") pod \"calico-apiserver-65f67d55cc-tx6qp\" (UID: \"a8ed0f6a-7272-404d-b5b2-53b42e84380c\") " pod="calico-apiserver/calico-apiserver-65f67d55cc-tx6qp" Sep 10 01:11:33.509056 kubelet[2111]: I0910 01:11:33.508983 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sdzd4\" (UniqueName: \"kubernetes.io/projected/d71d6edf-1c94-4b55-bcb5-1de17de53829-kube-api-access-sdzd4\") pod \"calico-apiserver-64564cc5c9-lj22c\" (UID: \"d71d6edf-1c94-4b55-bcb5-1de17de53829\") " pod="calico-apiserver/calico-apiserver-64564cc5c9-lj22c" Sep 10 01:11:33.509056 kubelet[2111]: I0910 01:11:33.508993 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/373a83e4-9cfa-498c-a1d2-cf000ad59143-calico-apiserver-certs\") pod \"calico-apiserver-64564cc5c9-z6hvk\" (UID: \"373a83e4-9cfa-498c-a1d2-cf000ad59143\") " pod="calico-apiserver/calico-apiserver-64564cc5c9-z6hvk" Sep 10 01:11:33.509169 kubelet[2111]: I0910 01:11:33.509003 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fvdn9\" (UniqueName: \"kubernetes.io/projected/373a83e4-9cfa-498c-a1d2-cf000ad59143-kube-api-access-fvdn9\") pod \"calico-apiserver-64564cc5c9-z6hvk\" (UID: \"373a83e4-9cfa-498c-a1d2-cf000ad59143\") " pod="calico-apiserver/calico-apiserver-64564cc5c9-z6hvk" Sep 10 01:11:33.509169 kubelet[2111]: I0910 01:11:33.509025 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4nzkf\" (UniqueName: \"kubernetes.io/projected/5fd61191-5eac-4e78-9235-5003726f6150-kube-api-access-4nzkf\") pod \"coredns-674b8bbfcf-xz6mb\" (UID: \"5fd61191-5eac-4e78-9235-5003726f6150\") " pod="kube-system/coredns-674b8bbfcf-xz6mb" Sep 10 01:11:33.509169 kubelet[2111]: I0910 01:11:33.509048 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/a8ed0f6a-7272-404d-b5b2-53b42e84380c-calico-apiserver-certs\") pod \"calico-apiserver-65f67d55cc-tx6qp\" (UID: \"a8ed0f6a-7272-404d-b5b2-53b42e84380c\") " pod="calico-apiserver/calico-apiserver-65f67d55cc-tx6qp" Sep 10 01:11:33.509169 kubelet[2111]: I0910 01:11:33.509066 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/d71d6edf-1c94-4b55-bcb5-1de17de53829-calico-apiserver-certs\") pod \"calico-apiserver-64564cc5c9-lj22c\" (UID: \"d71d6edf-1c94-4b55-bcb5-1de17de53829\") " pod="calico-apiserver/calico-apiserver-64564cc5c9-lj22c" Sep 10 01:11:33.509169 kubelet[2111]: I0910 01:11:33.509079 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/5fd61191-5eac-4e78-9235-5003726f6150-config-volume\") pod \"coredns-674b8bbfcf-xz6mb\" (UID: \"5fd61191-5eac-4e78-9235-5003726f6150\") " pod="kube-system/coredns-674b8bbfcf-xz6mb" Sep 10 01:11:33.509280 kubelet[2111]: I0910 01:11:33.509089 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4kp9f\" (UniqueName: \"kubernetes.io/projected/9bad00c4-3e3e-4827-9970-a77e3259bf14-kube-api-access-4kp9f\") pod \"coredns-674b8bbfcf-sntmg\" (UID: \"9bad00c4-3e3e-4827-9970-a77e3259bf14\") " pod="kube-system/coredns-674b8bbfcf-sntmg" Sep 10 01:11:33.609641 kubelet[2111]: I0910 01:11:33.609618 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-m9zz5\" (UniqueName: \"kubernetes.io/projected/4740b723-6bb8-4cda-a3af-27027890eb9b-kube-api-access-m9zz5\") pod \"whisker-5d75945987-7blxq\" (UID: \"4740b723-6bb8-4cda-a3af-27027890eb9b\") " pod="calico-system/whisker-5d75945987-7blxq" Sep 10 01:11:33.610184 kubelet[2111]: I0910 01:11:33.610171 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-s9js6\" (UniqueName: \"kubernetes.io/projected/a03727ef-5eb3-4502-ae0d-e1b45ce2893c-kube-api-access-s9js6\") pod \"goldmane-54d579b49d-ndnrv\" (UID: \"a03727ef-5eb3-4502-ae0d-e1b45ce2893c\") " pod="calico-system/goldmane-54d579b49d-ndnrv" Sep 10 01:11:33.610283 kubelet[2111]: I0910 01:11:33.610271 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/4740b723-6bb8-4cda-a3af-27027890eb9b-whisker-backend-key-pair\") pod \"whisker-5d75945987-7blxq\" (UID: \"4740b723-6bb8-4cda-a3af-27027890eb9b\") " pod="calico-system/whisker-5d75945987-7blxq" Sep 10 01:11:33.610413 kubelet[2111]: I0910 01:11:33.610401 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/4740b723-6bb8-4cda-a3af-27027890eb9b-whisker-ca-bundle\") pod \"whisker-5d75945987-7blxq\" (UID: \"4740b723-6bb8-4cda-a3af-27027890eb9b\") " pod="calico-system/whisker-5d75945987-7blxq" Sep 10 01:11:33.610484 kubelet[2111]: I0910 01:11:33.610472 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/a03727ef-5eb3-4502-ae0d-e1b45ce2893c-config\") pod \"goldmane-54d579b49d-ndnrv\" (UID: \"a03727ef-5eb3-4502-ae0d-e1b45ce2893c\") " pod="calico-system/goldmane-54d579b49d-ndnrv" Sep 10 01:11:33.617288 kubelet[2111]: I0910 01:11:33.611332 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a03727ef-5eb3-4502-ae0d-e1b45ce2893c-goldmane-ca-bundle\") pod \"goldmane-54d579b49d-ndnrv\" (UID: \"a03727ef-5eb3-4502-ae0d-e1b45ce2893c\") " pod="calico-system/goldmane-54d579b49d-ndnrv" Sep 10 01:11:33.617288 kubelet[2111]: I0910 01:11:33.611350 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/a03727ef-5eb3-4502-ae0d-e1b45ce2893c-goldmane-key-pair\") pod \"goldmane-54d579b49d-ndnrv\" (UID: \"a03727ef-5eb3-4502-ae0d-e1b45ce2893c\") " pod="calico-system/goldmane-54d579b49d-ndnrv" Sep 10 01:11:33.665153 env[1267]: time="2025-09-10T01:11:33.664984344Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\"" Sep 10 01:11:33.748631 env[1267]: time="2025-09-10T01:11:33.747949593Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-xz6mb,Uid:5fd61191-5eac-4e78-9235-5003726f6150,Namespace:kube-system,Attempt:0,}" Sep 10 01:11:33.759384 env[1267]: time="2025-09-10T01:11:33.759359199Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-sntmg,Uid:9bad00c4-3e3e-4827-9970-a77e3259bf14,Namespace:kube-system,Attempt:0,}" Sep 10 01:11:33.766910 env[1267]: time="2025-09-10T01:11:33.766890033Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-67bb596d88-mtqfq,Uid:0d86b565-8184-416c-b12b-737eb73d2b94,Namespace:calico-system,Attempt:0,}" Sep 10 01:11:33.770260 env[1267]: time="2025-09-10T01:11:33.770246403Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64564cc5c9-z6hvk,Uid:373a83e4-9cfa-498c-a1d2-cf000ad59143,Namespace:calico-apiserver,Attempt:0,}" Sep 10 01:11:33.792602 env[1267]: time="2025-09-10T01:11:33.792572615Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-65f67d55cc-tx6qp,Uid:a8ed0f6a-7272-404d-b5b2-53b42e84380c,Namespace:calico-apiserver,Attempt:0,}" Sep 10 01:11:33.800258 env[1267]: time="2025-09-10T01:11:33.800218411Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64564cc5c9-lj22c,Uid:d71d6edf-1c94-4b55-bcb5-1de17de53829,Namespace:calico-apiserver,Attempt:0,}" Sep 10 01:11:33.807213 env[1267]: time="2025-09-10T01:11:33.807077110Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-ndnrv,Uid:a03727ef-5eb3-4502-ae0d-e1b45ce2893c,Namespace:calico-system,Attempt:0,}" Sep 10 01:11:34.107348 env[1267]: time="2025-09-10T01:11:34.107262440Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5d75945987-7blxq,Uid:4740b723-6bb8-4cda-a3af-27027890eb9b,Namespace:calico-system,Attempt:0,}" Sep 10 01:11:34.565198 env[1267]: time="2025-09-10T01:11:34.565136709Z" level=error msg="Failed to destroy network for sandbox \"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.567617 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146-shm.mount: Deactivated successfully. Sep 10 01:11:34.570383 systemd[1]: Created slice kubepods-besteffort-pod433ded13_351c_45da_a35c_464e9f991379.slice. Sep 10 01:11:34.570577 env[1267]: time="2025-09-10T01:11:34.570515074Z" level=error msg="encountered an error cleaning up failed sandbox \"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.570577 env[1267]: time="2025-09-10T01:11:34.570556371Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64564cc5c9-lj22c,Uid:d71d6edf-1c94-4b55-bcb5-1de17de53829,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.576914 kubelet[2111]: E0910 01:11:34.576856 2111 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.578829 env[1267]: time="2025-09-10T01:11:34.578797771Z" level=error msg="Failed to destroy network for sandbox \"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.581627 env[1267]: time="2025-09-10T01:11:34.580448602Z" level=error msg="encountered an error cleaning up failed sandbox \"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.581627 env[1267]: time="2025-09-10T01:11:34.580488928Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-ndnrv,Uid:a03727ef-5eb3-4502-ae0d-e1b45ce2893c,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.580306 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5-shm.mount: Deactivated successfully. Sep 10 01:11:34.583919 kubelet[2111]: E0910 01:11:34.583581 2111 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.583919 kubelet[2111]: E0910 01:11:34.583632 2111 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-ndnrv" Sep 10 01:11:34.583919 kubelet[2111]: E0910 01:11:34.583647 2111 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-ndnrv" Sep 10 01:11:34.584927 kubelet[2111]: E0910 01:11:34.583693 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-54d579b49d-ndnrv_calico-system(a03727ef-5eb3-4502-ae0d-e1b45ce2893c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-54d579b49d-ndnrv_calico-system(a03727ef-5eb3-4502-ae0d-e1b45ce2893c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-ndnrv" podUID="a03727ef-5eb3-4502-ae0d-e1b45ce2893c" Sep 10 01:11:34.586723 kubelet[2111]: E0910 01:11:34.585523 2111 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-64564cc5c9-lj22c" Sep 10 01:11:34.586723 kubelet[2111]: E0910 01:11:34.585548 2111 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-64564cc5c9-lj22c" Sep 10 01:11:34.586723 kubelet[2111]: E0910 01:11:34.585604 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-64564cc5c9-lj22c_calico-apiserver(d71d6edf-1c94-4b55-bcb5-1de17de53829)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-64564cc5c9-lj22c_calico-apiserver(d71d6edf-1c94-4b55-bcb5-1de17de53829)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-64564cc5c9-lj22c" podUID="d71d6edf-1c94-4b55-bcb5-1de17de53829" Sep 10 01:11:34.588121 env[1267]: time="2025-09-10T01:11:34.588031556Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-588jm,Uid:433ded13-351c-45da-a35c-464e9f991379,Namespace:calico-system,Attempt:0,}" Sep 10 01:11:34.597850 env[1267]: time="2025-09-10T01:11:34.597811156Z" level=error msg="Failed to destroy network for sandbox \"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.598141 env[1267]: time="2025-09-10T01:11:34.598111402Z" level=error msg="encountered an error cleaning up failed sandbox \"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.598180 env[1267]: time="2025-09-10T01:11:34.598147018Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-67bb596d88-mtqfq,Uid:0d86b565-8184-416c-b12b-737eb73d2b94,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.598279 kubelet[2111]: E0910 01:11:34.598254 2111 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.598345 kubelet[2111]: E0910 01:11:34.598289 2111 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-67bb596d88-mtqfq" Sep 10 01:11:34.598345 kubelet[2111]: E0910 01:11:34.598305 2111 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-67bb596d88-mtqfq" Sep 10 01:11:34.598439 kubelet[2111]: E0910 01:11:34.598376 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-67bb596d88-mtqfq_calico-system(0d86b565-8184-416c-b12b-737eb73d2b94)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-67bb596d88-mtqfq_calico-system(0d86b565-8184-416c-b12b-737eb73d2b94)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-67bb596d88-mtqfq" podUID="0d86b565-8184-416c-b12b-737eb73d2b94" Sep 10 01:11:34.624619 env[1267]: time="2025-09-10T01:11:34.624572282Z" level=error msg="Failed to destroy network for sandbox \"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.624885 env[1267]: time="2025-09-10T01:11:34.624862538Z" level=error msg="encountered an error cleaning up failed sandbox \"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.624933 env[1267]: time="2025-09-10T01:11:34.624899475Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-xz6mb,Uid:5fd61191-5eac-4e78-9235-5003726f6150,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.625871 kubelet[2111]: E0910 01:11:34.625047 2111 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.625871 kubelet[2111]: E0910 01:11:34.625100 2111 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-xz6mb" Sep 10 01:11:34.625871 kubelet[2111]: E0910 01:11:34.625122 2111 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-xz6mb" Sep 10 01:11:34.626199 kubelet[2111]: E0910 01:11:34.625168 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-xz6mb_kube-system(5fd61191-5eac-4e78-9235-5003726f6150)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-xz6mb_kube-system(5fd61191-5eac-4e78-9235-5003726f6150)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-xz6mb" podUID="5fd61191-5eac-4e78-9235-5003726f6150" Sep 10 01:11:34.645409 env[1267]: time="2025-09-10T01:11:34.645373667Z" level=error msg="Failed to destroy network for sandbox \"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.645798 env[1267]: time="2025-09-10T01:11:34.645773828Z" level=error msg="encountered an error cleaning up failed sandbox \"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.645902 env[1267]: time="2025-09-10T01:11:34.645880795Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-65f67d55cc-tx6qp,Uid:a8ed0f6a-7272-404d-b5b2-53b42e84380c,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.648778 kubelet[2111]: E0910 01:11:34.646136 2111 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.648778 kubelet[2111]: E0910 01:11:34.646175 2111 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-65f67d55cc-tx6qp" Sep 10 01:11:34.648778 kubelet[2111]: E0910 01:11:34.646193 2111 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-65f67d55cc-tx6qp" Sep 10 01:11:34.648902 kubelet[2111]: E0910 01:11:34.646257 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-65f67d55cc-tx6qp_calico-apiserver(a8ed0f6a-7272-404d-b5b2-53b42e84380c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-65f67d55cc-tx6qp_calico-apiserver(a8ed0f6a-7272-404d-b5b2-53b42e84380c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-65f67d55cc-tx6qp" podUID="a8ed0f6a-7272-404d-b5b2-53b42e84380c" Sep 10 01:11:34.654086 env[1267]: time="2025-09-10T01:11:34.654030299Z" level=error msg="Failed to destroy network for sandbox \"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.654720 env[1267]: time="2025-09-10T01:11:34.654684379Z" level=error msg="encountered an error cleaning up failed sandbox \"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.654828 env[1267]: time="2025-09-10T01:11:34.654811290Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5d75945987-7blxq,Uid:4740b723-6bb8-4cda-a3af-27027890eb9b,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.655187 kubelet[2111]: E0910 01:11:34.655023 2111 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.655187 kubelet[2111]: E0910 01:11:34.655078 2111 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-5d75945987-7blxq" Sep 10 01:11:34.655187 kubelet[2111]: E0910 01:11:34.655100 2111 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-5d75945987-7blxq" Sep 10 01:11:34.655434 kubelet[2111]: E0910 01:11:34.655162 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-5d75945987-7blxq_calico-system(4740b723-6bb8-4cda-a3af-27027890eb9b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-5d75945987-7blxq_calico-system(4740b723-6bb8-4cda-a3af-27027890eb9b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-5d75945987-7blxq" podUID="4740b723-6bb8-4cda-a3af-27027890eb9b" Sep 10 01:11:34.659870 env[1267]: time="2025-09-10T01:11:34.659838043Z" level=error msg="Failed to destroy network for sandbox \"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.660198 env[1267]: time="2025-09-10T01:11:34.660180660Z" level=error msg="encountered an error cleaning up failed sandbox \"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.660296 env[1267]: time="2025-09-10T01:11:34.660274079Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64564cc5c9-z6hvk,Uid:373a83e4-9cfa-498c-a1d2-cf000ad59143,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.661568 kubelet[2111]: E0910 01:11:34.660490 2111 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.661568 kubelet[2111]: E0910 01:11:34.660523 2111 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-64564cc5c9-z6hvk" Sep 10 01:11:34.661568 kubelet[2111]: E0910 01:11:34.660549 2111 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-64564cc5c9-z6hvk" Sep 10 01:11:34.661746 kubelet[2111]: E0910 01:11:34.660585 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-64564cc5c9-z6hvk_calico-apiserver(373a83e4-9cfa-498c-a1d2-cf000ad59143)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-64564cc5c9-z6hvk_calico-apiserver(373a83e4-9cfa-498c-a1d2-cf000ad59143)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-64564cc5c9-z6hvk" podUID="373a83e4-9cfa-498c-a1d2-cf000ad59143" Sep 10 01:11:34.666161 kubelet[2111]: I0910 01:11:34.665855 2111 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Sep 10 01:11:34.666962 env[1267]: time="2025-09-10T01:11:34.666375170Z" level=info msg="StopPodSandbox for \"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\"" Sep 10 01:11:34.667688 kubelet[2111]: I0910 01:11:34.667505 2111 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Sep 10 01:11:34.667812 env[1267]: time="2025-09-10T01:11:34.667793555Z" level=info msg="StopPodSandbox for \"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\"" Sep 10 01:11:34.670432 env[1267]: time="2025-09-10T01:11:34.668628112Z" level=info msg="StopPodSandbox for \"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\"" Sep 10 01:11:34.670432 env[1267]: time="2025-09-10T01:11:34.669457608Z" level=info msg="StopPodSandbox for \"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\"" Sep 10 01:11:34.670432 env[1267]: time="2025-09-10T01:11:34.670049244Z" level=info msg="StopPodSandbox for \"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\"" Sep 10 01:11:34.670571 kubelet[2111]: I0910 01:11:34.668387 2111 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Sep 10 01:11:34.670571 kubelet[2111]: I0910 01:11:34.669159 2111 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Sep 10 01:11:34.670571 kubelet[2111]: I0910 01:11:34.669800 2111 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Sep 10 01:11:34.671226 kubelet[2111]: I0910 01:11:34.671213 2111 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Sep 10 01:11:34.671496 env[1267]: time="2025-09-10T01:11:34.671484425Z" level=info msg="StopPodSandbox for \"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\"" Sep 10 01:11:34.672358 kubelet[2111]: I0910 01:11:34.672106 2111 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Sep 10 01:11:34.672471 env[1267]: time="2025-09-10T01:11:34.672459670Z" level=info msg="StopPodSandbox for \"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\"" Sep 10 01:11:34.677753 env[1267]: time="2025-09-10T01:11:34.677724371Z" level=error msg="Failed to destroy network for sandbox \"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.678086 env[1267]: time="2025-09-10T01:11:34.678063069Z" level=error msg="encountered an error cleaning up failed sandbox \"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.678126 env[1267]: time="2025-09-10T01:11:34.678096006Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-sntmg,Uid:9bad00c4-3e3e-4827-9970-a77e3259bf14,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.678312 kubelet[2111]: E0910 01:11:34.678210 2111 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.678312 kubelet[2111]: E0910 01:11:34.678241 2111 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-sntmg" Sep 10 01:11:34.678312 kubelet[2111]: E0910 01:11:34.678254 2111 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-sntmg" Sep 10 01:11:34.678413 kubelet[2111]: E0910 01:11:34.678286 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-sntmg_kube-system(9bad00c4-3e3e-4827-9970-a77e3259bf14)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-sntmg_kube-system(9bad00c4-3e3e-4827-9970-a77e3259bf14)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-sntmg" podUID="9bad00c4-3e3e-4827-9970-a77e3259bf14" Sep 10 01:11:34.691522 env[1267]: time="2025-09-10T01:11:34.691485285Z" level=error msg="Failed to destroy network for sandbox \"56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.691721 env[1267]: time="2025-09-10T01:11:34.691700471Z" level=error msg="encountered an error cleaning up failed sandbox \"56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.691757 env[1267]: time="2025-09-10T01:11:34.691731689Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-588jm,Uid:433ded13-351c-45da-a35c-464e9f991379,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.691896 kubelet[2111]: E0910 01:11:34.691871 2111 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.691943 kubelet[2111]: E0910 01:11:34.691918 2111 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-588jm" Sep 10 01:11:34.691943 kubelet[2111]: E0910 01:11:34.691933 2111 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-588jm" Sep 10 01:11:34.697359 kubelet[2111]: E0910 01:11:34.691985 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-588jm_calico-system(433ded13-351c-45da-a35c-464e9f991379)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-588jm_calico-system(433ded13-351c-45da-a35c-464e9f991379)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-588jm" podUID="433ded13-351c-45da-a35c-464e9f991379" Sep 10 01:11:34.707757 env[1267]: time="2025-09-10T01:11:34.707724352Z" level=error msg="StopPodSandbox for \"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\" failed" error="failed to destroy network for sandbox \"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.708155 kubelet[2111]: E0910 01:11:34.707995 2111 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Sep 10 01:11:34.708155 kubelet[2111]: E0910 01:11:34.708054 2111 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662"} Sep 10 01:11:34.708155 kubelet[2111]: E0910 01:11:34.708114 2111 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"373a83e4-9cfa-498c-a1d2-cf000ad59143\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 01:11:34.708155 kubelet[2111]: E0910 01:11:34.708132 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"373a83e4-9cfa-498c-a1d2-cf000ad59143\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-64564cc5c9-z6hvk" podUID="373a83e4-9cfa-498c-a1d2-cf000ad59143" Sep 10 01:11:34.735448 env[1267]: time="2025-09-10T01:11:34.735414763Z" level=error msg="StopPodSandbox for \"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\" failed" error="failed to destroy network for sandbox \"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.750844 kubelet[2111]: E0910 01:11:34.750817 2111 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Sep 10 01:11:34.750982 kubelet[2111]: E0910 01:11:34.750969 2111 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d"} Sep 10 01:11:34.751050 kubelet[2111]: E0910 01:11:34.751040 2111 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"0d86b565-8184-416c-b12b-737eb73d2b94\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 01:11:34.751139 kubelet[2111]: E0910 01:11:34.751125 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"0d86b565-8184-416c-b12b-737eb73d2b94\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-67bb596d88-mtqfq" podUID="0d86b565-8184-416c-b12b-737eb73d2b94" Sep 10 01:11:34.751642 env[1267]: time="2025-09-10T01:11:34.751599591Z" level=error msg="StopPodSandbox for \"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\" failed" error="failed to destroy network for sandbox \"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.751783 kubelet[2111]: E0910 01:11:34.751766 2111 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Sep 10 01:11:34.751843 kubelet[2111]: E0910 01:11:34.751833 2111 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e"} Sep 10 01:11:34.751909 kubelet[2111]: E0910 01:11:34.751895 2111 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5fd61191-5eac-4e78-9235-5003726f6150\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 01:11:34.751989 kubelet[2111]: E0910 01:11:34.751972 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5fd61191-5eac-4e78-9235-5003726f6150\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-xz6mb" podUID="5fd61191-5eac-4e78-9235-5003726f6150" Sep 10 01:11:34.765247 env[1267]: time="2025-09-10T01:11:34.765214392Z" level=error msg="StopPodSandbox for \"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\" failed" error="failed to destroy network for sandbox \"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.765550 kubelet[2111]: E0910 01:11:34.765453 2111 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Sep 10 01:11:34.765550 kubelet[2111]: E0910 01:11:34.765487 2111 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146"} Sep 10 01:11:34.765550 kubelet[2111]: E0910 01:11:34.765509 2111 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d71d6edf-1c94-4b55-bcb5-1de17de53829\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 01:11:34.765550 kubelet[2111]: E0910 01:11:34.765525 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d71d6edf-1c94-4b55-bcb5-1de17de53829\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-64564cc5c9-lj22c" podUID="d71d6edf-1c94-4b55-bcb5-1de17de53829" Sep 10 01:11:34.765777 env[1267]: time="2025-09-10T01:11:34.765758329Z" level=error msg="StopPodSandbox for \"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\" failed" error="failed to destroy network for sandbox \"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.765946 kubelet[2111]: E0910 01:11:34.765889 2111 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Sep 10 01:11:34.765946 kubelet[2111]: E0910 01:11:34.765909 2111 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb"} Sep 10 01:11:34.765946 kubelet[2111]: E0910 01:11:34.765922 2111 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4740b723-6bb8-4cda-a3af-27027890eb9b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 01:11:34.765946 kubelet[2111]: E0910 01:11:34.765933 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4740b723-6bb8-4cda-a3af-27027890eb9b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-5d75945987-7blxq" podUID="4740b723-6bb8-4cda-a3af-27027890eb9b" Sep 10 01:11:34.766959 env[1267]: time="2025-09-10T01:11:34.766926090Z" level=error msg="StopPodSandbox for \"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\" failed" error="failed to destroy network for sandbox \"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.767094 kubelet[2111]: E0910 01:11:34.767039 2111 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Sep 10 01:11:34.767094 kubelet[2111]: E0910 01:11:34.767055 2111 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0"} Sep 10 01:11:34.767094 kubelet[2111]: E0910 01:11:34.767070 2111 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a8ed0f6a-7272-404d-b5b2-53b42e84380c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 01:11:34.767094 kubelet[2111]: E0910 01:11:34.767081 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a8ed0f6a-7272-404d-b5b2-53b42e84380c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-65f67d55cc-tx6qp" podUID="a8ed0f6a-7272-404d-b5b2-53b42e84380c" Sep 10 01:11:34.769622 env[1267]: time="2025-09-10T01:11:34.769604645Z" level=error msg="StopPodSandbox for \"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\" failed" error="failed to destroy network for sandbox \"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:34.769802 kubelet[2111]: E0910 01:11:34.769734 2111 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Sep 10 01:11:34.769802 kubelet[2111]: E0910 01:11:34.769761 2111 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5"} Sep 10 01:11:34.769802 kubelet[2111]: E0910 01:11:34.769776 2111 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a03727ef-5eb3-4502-ae0d-e1b45ce2893c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 01:11:34.769802 kubelet[2111]: E0910 01:11:34.769788 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a03727ef-5eb3-4502-ae0d-e1b45ce2893c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-ndnrv" podUID="a03727ef-5eb3-4502-ae0d-e1b45ce2893c" Sep 10 01:11:35.187152 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4-shm.mount: Deactivated successfully. Sep 10 01:11:35.187210 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb-shm.mount: Deactivated successfully. Sep 10 01:11:35.187247 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0-shm.mount: Deactivated successfully. Sep 10 01:11:35.187284 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d-shm.mount: Deactivated successfully. Sep 10 01:11:35.187326 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e-shm.mount: Deactivated successfully. Sep 10 01:11:35.187358 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662-shm.mount: Deactivated successfully. Sep 10 01:11:35.187390 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c-shm.mount: Deactivated successfully. Sep 10 01:11:35.674132 kubelet[2111]: I0910 01:11:35.674100 2111 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" Sep 10 01:11:35.675367 env[1267]: time="2025-09-10T01:11:35.674722377Z" level=info msg="StopPodSandbox for \"56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4\"" Sep 10 01:11:35.675541 kubelet[2111]: I0910 01:11:35.675528 2111 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Sep 10 01:11:35.675832 env[1267]: time="2025-09-10T01:11:35.675812848Z" level=info msg="StopPodSandbox for \"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\"" Sep 10 01:11:35.699121 env[1267]: time="2025-09-10T01:11:35.699082773Z" level=error msg="StopPodSandbox for \"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\" failed" error="failed to destroy network for sandbox \"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:35.699266 kubelet[2111]: E0910 01:11:35.699232 2111 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Sep 10 01:11:35.699326 kubelet[2111]: E0910 01:11:35.699274 2111 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c"} Sep 10 01:11:35.699326 kubelet[2111]: E0910 01:11:35.699297 2111 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9bad00c4-3e3e-4827-9970-a77e3259bf14\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 01:11:35.699326 kubelet[2111]: E0910 01:11:35.699312 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9bad00c4-3e3e-4827-9970-a77e3259bf14\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-sntmg" podUID="9bad00c4-3e3e-4827-9970-a77e3259bf14" Sep 10 01:11:35.703445 env[1267]: time="2025-09-10T01:11:35.703417282Z" level=error msg="StopPodSandbox for \"56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4\" failed" error="failed to destroy network for sandbox \"56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 10 01:11:35.703531 kubelet[2111]: E0910 01:11:35.703513 2111 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" Sep 10 01:11:35.703570 kubelet[2111]: E0910 01:11:35.703534 2111 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4"} Sep 10 01:11:35.703599 kubelet[2111]: E0910 01:11:35.703572 2111 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"433ded13-351c-45da-a35c-464e9f991379\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 10 01:11:35.703599 kubelet[2111]: E0910 01:11:35.703586 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"433ded13-351c-45da-a35c-464e9f991379\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-588jm" podUID="433ded13-351c-45da-a35c-464e9f991379" Sep 10 01:11:41.624870 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1126016098.mount: Deactivated successfully. Sep 10 01:11:41.690240 env[1267]: time="2025-09-10T01:11:41.690204900Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:41.692159 env[1267]: time="2025-09-10T01:11:41.692139856Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ce9c4ac0f175f22c56e80844e65379d9ebe1d8a4e2bbb38dc1db0f53a8826f0f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:41.693034 env[1267]: time="2025-09-10T01:11:41.693016767Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:41.694015 env[1267]: time="2025-09-10T01:11:41.693996612Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:bcb8146fcaeced1e1c88fad3eaa697f1680746bd23c3e7e8d4535bc484c6f2a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:41.694272 env[1267]: time="2025-09-10T01:11:41.694256318Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\" returns image reference \"sha256:ce9c4ac0f175f22c56e80844e65379d9ebe1d8a4e2bbb38dc1db0f53a8826f0f\"" Sep 10 01:11:41.781862 env[1267]: time="2025-09-10T01:11:41.781830245Z" level=info msg="CreateContainer within sandbox \"0dc67000b96b0d120770e248353574abf3e7b83182d6ab49857cb237f494a092\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Sep 10 01:11:41.795266 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3488074053.mount: Deactivated successfully. Sep 10 01:11:41.797741 env[1267]: time="2025-09-10T01:11:41.797695820Z" level=info msg="CreateContainer within sandbox \"0dc67000b96b0d120770e248353574abf3e7b83182d6ab49857cb237f494a092\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50\"" Sep 10 01:11:41.798913 env[1267]: time="2025-09-10T01:11:41.798206906Z" level=info msg="StartContainer for \"1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50\"" Sep 10 01:11:41.813067 systemd[1]: Started cri-containerd-1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50.scope. Sep 10 01:11:41.829000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.860591 kernel: kauditd_printk_skb: 34 callbacks suppressed Sep 10 01:11:41.869464 kernel: audit: type=1400 audit(1757466701.829:1019): avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.870338 kernel: audit: type=1300 audit(1757466701.829:1019): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fe28527dea8 items=0 ppid=2573 pid=3315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:41.871611 kernel: audit: type=1327 audit(1757466701.829:1019): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161353166623533613332353362366239386564393535643738323739 Sep 10 01:11:41.871636 kernel: audit: type=1400 audit(1757466701.829:1020): avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.873843 kernel: audit: type=1400 audit(1757466701.829:1020): avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.873885 kernel: audit: type=1400 audit(1757466701.829:1020): avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.873900 kernel: audit: type=1400 audit(1757466701.829:1020): avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.874247 kernel: audit: type=1400 audit(1757466701.829:1020): avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.874263 kernel: audit: type=1400 audit(1757466701.829:1020): avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.874304 kernel: audit: type=1400 audit(1757466701.829:1020): avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.829000 audit[3315]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fe28527dea8 items=0 ppid=2573 pid=3315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:41.829000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161353166623533613332353362366239386564393535643738323739 Sep 10 01:11:41.829000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.829000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.829000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.829000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.829000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.829000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.829000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.829000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.829000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.829000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.829000 audit: BPF prog-id=139 op=LOAD Sep 10 01:11:41.829000 audit[3315]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000097008 items=0 ppid=2573 pid=3315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:41.829000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161353166623533613332353362366239386564393535643738323739 Sep 10 01:11:41.840000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.840000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.840000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.840000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.840000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.840000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.840000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.840000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.840000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.840000 audit: BPF prog-id=140 op=LOAD Sep 10 01:11:41.840000 audit[3315]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000097058 items=0 ppid=2573 pid=3315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:41.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161353166623533613332353362366239386564393535643738323739 Sep 10 01:11:41.843000 audit: BPF prog-id=140 op=UNLOAD Sep 10 01:11:41.843000 audit: BPF prog-id=139 op=UNLOAD Sep 10 01:11:41.843000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.843000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.843000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.843000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.843000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.843000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.843000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.843000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.843000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.843000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:41.843000 audit: BPF prog-id=141 op=LOAD Sep 10 01:11:41.843000 audit[3315]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000970e8 items=0 ppid=2573 pid=3315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:41.843000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161353166623533613332353362366239386564393535643738323739 Sep 10 01:11:41.882866 env[1267]: time="2025-09-10T01:11:41.865388113Z" level=info msg="StartContainer for \"1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50\" returns successfully" Sep 10 01:11:43.031023 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Sep 10 01:11:43.031787 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Sep 10 01:11:43.414712 kubelet[2111]: I0910 01:11:43.414658 2111 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-6t48x" podStartSLOduration=2.455619163 podStartE2EDuration="23.407942179s" podCreationTimestamp="2025-09-10 01:11:20 +0000 UTC" firstStartedPulling="2025-09-10 01:11:20.742778974 +0000 UTC m=+16.388360405" lastFinishedPulling="2025-09-10 01:11:41.695101998 +0000 UTC m=+37.340683421" observedRunningTime="2025-09-10 01:11:42.743502068 +0000 UTC m=+38.389083497" watchObservedRunningTime="2025-09-10 01:11:43.407942179 +0000 UTC m=+39.053523601" Sep 10 01:11:43.420490 env[1267]: time="2025-09-10T01:11:43.420107495Z" level=info msg="StopPodSandbox for \"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\"" Sep 10 01:11:43.921455 env[1267]: 2025-09-10 01:11:43.487 [INFO][3370] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Sep 10 01:11:43.921455 env[1267]: 2025-09-10 01:11:43.489 [INFO][3370] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" iface="eth0" netns="/var/run/netns/cni-5bda49b5-ae54-3688-2a57-3b7a77078819" Sep 10 01:11:43.921455 env[1267]: 2025-09-10 01:11:43.489 [INFO][3370] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" iface="eth0" netns="/var/run/netns/cni-5bda49b5-ae54-3688-2a57-3b7a77078819" Sep 10 01:11:43.921455 env[1267]: 2025-09-10 01:11:43.490 [INFO][3370] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" iface="eth0" netns="/var/run/netns/cni-5bda49b5-ae54-3688-2a57-3b7a77078819" Sep 10 01:11:43.921455 env[1267]: 2025-09-10 01:11:43.490 [INFO][3370] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Sep 10 01:11:43.921455 env[1267]: 2025-09-10 01:11:43.490 [INFO][3370] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Sep 10 01:11:43.921455 env[1267]: 2025-09-10 01:11:43.800 [INFO][3388] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" HandleID="k8s-pod-network.228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Workload="localhost-k8s-whisker--5d75945987--7blxq-eth0" Sep 10 01:11:43.921455 env[1267]: 2025-09-10 01:11:43.804 [INFO][3388] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:11:43.921455 env[1267]: 2025-09-10 01:11:43.808 [INFO][3388] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:11:43.921455 env[1267]: 2025-09-10 01:11:43.917 [WARNING][3388] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" HandleID="k8s-pod-network.228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Workload="localhost-k8s-whisker--5d75945987--7blxq-eth0" Sep 10 01:11:43.921455 env[1267]: 2025-09-10 01:11:43.917 [INFO][3388] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" HandleID="k8s-pod-network.228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Workload="localhost-k8s-whisker--5d75945987--7blxq-eth0" Sep 10 01:11:43.921455 env[1267]: 2025-09-10 01:11:43.918 [INFO][3388] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:11:43.921455 env[1267]: 2025-09-10 01:11:43.919 [INFO][3370] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Sep 10 01:11:43.925527 env[1267]: time="2025-09-10T01:11:43.924387898Z" level=info msg="TearDown network for sandbox \"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\" successfully" Sep 10 01:11:43.925527 env[1267]: time="2025-09-10T01:11:43.924410185Z" level=info msg="StopPodSandbox for \"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\" returns successfully" Sep 10 01:11:43.923709 systemd[1]: run-netns-cni\x2d5bda49b5\x2dae54\x2d3688\x2d2a57\x2d3b7a77078819.mount: Deactivated successfully. Sep 10 01:11:43.999648 kubelet[2111]: I0910 01:11:43.999596 2111 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/4740b723-6bb8-4cda-a3af-27027890eb9b-whisker-ca-bundle\") pod \"4740b723-6bb8-4cda-a3af-27027890eb9b\" (UID: \"4740b723-6bb8-4cda-a3af-27027890eb9b\") " Sep 10 01:11:43.999787 kubelet[2111]: I0910 01:11:43.999664 2111 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-m9zz5\" (UniqueName: \"kubernetes.io/projected/4740b723-6bb8-4cda-a3af-27027890eb9b-kube-api-access-m9zz5\") pod \"4740b723-6bb8-4cda-a3af-27027890eb9b\" (UID: \"4740b723-6bb8-4cda-a3af-27027890eb9b\") " Sep 10 01:11:43.999787 kubelet[2111]: I0910 01:11:43.999699 2111 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/4740b723-6bb8-4cda-a3af-27027890eb9b-whisker-backend-key-pair\") pod \"4740b723-6bb8-4cda-a3af-27027890eb9b\" (UID: \"4740b723-6bb8-4cda-a3af-27027890eb9b\") " Sep 10 01:11:44.006946 kubelet[2111]: I0910 01:11:44.004229 2111 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/4740b723-6bb8-4cda-a3af-27027890eb9b-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "4740b723-6bb8-4cda-a3af-27027890eb9b" (UID: "4740b723-6bb8-4cda-a3af-27027890eb9b"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Sep 10 01:11:44.010928 systemd[1]: var-lib-kubelet-pods-4740b723\x2d6bb8\x2d4cda\x2da3af\x2d27027890eb9b-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Sep 10 01:11:44.013222 kubelet[2111]: I0910 01:11:44.012312 2111 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/4740b723-6bb8-4cda-a3af-27027890eb9b-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "4740b723-6bb8-4cda-a3af-27027890eb9b" (UID: "4740b723-6bb8-4cda-a3af-27027890eb9b"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Sep 10 01:11:44.015899 systemd[1]: var-lib-kubelet-pods-4740b723\x2d6bb8\x2d4cda\x2da3af\x2d27027890eb9b-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dm9zz5.mount: Deactivated successfully. Sep 10 01:11:44.017183 kubelet[2111]: I0910 01:11:44.017155 2111 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/4740b723-6bb8-4cda-a3af-27027890eb9b-kube-api-access-m9zz5" (OuterVolumeSpecName: "kube-api-access-m9zz5") pod "4740b723-6bb8-4cda-a3af-27027890eb9b" (UID: "4740b723-6bb8-4cda-a3af-27027890eb9b"). InnerVolumeSpecName "kube-api-access-m9zz5". PluginName "kubernetes.io/projected", VolumeGIDValue "" Sep 10 01:11:44.100964 kubelet[2111]: I0910 01:11:44.100903 2111 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/4740b723-6bb8-4cda-a3af-27027890eb9b-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Sep 10 01:11:44.100964 kubelet[2111]: I0910 01:11:44.100966 2111 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/4740b723-6bb8-4cda-a3af-27027890eb9b-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Sep 10 01:11:44.101135 kubelet[2111]: I0910 01:11:44.100976 2111 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-m9zz5\" (UniqueName: \"kubernetes.io/projected/4740b723-6bb8-4cda-a3af-27027890eb9b-kube-api-access-m9zz5\") on node \"localhost\" DevicePath \"\"" Sep 10 01:11:44.516000 audit[3449]: AVC avc: denied { write } for pid=3449 comm="tee" name="fd" dev="proc" ino=36226 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 01:11:44.519000 audit[3447]: AVC avc: denied { write } for pid=3447 comm="tee" name="fd" dev="proc" ino=36233 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 01:11:44.516000 audit[3449]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe10aaa7e7 a2=241 a3=1b6 items=1 ppid=3407 pid=3449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.516000 audit: CWD cwd="/etc/service/enabled/cni/log" Sep 10 01:11:44.516000 audit: PATH item=0 name="/dev/fd/63" inode=37587 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:11:44.516000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 01:11:44.524000 audit[3452]: AVC avc: denied { write } for pid=3452 comm="tee" name="fd" dev="proc" ino=36235 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 01:11:44.524000 audit[3452]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc9efd17e5 a2=241 a3=1b6 items=1 ppid=3408 pid=3452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.524000 audit: CWD cwd="/etc/service/enabled/felix/log" Sep 10 01:11:44.524000 audit: PATH item=0 name="/dev/fd/63" inode=36214 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:11:44.524000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 01:11:44.519000 audit[3447]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe96ee77e5 a2=241 a3=1b6 items=1 ppid=3410 pid=3447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.519000 audit: CWD cwd="/etc/service/enabled/confd/log" Sep 10 01:11:44.519000 audit: PATH item=0 name="/dev/fd/63" inode=37586 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:11:44.519000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 01:11:44.532000 audit[3469]: AVC avc: denied { write } for pid=3469 comm="tee" name="fd" dev="proc" ino=36240 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 01:11:44.533000 audit[3466]: AVC avc: denied { write } for pid=3466 comm="tee" name="fd" dev="proc" ino=36243 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 01:11:44.533000 audit[3466]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffea109a7e6 a2=241 a3=1b6 items=1 ppid=3404 pid=3466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.533000 audit: CWD cwd="/etc/service/enabled/bird/log" Sep 10 01:11:44.533000 audit: PATH item=0 name="/dev/fd/63" inode=36217 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:11:44.533000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 01:11:44.532000 audit[3469]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff051c67e5 a2=241 a3=1b6 items=1 ppid=3414 pid=3469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.532000 audit: CWD cwd="/etc/service/enabled/bird6/log" Sep 10 01:11:44.532000 audit: PATH item=0 name="/dev/fd/63" inode=36222 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:11:44.532000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 01:11:44.558000 audit[3463]: AVC avc: denied { write } for pid=3463 comm="tee" name="fd" dev="proc" ino=37595 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 01:11:44.558000 audit[3463]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffd0c707d6 a2=241 a3=1b6 items=1 ppid=3406 pid=3463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.558000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Sep 10 01:11:44.558000 audit: PATH item=0 name="/dev/fd/63" inode=36215 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:11:44.558000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 01:11:44.571000 audit[3478]: AVC avc: denied { write } for pid=3478 comm="tee" name="fd" dev="proc" ino=37599 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 01:11:44.571000 audit[3478]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffea72547d5 a2=241 a3=1b6 items=1 ppid=3416 pid=3478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.571000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Sep 10 01:11:44.571000 audit: PATH item=0 name="/dev/fd/63" inode=37592 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:11:44.571000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 01:11:44.609647 systemd[1]: Removed slice kubepods-besteffort-pod4740b723_6bb8_4cda_a3af_27027890eb9b.slice. Sep 10 01:11:44.849366 systemd[1]: Created slice kubepods-besteffort-pod48c970bb_71ad_41ba_a3c0_778a2f3427c9.slice. Sep 10 01:11:44.861000 audit[3513]: AVC avc: denied { bpf } for pid=3513 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.861000 audit[3513]: AVC avc: denied { bpf } for pid=3513 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.861000 audit[3513]: AVC avc: denied { perfmon } for pid=3513 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.861000 audit[3513]: AVC avc: denied { perfmon } for pid=3513 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.861000 audit[3513]: AVC avc: denied { perfmon } for pid=3513 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.861000 audit[3513]: AVC avc: denied { perfmon } for pid=3513 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.861000 audit[3513]: AVC avc: denied { perfmon } for pid=3513 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.861000 audit[3513]: AVC avc: denied { bpf } for pid=3513 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.861000 audit[3513]: AVC avc: denied { bpf } for pid=3513 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.861000 audit: BPF prog-id=142 op=LOAD Sep 10 01:11:44.861000 audit[3513]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe5c3205d0 a2=98 a3=1fffffffffffffff items=0 ppid=3411 pid=3513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.861000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 10 01:11:44.861000 audit: BPF prog-id=142 op=UNLOAD Sep 10 01:11:44.862000 audit[3513]: AVC avc: denied { bpf } for pid=3513 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.862000 audit[3513]: AVC avc: denied { bpf } for pid=3513 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.862000 audit[3513]: AVC avc: denied { perfmon } for pid=3513 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.862000 audit[3513]: AVC avc: denied { perfmon } for pid=3513 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.862000 audit[3513]: AVC avc: denied { perfmon } for pid=3513 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.862000 audit[3513]: AVC avc: denied { perfmon } for pid=3513 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.862000 audit[3513]: AVC avc: denied { perfmon } for pid=3513 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.862000 audit[3513]: AVC avc: denied { bpf } for pid=3513 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.862000 audit[3513]: AVC avc: denied { bpf } for pid=3513 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.862000 audit: BPF prog-id=143 op=LOAD Sep 10 01:11:44.862000 audit[3513]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe5c3204b0 a2=94 a3=3 items=0 ppid=3411 pid=3513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.862000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 10 01:11:44.863000 audit: BPF prog-id=143 op=UNLOAD Sep 10 01:11:44.863000 audit[3513]: AVC avc: denied { bpf } for pid=3513 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.863000 audit[3513]: AVC avc: denied { bpf } for pid=3513 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.863000 audit[3513]: AVC avc: denied { perfmon } for pid=3513 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.863000 audit[3513]: AVC avc: denied { perfmon } for pid=3513 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.863000 audit[3513]: AVC avc: denied { perfmon } for pid=3513 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.863000 audit[3513]: AVC avc: denied { perfmon } for pid=3513 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.863000 audit[3513]: AVC avc: denied { perfmon } for pid=3513 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.863000 audit[3513]: AVC avc: denied { bpf } for pid=3513 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.863000 audit[3513]: AVC avc: denied { bpf } for pid=3513 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.863000 audit: BPF prog-id=144 op=LOAD Sep 10 01:11:44.863000 audit[3513]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe5c3204f0 a2=94 a3=7ffe5c3206d0 items=0 ppid=3411 pid=3513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.863000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 10 01:11:44.863000 audit: BPF prog-id=144 op=UNLOAD Sep 10 01:11:44.863000 audit[3513]: AVC avc: denied { perfmon } for pid=3513 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.863000 audit[3513]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffe5c3205c0 a2=50 a3=a000000085 items=0 ppid=3411 pid=3513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.863000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 10 01:11:44.866000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.866000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.866000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.866000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.866000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.866000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.866000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.866000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.866000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.866000 audit: BPF prog-id=145 op=LOAD Sep 10 01:11:44.866000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff9b66f920 a2=98 a3=3 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.866000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.866000 audit: BPF prog-id=145 op=UNLOAD Sep 10 01:11:44.871000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.871000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.871000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.871000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.871000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.871000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.871000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.871000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.871000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.871000 audit: BPF prog-id=146 op=LOAD Sep 10 01:11:44.871000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff9b66f710 a2=94 a3=54428f items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.871000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.871000 audit: BPF prog-id=146 op=UNLOAD Sep 10 01:11:44.871000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.871000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.871000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.871000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.871000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.871000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.871000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.871000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.871000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.871000 audit: BPF prog-id=147 op=LOAD Sep 10 01:11:44.871000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff9b66f740 a2=94 a3=2 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.871000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.871000 audit: BPF prog-id=147 op=UNLOAD Sep 10 01:11:44.940000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.940000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.940000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.940000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.940000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.940000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.940000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.940000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.940000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.940000 audit: BPF prog-id=148 op=LOAD Sep 10 01:11:44.940000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff9b66f600 a2=94 a3=1 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.940000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.940000 audit: BPF prog-id=148 op=UNLOAD Sep 10 01:11:44.940000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.940000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff9b66f6d0 a2=50 a3=7fff9b66f7b0 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.940000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff9b66f610 a2=28 a3=0 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.948000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff9b66f640 a2=28 a3=0 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.948000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff9b66f550 a2=28 a3=0 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.948000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff9b66f660 a2=28 a3=0 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.948000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff9b66f640 a2=28 a3=0 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.948000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff9b66f630 a2=28 a3=0 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.948000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff9b66f660 a2=28 a3=0 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.948000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff9b66f640 a2=28 a3=0 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.948000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff9b66f660 a2=28 a3=0 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.948000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff9b66f630 a2=28 a3=0 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.948000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff9b66f6a0 a2=28 a3=0 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.948000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff9b66f450 a2=50 a3=1 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.948000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit: BPF prog-id=149 op=LOAD Sep 10 01:11:44.948000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff9b66f450 a2=94 a3=5 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.948000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.948000 audit: BPF prog-id=149 op=UNLOAD Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff9b66f500 a2=50 a3=1 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.948000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fff9b66f620 a2=4 a3=38 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.948000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.948000 audit[3514]: AVC avc: denied { confidentiality } for pid=3514 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 01:11:44.948000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff9b66f670 a2=94 a3=6 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.948000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { confidentiality } for pid=3514 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 01:11:44.949000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff9b66ee20 a2=94 a3=88 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.949000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { perfmon } for pid=3514 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { bpf } for pid=3514 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.949000 audit[3514]: AVC avc: denied { confidentiality } for pid=3514 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 01:11:44.949000 audit[3514]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff9b66ee20 a2=94 a3=88 items=0 ppid=3411 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.949000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:11:44.960000 audit[3517]: AVC avc: denied { bpf } for pid=3517 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.960000 audit[3517]: AVC avc: denied { bpf } for pid=3517 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.960000 audit[3517]: AVC avc: denied { perfmon } for pid=3517 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.960000 audit[3517]: AVC avc: denied { perfmon } for pid=3517 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.960000 audit[3517]: AVC avc: denied { perfmon } for pid=3517 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.960000 audit[3517]: AVC avc: denied { perfmon } for pid=3517 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.960000 audit[3517]: AVC avc: denied { perfmon } for pid=3517 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.960000 audit[3517]: AVC avc: denied { bpf } for pid=3517 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.960000 audit[3517]: AVC avc: denied { bpf } for pid=3517 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.960000 audit: BPF prog-id=150 op=LOAD Sep 10 01:11:44.960000 audit[3517]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffff14f0f70 a2=98 a3=1999999999999999 items=0 ppid=3411 pid=3517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.960000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 10 01:11:44.961000 audit: BPF prog-id=150 op=UNLOAD Sep 10 01:11:44.961000 audit[3517]: AVC avc: denied { bpf } for pid=3517 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.961000 audit[3517]: AVC avc: denied { bpf } for pid=3517 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.961000 audit[3517]: AVC avc: denied { perfmon } for pid=3517 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.961000 audit[3517]: AVC avc: denied { perfmon } for pid=3517 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.961000 audit[3517]: AVC avc: denied { perfmon } for pid=3517 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.961000 audit[3517]: AVC avc: denied { perfmon } for pid=3517 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.961000 audit[3517]: AVC avc: denied { perfmon } for pid=3517 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.961000 audit[3517]: AVC avc: denied { bpf } for pid=3517 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.961000 audit[3517]: AVC avc: denied { bpf } for pid=3517 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.961000 audit: BPF prog-id=151 op=LOAD Sep 10 01:11:44.961000 audit[3517]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffff14f0e50 a2=94 a3=ffff items=0 ppid=3411 pid=3517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.961000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 10 01:11:44.961000 audit: BPF prog-id=151 op=UNLOAD Sep 10 01:11:44.961000 audit[3517]: AVC avc: denied { bpf } for pid=3517 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.961000 audit[3517]: AVC avc: denied { bpf } for pid=3517 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.961000 audit[3517]: AVC avc: denied { perfmon } for pid=3517 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.961000 audit[3517]: AVC avc: denied { perfmon } for pid=3517 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.961000 audit[3517]: AVC avc: denied { perfmon } for pid=3517 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.961000 audit[3517]: AVC avc: denied { perfmon } for pid=3517 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.961000 audit[3517]: AVC avc: denied { perfmon } for pid=3517 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.961000 audit[3517]: AVC avc: denied { bpf } for pid=3517 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.961000 audit[3517]: AVC avc: denied { bpf } for pid=3517 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:44.961000 audit: BPF prog-id=152 op=LOAD Sep 10 01:11:44.961000 audit[3517]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffff14f0e90 a2=94 a3=7ffff14f1070 items=0 ppid=3411 pid=3517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:44.961000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 10 01:11:44.961000 audit: BPF prog-id=152 op=UNLOAD Sep 10 01:11:44.978774 kubelet[2111]: I0910 01:11:44.978747 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/48c970bb-71ad-41ba-a3c0-778a2f3427c9-whisker-backend-key-pair\") pod \"whisker-5749f8c7fd-7bgh4\" (UID: \"48c970bb-71ad-41ba-a3c0-778a2f3427c9\") " pod="calico-system/whisker-5749f8c7fd-7bgh4" Sep 10 01:11:44.978774 kubelet[2111]: I0910 01:11:44.978773 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/48c970bb-71ad-41ba-a3c0-778a2f3427c9-whisker-ca-bundle\") pod \"whisker-5749f8c7fd-7bgh4\" (UID: \"48c970bb-71ad-41ba-a3c0-778a2f3427c9\") " pod="calico-system/whisker-5749f8c7fd-7bgh4" Sep 10 01:11:44.979021 kubelet[2111]: I0910 01:11:44.978789 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nfr62\" (UniqueName: \"kubernetes.io/projected/48c970bb-71ad-41ba-a3c0-778a2f3427c9-kube-api-access-nfr62\") pod \"whisker-5749f8c7fd-7bgh4\" (UID: \"48c970bb-71ad-41ba-a3c0-778a2f3427c9\") " pod="calico-system/whisker-5749f8c7fd-7bgh4" Sep 10 01:11:45.023795 systemd-networkd[1063]: vxlan.calico: Link UP Sep 10 01:11:45.023802 systemd-networkd[1063]: vxlan.calico: Gained carrier Sep 10 01:11:45.047000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.047000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.047000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.047000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.047000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.047000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.047000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.047000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.047000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.047000 audit: BPF prog-id=153 op=LOAD Sep 10 01:11:45.047000 audit[3544]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc394f7560 a2=98 a3=0 items=0 ppid=3411 pid=3544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.047000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:11:45.047000 audit: BPF prog-id=153 op=UNLOAD Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit: BPF prog-id=154 op=LOAD Sep 10 01:11:45.048000 audit[3544]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc394f7370 a2=94 a3=54428f items=0 ppid=3411 pid=3544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.048000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:11:45.048000 audit: BPF prog-id=154 op=UNLOAD Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit: BPF prog-id=155 op=LOAD Sep 10 01:11:45.048000 audit[3544]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc394f73a0 a2=94 a3=2 items=0 ppid=3411 pid=3544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.048000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:11:45.048000 audit: BPF prog-id=155 op=UNLOAD Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc394f7270 a2=28 a3=0 items=0 ppid=3411 pid=3544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.048000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc394f72a0 a2=28 a3=0 items=0 ppid=3411 pid=3544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.048000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc394f71b0 a2=28 a3=0 items=0 ppid=3411 pid=3544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.048000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc394f72c0 a2=28 a3=0 items=0 ppid=3411 pid=3544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.048000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc394f72a0 a2=28 a3=0 items=0 ppid=3411 pid=3544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.048000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc394f7290 a2=28 a3=0 items=0 ppid=3411 pid=3544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.048000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc394f72c0 a2=28 a3=0 items=0 ppid=3411 pid=3544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.048000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc394f72a0 a2=28 a3=0 items=0 ppid=3411 pid=3544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.048000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc394f72c0 a2=28 a3=0 items=0 ppid=3411 pid=3544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.048000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc394f7290 a2=28 a3=0 items=0 ppid=3411 pid=3544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.048000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc394f7300 a2=28 a3=0 items=0 ppid=3411 pid=3544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.048000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.048000 audit: BPF prog-id=156 op=LOAD Sep 10 01:11:45.048000 audit[3544]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc394f7170 a2=94 a3=0 items=0 ppid=3411 pid=3544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.048000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:11:45.048000 audit: BPF prog-id=156 op=UNLOAD Sep 10 01:11:45.054000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.054000 audit[3544]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffc394f7160 a2=50 a3=2800 items=0 ppid=3411 pid=3544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.054000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:11:45.054000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.054000 audit[3544]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffc394f7160 a2=50 a3=2800 items=0 ppid=3411 pid=3544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.054000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:11:45.054000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.054000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.054000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.054000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.054000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.054000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.054000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.054000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.054000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.054000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.054000 audit: BPF prog-id=157 op=LOAD Sep 10 01:11:45.054000 audit[3544]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc394f6980 a2=94 a3=2 items=0 ppid=3411 pid=3544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.054000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:11:45.055000 audit: BPF prog-id=157 op=UNLOAD Sep 10 01:11:45.055000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.055000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.055000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.055000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.055000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.055000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.055000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.055000 audit[3544]: AVC avc: denied { perfmon } for pid=3544 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.055000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.055000 audit[3544]: AVC avc: denied { bpf } for pid=3544 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.055000 audit: BPF prog-id=158 op=LOAD Sep 10 01:11:45.055000 audit[3544]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc394f6a80 a2=94 a3=30 items=0 ppid=3411 pid=3544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.055000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:11:45.058000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.058000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.058000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.058000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.058000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.058000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.058000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.058000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.058000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.058000 audit: BPF prog-id=159 op=LOAD Sep 10 01:11:45.058000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd23130e00 a2=98 a3=0 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.058000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.058000 audit: BPF prog-id=159 op=UNLOAD Sep 10 01:11:45.059000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.059000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.059000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.059000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.059000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.059000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.059000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.059000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.059000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.059000 audit: BPF prog-id=160 op=LOAD Sep 10 01:11:45.059000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd23130bf0 a2=94 a3=54428f items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.059000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.059000 audit: BPF prog-id=160 op=UNLOAD Sep 10 01:11:45.059000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.059000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.059000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.059000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.059000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.059000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.059000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.059000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.059000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.059000 audit: BPF prog-id=161 op=LOAD Sep 10 01:11:45.059000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd23130c20 a2=94 a3=2 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.059000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.059000 audit: BPF prog-id=161 op=UNLOAD Sep 10 01:11:45.154044 env[1267]: time="2025-09-10T01:11:45.153819090Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5749f8c7fd-7bgh4,Uid:48c970bb-71ad-41ba-a3c0-778a2f3427c9,Namespace:calico-system,Attempt:0,}" Sep 10 01:11:45.178000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.178000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.178000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.178000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.178000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.178000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.178000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.178000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.178000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.178000 audit: BPF prog-id=162 op=LOAD Sep 10 01:11:45.178000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd23130ae0 a2=94 a3=1 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.178000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.178000 audit: BPF prog-id=162 op=UNLOAD Sep 10 01:11:45.178000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.178000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffd23130bb0 a2=50 a3=7ffd23130c90 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.178000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.187000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.187000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd23130af0 a2=28 a3=0 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.187000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.188000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.188000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd23130b20 a2=28 a3=0 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.188000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.188000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.188000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd23130a30 a2=28 a3=0 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.188000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.188000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.188000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd23130b40 a2=28 a3=0 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.188000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.188000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.188000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd23130b20 a2=28 a3=0 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.188000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.188000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.188000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd23130b10 a2=28 a3=0 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.188000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.188000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.188000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd23130b40 a2=28 a3=0 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.188000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.188000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.188000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd23130b20 a2=28 a3=0 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.188000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.188000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.188000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd23130b40 a2=28 a3=0 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.188000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd23130b10 a2=28 a3=0 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.189000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd23130b80 a2=28 a3=0 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.189000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffd23130930 a2=50 a3=1 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.189000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit: BPF prog-id=163 op=LOAD Sep 10 01:11:45.189000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd23130930 a2=94 a3=5 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.189000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.189000 audit: BPF prog-id=163 op=UNLOAD Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffd231309e0 a2=50 a3=1 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.189000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffd23130b00 a2=4 a3=38 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.189000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { confidentiality } for pid=3547 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 01:11:45.189000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd23130b50 a2=94 a3=6 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.189000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { confidentiality } for pid=3547 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 01:11:45.189000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd23130300 a2=94 a3=88 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.189000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { confidentiality } for pid=3547 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 01:11:45.189000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd23130300 a2=94 a3=88 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.189000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.189000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.189000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd23131d30 a2=10 a3=f8f00800 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.189000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.190000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.190000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd23131bd0 a2=10 a3=3 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.190000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.190000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.190000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd23131b70 a2=10 a3=3 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.190000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.190000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.190000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd23131b70 a2=10 a3=7 items=0 ppid=3411 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.190000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:11:45.194000 audit: BPF prog-id=158 op=UNLOAD Sep 10 01:11:45.357000 audit[3596]: NETFILTER_CFG table=mangle:99 family=2 entries=16 op=nft_register_chain pid=3596 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 01:11:45.357000 audit[3596]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffc7b4fd2a0 a2=0 a3=7ffc7b4fd28c items=0 ppid=3411 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.357000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 01:11:45.388000 audit[3598]: NETFILTER_CFG table=nat:100 family=2 entries=15 op=nft_register_chain pid=3598 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 01:11:45.388000 audit[3598]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7fffcf3afc50 a2=0 a3=7fffcf3afc3c items=0 ppid=3411 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.388000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 01:11:45.389000 audit[3599]: NETFILTER_CFG table=filter:101 family=2 entries=39 op=nft_register_chain pid=3599 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 01:11:45.389000 audit[3599]: SYSCALL arch=c000003e syscall=46 success=yes exit=18968 a0=3 a1=7fff57557000 a2=0 a3=7fff57556fec items=0 ppid=3411 pid=3599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.389000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 01:11:45.395000 audit[3595]: NETFILTER_CFG table=raw:102 family=2 entries=21 op=nft_register_chain pid=3595 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 01:11:45.395000 audit[3595]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7fff03a38fd0 a2=0 a3=7fff03a38fbc items=0 ppid=3411 pid=3595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.395000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 01:11:45.455860 systemd-networkd[1063]: cali887d2d46377: Link UP Sep 10 01:11:45.457389 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali887d2d46377: link becomes ready Sep 10 01:11:45.457267 systemd-networkd[1063]: cali887d2d46377: Gained carrier Sep 10 01:11:45.469211 env[1267]: 2025-09-10 01:11:45.358 [INFO][3575] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--5749f8c7fd--7bgh4-eth0 whisker-5749f8c7fd- calico-system 48c970bb-71ad-41ba-a3c0-778a2f3427c9 914 0 2025-09-10 01:11:44 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:5749f8c7fd projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-5749f8c7fd-7bgh4 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali887d2d46377 [] [] }} ContainerID="7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b" Namespace="calico-system" Pod="whisker-5749f8c7fd-7bgh4" WorkloadEndpoint="localhost-k8s-whisker--5749f8c7fd--7bgh4-" Sep 10 01:11:45.469211 env[1267]: 2025-09-10 01:11:45.358 [INFO][3575] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b" Namespace="calico-system" Pod="whisker-5749f8c7fd-7bgh4" WorkloadEndpoint="localhost-k8s-whisker--5749f8c7fd--7bgh4-eth0" Sep 10 01:11:45.469211 env[1267]: 2025-09-10 01:11:45.411 [INFO][3607] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b" HandleID="k8s-pod-network.7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b" Workload="localhost-k8s-whisker--5749f8c7fd--7bgh4-eth0" Sep 10 01:11:45.469211 env[1267]: 2025-09-10 01:11:45.413 [INFO][3607] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b" HandleID="k8s-pod-network.7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b" Workload="localhost-k8s-whisker--5749f8c7fd--7bgh4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ad490), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-5749f8c7fd-7bgh4", "timestamp":"2025-09-10 01:11:45.411873712 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 01:11:45.469211 env[1267]: 2025-09-10 01:11:45.413 [INFO][3607] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:11:45.469211 env[1267]: 2025-09-10 01:11:45.413 [INFO][3607] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:11:45.469211 env[1267]: 2025-09-10 01:11:45.413 [INFO][3607] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 01:11:45.469211 env[1267]: 2025-09-10 01:11:45.419 [INFO][3607] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b" host="localhost" Sep 10 01:11:45.469211 env[1267]: 2025-09-10 01:11:45.428 [INFO][3607] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 01:11:45.469211 env[1267]: 2025-09-10 01:11:45.430 [INFO][3607] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 01:11:45.469211 env[1267]: 2025-09-10 01:11:45.431 [INFO][3607] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 01:11:45.469211 env[1267]: 2025-09-10 01:11:45.432 [INFO][3607] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 01:11:45.469211 env[1267]: 2025-09-10 01:11:45.433 [INFO][3607] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b" host="localhost" Sep 10 01:11:45.469211 env[1267]: 2025-09-10 01:11:45.435 [INFO][3607] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b Sep 10 01:11:45.469211 env[1267]: 2025-09-10 01:11:45.437 [INFO][3607] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b" host="localhost" Sep 10 01:11:45.469211 env[1267]: 2025-09-10 01:11:45.440 [INFO][3607] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b" host="localhost" Sep 10 01:11:45.469211 env[1267]: 2025-09-10 01:11:45.440 [INFO][3607] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b" host="localhost" Sep 10 01:11:45.469211 env[1267]: 2025-09-10 01:11:45.440 [INFO][3607] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:11:45.469211 env[1267]: 2025-09-10 01:11:45.440 [INFO][3607] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b" HandleID="k8s-pod-network.7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b" Workload="localhost-k8s-whisker--5749f8c7fd--7bgh4-eth0" Sep 10 01:11:45.469738 env[1267]: 2025-09-10 01:11:45.443 [INFO][3575] cni-plugin/k8s.go 418: Populated endpoint ContainerID="7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b" Namespace="calico-system" Pod="whisker-5749f8c7fd-7bgh4" WorkloadEndpoint="localhost-k8s-whisker--5749f8c7fd--7bgh4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--5749f8c7fd--7bgh4-eth0", GenerateName:"whisker-5749f8c7fd-", Namespace:"calico-system", SelfLink:"", UID:"48c970bb-71ad-41ba-a3c0-778a2f3427c9", ResourceVersion:"914", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5749f8c7fd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-5749f8c7fd-7bgh4", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali887d2d46377", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:11:45.469738 env[1267]: 2025-09-10 01:11:45.443 [INFO][3575] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b" Namespace="calico-system" Pod="whisker-5749f8c7fd-7bgh4" WorkloadEndpoint="localhost-k8s-whisker--5749f8c7fd--7bgh4-eth0" Sep 10 01:11:45.469738 env[1267]: 2025-09-10 01:11:45.443 [INFO][3575] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali887d2d46377 ContainerID="7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b" Namespace="calico-system" Pod="whisker-5749f8c7fd-7bgh4" WorkloadEndpoint="localhost-k8s-whisker--5749f8c7fd--7bgh4-eth0" Sep 10 01:11:45.469738 env[1267]: 2025-09-10 01:11:45.458 [INFO][3575] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b" Namespace="calico-system" Pod="whisker-5749f8c7fd-7bgh4" WorkloadEndpoint="localhost-k8s-whisker--5749f8c7fd--7bgh4-eth0" Sep 10 01:11:45.469738 env[1267]: 2025-09-10 01:11:45.458 [INFO][3575] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b" Namespace="calico-system" Pod="whisker-5749f8c7fd-7bgh4" WorkloadEndpoint="localhost-k8s-whisker--5749f8c7fd--7bgh4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--5749f8c7fd--7bgh4-eth0", GenerateName:"whisker-5749f8c7fd-", Namespace:"calico-system", SelfLink:"", UID:"48c970bb-71ad-41ba-a3c0-778a2f3427c9", ResourceVersion:"914", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5749f8c7fd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b", Pod:"whisker-5749f8c7fd-7bgh4", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali887d2d46377", MAC:"be:de:6f:fe:0e:5f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:11:45.469738 env[1267]: 2025-09-10 01:11:45.464 [INFO][3575] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b" Namespace="calico-system" Pod="whisker-5749f8c7fd-7bgh4" WorkloadEndpoint="localhost-k8s-whisker--5749f8c7fd--7bgh4-eth0" Sep 10 01:11:45.479829 env[1267]: time="2025-09-10T01:11:45.479780894Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 01:11:45.479929 env[1267]: time="2025-09-10T01:11:45.479830730Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 01:11:45.479929 env[1267]: time="2025-09-10T01:11:45.479846026Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 01:11:45.480035 env[1267]: time="2025-09-10T01:11:45.480011003Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b pid=3631 runtime=io.containerd.runc.v2 Sep 10 01:11:45.492968 systemd[1]: Started cri-containerd-7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b.scope. Sep 10 01:11:45.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.506000 audit: BPF prog-id=164 op=LOAD Sep 10 01:11:45.507000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.507000 audit[3644]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3631 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762653262623138333138346537393639306562333332613533383234 Sep 10 01:11:45.507000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.507000 audit[3644]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3631 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762653262623138333138346537393639306562333332613533383234 Sep 10 01:11:45.507000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.507000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.507000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.507000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.507000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.507000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.507000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.507000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.507000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.507000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.507000 audit: BPF prog-id=165 op=LOAD Sep 10 01:11:45.507000 audit[3644]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000d9ce0 items=0 ppid=3631 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762653262623138333138346537393639306562333332613533383234 Sep 10 01:11:45.508000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.508000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.508000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.508000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.508000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.508000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.508000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.508000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.508000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.508000 audit: BPF prog-id=166 op=LOAD Sep 10 01:11:45.508000 audit[3644]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000d9d28 items=0 ppid=3631 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.508000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762653262623138333138346537393639306562333332613533383234 Sep 10 01:11:45.508000 audit: BPF prog-id=166 op=UNLOAD Sep 10 01:11:45.508000 audit: BPF prog-id=165 op=UNLOAD Sep 10 01:11:45.508000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.508000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.508000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.508000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.508000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.508000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.508000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.508000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.508000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.508000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:45.508000 audit: BPF prog-id=167 op=LOAD Sep 10 01:11:45.508000 audit[3644]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003dc138 items=0 ppid=3631 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.508000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762653262623138333138346537393639306562333332613533383234 Sep 10 01:11:45.511002 systemd-resolved[1193]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 01:11:45.505000 audit[3657]: NETFILTER_CFG table=filter:103 family=2 entries=59 op=nft_register_chain pid=3657 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 01:11:45.505000 audit[3657]: SYSCALL arch=c000003e syscall=46 success=yes exit=35860 a0=3 a1=7ffcde38b900 a2=0 a3=7ffcde38b8ec items=0 ppid=3411 pid=3657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:45.505000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 01:11:45.530925 env[1267]: time="2025-09-10T01:11:45.530900391Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5749f8c7fd-7bgh4,Uid:48c970bb-71ad-41ba-a3c0-778a2f3427c9,Namespace:calico-system,Attempt:0,} returns sandbox id \"7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b\"" Sep 10 01:11:45.531932 env[1267]: time="2025-09-10T01:11:45.531918678Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\"" Sep 10 01:11:45.564519 env[1267]: time="2025-09-10T01:11:45.564496579Z" level=info msg="StopPodSandbox for \"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\"" Sep 10 01:11:45.564690 env[1267]: time="2025-09-10T01:11:45.564503062Z" level=info msg="StopPodSandbox for \"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\"" Sep 10 01:11:45.817209 env[1267]: 2025-09-10 01:11:45.775 [INFO][3699] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Sep 10 01:11:45.817209 env[1267]: 2025-09-10 01:11:45.775 [INFO][3699] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" iface="eth0" netns="/var/run/netns/cni-68c419cc-8f0d-7fef-64f3-e026b78da8cb" Sep 10 01:11:45.817209 env[1267]: 2025-09-10 01:11:45.776 [INFO][3699] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" iface="eth0" netns="/var/run/netns/cni-68c419cc-8f0d-7fef-64f3-e026b78da8cb" Sep 10 01:11:45.817209 env[1267]: 2025-09-10 01:11:45.776 [INFO][3699] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" iface="eth0" netns="/var/run/netns/cni-68c419cc-8f0d-7fef-64f3-e026b78da8cb" Sep 10 01:11:45.817209 env[1267]: 2025-09-10 01:11:45.776 [INFO][3699] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Sep 10 01:11:45.817209 env[1267]: 2025-09-10 01:11:45.776 [INFO][3699] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Sep 10 01:11:45.817209 env[1267]: 2025-09-10 01:11:45.805 [INFO][3712] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" HandleID="k8s-pod-network.4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Workload="localhost-k8s-goldmane--54d579b49d--ndnrv-eth0" Sep 10 01:11:45.817209 env[1267]: 2025-09-10 01:11:45.805 [INFO][3712] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:11:45.817209 env[1267]: 2025-09-10 01:11:45.805 [INFO][3712] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:11:45.817209 env[1267]: 2025-09-10 01:11:45.809 [WARNING][3712] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" HandleID="k8s-pod-network.4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Workload="localhost-k8s-goldmane--54d579b49d--ndnrv-eth0" Sep 10 01:11:45.817209 env[1267]: 2025-09-10 01:11:45.809 [INFO][3712] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" HandleID="k8s-pod-network.4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Workload="localhost-k8s-goldmane--54d579b49d--ndnrv-eth0" Sep 10 01:11:45.817209 env[1267]: 2025-09-10 01:11:45.810 [INFO][3712] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:11:45.817209 env[1267]: 2025-09-10 01:11:45.813 [INFO][3699] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Sep 10 01:11:45.824812 env[1267]: time="2025-09-10T01:11:45.817676068Z" level=info msg="TearDown network for sandbox \"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\" successfully" Sep 10 01:11:45.824812 env[1267]: time="2025-09-10T01:11:45.817699727Z" level=info msg="StopPodSandbox for \"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\" returns successfully" Sep 10 01:11:45.824812 env[1267]: time="2025-09-10T01:11:45.818134921Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-ndnrv,Uid:a03727ef-5eb3-4502-ae0d-e1b45ce2893c,Namespace:calico-system,Attempt:1,}" Sep 10 01:11:45.834170 env[1267]: 2025-09-10 01:11:45.796 [INFO][3698] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Sep 10 01:11:45.834170 env[1267]: 2025-09-10 01:11:45.796 [INFO][3698] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" iface="eth0" netns="/var/run/netns/cni-70340657-27ad-3753-dd2f-bb58e7d663d0" Sep 10 01:11:45.834170 env[1267]: 2025-09-10 01:11:45.796 [INFO][3698] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" iface="eth0" netns="/var/run/netns/cni-70340657-27ad-3753-dd2f-bb58e7d663d0" Sep 10 01:11:45.834170 env[1267]: 2025-09-10 01:11:45.796 [INFO][3698] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" iface="eth0" netns="/var/run/netns/cni-70340657-27ad-3753-dd2f-bb58e7d663d0" Sep 10 01:11:45.834170 env[1267]: 2025-09-10 01:11:45.796 [INFO][3698] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Sep 10 01:11:45.834170 env[1267]: 2025-09-10 01:11:45.796 [INFO][3698] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Sep 10 01:11:45.834170 env[1267]: 2025-09-10 01:11:45.824 [INFO][3717] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" HandleID="k8s-pod-network.e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Workload="localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0" Sep 10 01:11:45.834170 env[1267]: 2025-09-10 01:11:45.824 [INFO][3717] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:11:45.834170 env[1267]: 2025-09-10 01:11:45.824 [INFO][3717] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:11:45.834170 env[1267]: 2025-09-10 01:11:45.829 [WARNING][3717] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" HandleID="k8s-pod-network.e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Workload="localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0" Sep 10 01:11:45.834170 env[1267]: 2025-09-10 01:11:45.829 [INFO][3717] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" HandleID="k8s-pod-network.e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Workload="localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0" Sep 10 01:11:45.834170 env[1267]: 2025-09-10 01:11:45.831 [INFO][3717] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:11:45.834170 env[1267]: 2025-09-10 01:11:45.832 [INFO][3698] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Sep 10 01:11:45.834563 env[1267]: time="2025-09-10T01:11:45.834274447Z" level=info msg="TearDown network for sandbox \"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\" successfully" Sep 10 01:11:45.834563 env[1267]: time="2025-09-10T01:11:45.834294912Z" level=info msg="StopPodSandbox for \"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\" returns successfully" Sep 10 01:11:45.839798 env[1267]: time="2025-09-10T01:11:45.835018700Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64564cc5c9-lj22c,Uid:d71d6edf-1c94-4b55-bcb5-1de17de53829,Namespace:calico-apiserver,Attempt:1,}" Sep 10 01:11:46.087371 systemd[1]: run-netns-cni\x2d70340657\x2d27ad\x2d3753\x2ddd2f\x2dbb58e7d663d0.mount: Deactivated successfully. Sep 10 01:11:46.087429 systemd[1]: run-netns-cni\x2d68c419cc\x2d8f0d\x2d7fef\x2d64f3\x2de026b78da8cb.mount: Deactivated successfully. Sep 10 01:11:46.099068 systemd-networkd[1063]: cali79df89b929f: Link UP Sep 10 01:11:46.101620 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 10 01:11:46.101664 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali79df89b929f: link becomes ready Sep 10 01:11:46.101740 systemd-networkd[1063]: cali79df89b929f: Gained carrier Sep 10 01:11:46.112804 env[1267]: 2025-09-10 01:11:46.030 [INFO][3725] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--54d579b49d--ndnrv-eth0 goldmane-54d579b49d- calico-system a03727ef-5eb3-4502-ae0d-e1b45ce2893c 925 0 2025-09-10 01:11:19 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:54d579b49d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-54d579b49d-ndnrv eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali79df89b929f [] [] }} ContainerID="baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93" Namespace="calico-system" Pod="goldmane-54d579b49d-ndnrv" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--ndnrv-" Sep 10 01:11:46.112804 env[1267]: 2025-09-10 01:11:46.030 [INFO][3725] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93" Namespace="calico-system" Pod="goldmane-54d579b49d-ndnrv" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--ndnrv-eth0" Sep 10 01:11:46.112804 env[1267]: 2025-09-10 01:11:46.053 [INFO][3751] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93" HandleID="k8s-pod-network.baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93" Workload="localhost-k8s-goldmane--54d579b49d--ndnrv-eth0" Sep 10 01:11:46.112804 env[1267]: 2025-09-10 01:11:46.053 [INFO][3751] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93" HandleID="k8s-pod-network.baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93" Workload="localhost-k8s-goldmane--54d579b49d--ndnrv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00025b610), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-54d579b49d-ndnrv", "timestamp":"2025-09-10 01:11:46.053714272 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 01:11:46.112804 env[1267]: 2025-09-10 01:11:46.053 [INFO][3751] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:11:46.112804 env[1267]: 2025-09-10 01:11:46.053 [INFO][3751] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:11:46.112804 env[1267]: 2025-09-10 01:11:46.053 [INFO][3751] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 01:11:46.112804 env[1267]: 2025-09-10 01:11:46.062 [INFO][3751] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93" host="localhost" Sep 10 01:11:46.112804 env[1267]: 2025-09-10 01:11:46.065 [INFO][3751] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 01:11:46.112804 env[1267]: 2025-09-10 01:11:46.067 [INFO][3751] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 01:11:46.112804 env[1267]: 2025-09-10 01:11:46.068 [INFO][3751] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 01:11:46.112804 env[1267]: 2025-09-10 01:11:46.072 [INFO][3751] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 01:11:46.112804 env[1267]: 2025-09-10 01:11:46.072 [INFO][3751] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93" host="localhost" Sep 10 01:11:46.112804 env[1267]: 2025-09-10 01:11:46.073 [INFO][3751] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93 Sep 10 01:11:46.112804 env[1267]: 2025-09-10 01:11:46.076 [INFO][3751] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93" host="localhost" Sep 10 01:11:46.112804 env[1267]: 2025-09-10 01:11:46.079 [INFO][3751] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93" host="localhost" Sep 10 01:11:46.112804 env[1267]: 2025-09-10 01:11:46.079 [INFO][3751] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93" host="localhost" Sep 10 01:11:46.112804 env[1267]: 2025-09-10 01:11:46.079 [INFO][3751] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:11:46.112804 env[1267]: 2025-09-10 01:11:46.079 [INFO][3751] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93" HandleID="k8s-pod-network.baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93" Workload="localhost-k8s-goldmane--54d579b49d--ndnrv-eth0" Sep 10 01:11:46.113446 env[1267]: 2025-09-10 01:11:46.082 [INFO][3725] cni-plugin/k8s.go 418: Populated endpoint ContainerID="baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93" Namespace="calico-system" Pod="goldmane-54d579b49d-ndnrv" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--ndnrv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--54d579b49d--ndnrv-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"a03727ef-5eb3-4502-ae0d-e1b45ce2893c", ResourceVersion:"925", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-54d579b49d-ndnrv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali79df89b929f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:11:46.113446 env[1267]: 2025-09-10 01:11:46.082 [INFO][3725] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93" Namespace="calico-system" Pod="goldmane-54d579b49d-ndnrv" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--ndnrv-eth0" Sep 10 01:11:46.113446 env[1267]: 2025-09-10 01:11:46.082 [INFO][3725] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali79df89b929f ContainerID="baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93" Namespace="calico-system" Pod="goldmane-54d579b49d-ndnrv" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--ndnrv-eth0" Sep 10 01:11:46.113446 env[1267]: 2025-09-10 01:11:46.102 [INFO][3725] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93" Namespace="calico-system" Pod="goldmane-54d579b49d-ndnrv" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--ndnrv-eth0" Sep 10 01:11:46.113446 env[1267]: 2025-09-10 01:11:46.102 [INFO][3725] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93" Namespace="calico-system" Pod="goldmane-54d579b49d-ndnrv" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--ndnrv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--54d579b49d--ndnrv-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"a03727ef-5eb3-4502-ae0d-e1b45ce2893c", ResourceVersion:"925", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93", Pod:"goldmane-54d579b49d-ndnrv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali79df89b929f", MAC:"06:d7:52:82:51:42", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:11:46.113446 env[1267]: 2025-09-10 01:11:46.108 [INFO][3725] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93" Namespace="calico-system" Pod="goldmane-54d579b49d-ndnrv" WorkloadEndpoint="localhost-k8s-goldmane--54d579b49d--ndnrv-eth0" Sep 10 01:11:46.125949 env[1267]: time="2025-09-10T01:11:46.125909818Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 01:11:46.126142 env[1267]: time="2025-09-10T01:11:46.126126012Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 01:11:46.126209 env[1267]: time="2025-09-10T01:11:46.126196372Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 01:11:46.126366 env[1267]: time="2025-09-10T01:11:46.126350646Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93 pid=3781 runtime=io.containerd.runc.v2 Sep 10 01:11:46.133000 audit[3791]: NETFILTER_CFG table=filter:104 family=2 entries=44 op=nft_register_chain pid=3791 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 01:11:46.133000 audit[3791]: SYSCALL arch=c000003e syscall=46 success=yes exit=25180 a0=3 a1=7ffd81c53400 a2=0 a3=7ffd81c533ec items=0 ppid=3411 pid=3791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.133000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 01:11:46.140718 systemd[1]: Started cri-containerd-baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93.scope. Sep 10 01:11:46.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit: BPF prog-id=168 op=LOAD Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { bpf } for pid=3790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3781 pid=3790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261663439666263353565376235303464346263623962613361333638 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { perfmon } for pid=3790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3781 pid=3790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261663439666263353565376235303464346263623962613361333638 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { bpf } for pid=3790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { bpf } for pid=3790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { bpf } for pid=3790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { perfmon } for pid=3790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { perfmon } for pid=3790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { perfmon } for pid=3790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { perfmon } for pid=3790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { perfmon } for pid=3790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { bpf } for pid=3790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { bpf } for pid=3790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit: BPF prog-id=169 op=LOAD Sep 10 01:11:46.154000 audit[3790]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00030f660 items=0 ppid=3781 pid=3790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261663439666263353565376235303464346263623962613361333638 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { bpf } for pid=3790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { bpf } for pid=3790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { perfmon } for pid=3790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { perfmon } for pid=3790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { perfmon } for pid=3790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { perfmon } for pid=3790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { perfmon } for pid=3790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { bpf } for pid=3790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { bpf } for pid=3790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit: BPF prog-id=170 op=LOAD Sep 10 01:11:46.154000 audit[3790]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00030f6a8 items=0 ppid=3781 pid=3790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261663439666263353565376235303464346263623962613361333638 Sep 10 01:11:46.154000 audit: BPF prog-id=170 op=UNLOAD Sep 10 01:11:46.154000 audit: BPF prog-id=169 op=UNLOAD Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { bpf } for pid=3790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { bpf } for pid=3790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { bpf } for pid=3790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { perfmon } for pid=3790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { perfmon } for pid=3790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { perfmon } for pid=3790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { perfmon } for pid=3790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { perfmon } for pid=3790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { bpf } for pid=3790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit[3790]: AVC avc: denied { bpf } for pid=3790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.154000 audit: BPF prog-id=171 op=LOAD Sep 10 01:11:46.154000 audit[3790]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00030fab8 items=0 ppid=3781 pid=3790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261663439666263353565376235303464346263623962613361333638 Sep 10 01:11:46.156700 systemd-resolved[1193]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 01:11:46.185335 env[1267]: time="2025-09-10T01:11:46.184584503Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-ndnrv,Uid:a03727ef-5eb3-4502-ae0d-e1b45ce2893c,Namespace:calico-system,Attempt:1,} returns sandbox id \"baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93\"" Sep 10 01:11:46.196809 systemd-networkd[1063]: calibc5271a554e: Link UP Sep 10 01:11:46.198398 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calibc5271a554e: link becomes ready Sep 10 01:11:46.198485 systemd-networkd[1063]: calibc5271a554e: Gained carrier Sep 10 01:11:46.207549 env[1267]: 2025-09-10 01:11:46.039 [INFO][3726] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0 calico-apiserver-64564cc5c9- calico-apiserver d71d6edf-1c94-4b55-bcb5-1de17de53829 926 0 2025-09-10 01:11:18 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:64564cc5c9 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-64564cc5c9-lj22c eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calibc5271a554e [] [] }} ContainerID="2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167" Namespace="calico-apiserver" Pod="calico-apiserver-64564cc5c9-lj22c" WorkloadEndpoint="localhost-k8s-calico--apiserver--64564cc5c9--lj22c-" Sep 10 01:11:46.207549 env[1267]: 2025-09-10 01:11:46.039 [INFO][3726] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167" Namespace="calico-apiserver" Pod="calico-apiserver-64564cc5c9-lj22c" WorkloadEndpoint="localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0" Sep 10 01:11:46.207549 env[1267]: 2025-09-10 01:11:46.073 [INFO][3757] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167" HandleID="k8s-pod-network.2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167" Workload="localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0" Sep 10 01:11:46.207549 env[1267]: 2025-09-10 01:11:46.073 [INFO][3757] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167" HandleID="k8s-pod-network.2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167" Workload="localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd020), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-64564cc5c9-lj22c", "timestamp":"2025-09-10 01:11:46.073290914 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 01:11:46.207549 env[1267]: 2025-09-10 01:11:46.073 [INFO][3757] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:11:46.207549 env[1267]: 2025-09-10 01:11:46.080 [INFO][3757] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:11:46.207549 env[1267]: 2025-09-10 01:11:46.080 [INFO][3757] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 01:11:46.207549 env[1267]: 2025-09-10 01:11:46.162 [INFO][3757] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167" host="localhost" Sep 10 01:11:46.207549 env[1267]: 2025-09-10 01:11:46.168 [INFO][3757] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 01:11:46.207549 env[1267]: 2025-09-10 01:11:46.174 [INFO][3757] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 01:11:46.207549 env[1267]: 2025-09-10 01:11:46.181 [INFO][3757] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 01:11:46.207549 env[1267]: 2025-09-10 01:11:46.182 [INFO][3757] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 01:11:46.207549 env[1267]: 2025-09-10 01:11:46.182 [INFO][3757] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167" host="localhost" Sep 10 01:11:46.207549 env[1267]: 2025-09-10 01:11:46.185 [INFO][3757] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167 Sep 10 01:11:46.207549 env[1267]: 2025-09-10 01:11:46.189 [INFO][3757] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167" host="localhost" Sep 10 01:11:46.207549 env[1267]: 2025-09-10 01:11:46.192 [INFO][3757] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167" host="localhost" Sep 10 01:11:46.207549 env[1267]: 2025-09-10 01:11:46.192 [INFO][3757] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167" host="localhost" Sep 10 01:11:46.207549 env[1267]: 2025-09-10 01:11:46.192 [INFO][3757] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:11:46.207549 env[1267]: 2025-09-10 01:11:46.192 [INFO][3757] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167" HandleID="k8s-pod-network.2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167" Workload="localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0" Sep 10 01:11:46.208610 env[1267]: 2025-09-10 01:11:46.194 [INFO][3726] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167" Namespace="calico-apiserver" Pod="calico-apiserver-64564cc5c9-lj22c" WorkloadEndpoint="localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0", GenerateName:"calico-apiserver-64564cc5c9-", Namespace:"calico-apiserver", SelfLink:"", UID:"d71d6edf-1c94-4b55-bcb5-1de17de53829", ResourceVersion:"926", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64564cc5c9", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-64564cc5c9-lj22c", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibc5271a554e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:11:46.208610 env[1267]: 2025-09-10 01:11:46.194 [INFO][3726] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167" Namespace="calico-apiserver" Pod="calico-apiserver-64564cc5c9-lj22c" WorkloadEndpoint="localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0" Sep 10 01:11:46.208610 env[1267]: 2025-09-10 01:11:46.194 [INFO][3726] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calibc5271a554e ContainerID="2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167" Namespace="calico-apiserver" Pod="calico-apiserver-64564cc5c9-lj22c" WorkloadEndpoint="localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0" Sep 10 01:11:46.208610 env[1267]: 2025-09-10 01:11:46.199 [INFO][3726] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167" Namespace="calico-apiserver" Pod="calico-apiserver-64564cc5c9-lj22c" WorkloadEndpoint="localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0" Sep 10 01:11:46.208610 env[1267]: 2025-09-10 01:11:46.199 [INFO][3726] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167" Namespace="calico-apiserver" Pod="calico-apiserver-64564cc5c9-lj22c" WorkloadEndpoint="localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0", GenerateName:"calico-apiserver-64564cc5c9-", Namespace:"calico-apiserver", SelfLink:"", UID:"d71d6edf-1c94-4b55-bcb5-1de17de53829", ResourceVersion:"926", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64564cc5c9", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167", Pod:"calico-apiserver-64564cc5c9-lj22c", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibc5271a554e", MAC:"06:0e:3f:11:8a:13", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:11:46.208610 env[1267]: 2025-09-10 01:11:46.205 [INFO][3726] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167" Namespace="calico-apiserver" Pod="calico-apiserver-64564cc5c9-lj22c" WorkloadEndpoint="localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0" Sep 10 01:11:46.215168 env[1267]: time="2025-09-10T01:11:46.215120472Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 01:11:46.215373 env[1267]: time="2025-09-10T01:11:46.215157812Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 01:11:46.215373 env[1267]: time="2025-09-10T01:11:46.215164993Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 01:11:46.215373 env[1267]: time="2025-09-10T01:11:46.215281128Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167 pid=3827 runtime=io.containerd.runc.v2 Sep 10 01:11:46.228120 systemd[1]: Started cri-containerd-2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167.scope. Sep 10 01:11:46.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.237000 audit: BPF prog-id=172 op=LOAD Sep 10 01:11:46.238000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.238000 audit[3837]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3827 pid=3837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265326361376239626431306562346538393439633937386138303661 Sep 10 01:11:46.238000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.238000 audit[3837]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3827 pid=3837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265326361376239626431306562346538393439633937386138303661 Sep 10 01:11:46.238000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.238000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.238000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.238000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.238000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.238000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.238000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.238000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.238000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.238000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.238000 audit: BPF prog-id=173 op=LOAD Sep 10 01:11:46.238000 audit[3837]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000261ce0 items=0 ppid=3827 pid=3837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265326361376239626431306562346538393439633937386138303661 Sep 10 01:11:46.238000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.238000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.238000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.238000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.238000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.238000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.238000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.238000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.238000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.238000 audit: BPF prog-id=174 op=LOAD Sep 10 01:11:46.238000 audit[3837]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000261d28 items=0 ppid=3827 pid=3837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265326361376239626431306562346538393439633937386138303661 Sep 10 01:11:46.239000 audit: BPF prog-id=174 op=UNLOAD Sep 10 01:11:46.239000 audit: BPF prog-id=173 op=UNLOAD Sep 10 01:11:46.239000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.239000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.239000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.239000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.239000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.239000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.239000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.239000 audit[3837]: AVC avc: denied { perfmon } for pid=3837 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.239000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.239000 audit[3837]: AVC avc: denied { bpf } for pid=3837 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.239000 audit: BPF prog-id=175 op=LOAD Sep 10 01:11:46.239000 audit[3837]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000364138 items=0 ppid=3827 pid=3837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.239000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265326361376239626431306562346538393439633937386138303661 Sep 10 01:11:46.241715 systemd-resolved[1193]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 01:11:46.262023 env[1267]: time="2025-09-10T01:11:46.261996233Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64564cc5c9-lj22c,Uid:d71d6edf-1c94-4b55-bcb5-1de17de53829,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167\"" Sep 10 01:11:46.267000 audit[3863]: NETFILTER_CFG table=filter:105 family=2 entries=54 op=nft_register_chain pid=3863 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 01:11:46.267000 audit[3863]: SYSCALL arch=c000003e syscall=46 success=yes exit=29396 a0=3 a1=7ffd1aa14410 a2=0 a3=7ffd1aa143fc items=0 ppid=3411 pid=3863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.267000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 01:11:46.583468 kubelet[2111]: I0910 01:11:46.583392 2111 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="4740b723-6bb8-4cda-a3af-27027890eb9b" path="/var/lib/kubelet/pods/4740b723-6bb8-4cda-a3af-27027890eb9b/volumes" Sep 10 01:11:46.588870 env[1267]: time="2025-09-10T01:11:46.588845266Z" level=info msg="StopPodSandbox for \"56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4\"" Sep 10 01:11:46.590863 env[1267]: time="2025-09-10T01:11:46.590842568Z" level=info msg="StopPodSandbox for \"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\"" Sep 10 01:11:46.604526 systemd-networkd[1063]: cali887d2d46377: Gained IPv6LL Sep 10 01:11:46.665690 env[1267]: 2025-09-10 01:11:46.636 [INFO][3887] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" Sep 10 01:11:46.665690 env[1267]: 2025-09-10 01:11:46.636 [INFO][3887] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" iface="eth0" netns="/var/run/netns/cni-52cd8f5d-6185-e865-de86-99e3d4eaa98d" Sep 10 01:11:46.665690 env[1267]: 2025-09-10 01:11:46.636 [INFO][3887] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" iface="eth0" netns="/var/run/netns/cni-52cd8f5d-6185-e865-de86-99e3d4eaa98d" Sep 10 01:11:46.665690 env[1267]: 2025-09-10 01:11:46.636 [INFO][3887] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" iface="eth0" netns="/var/run/netns/cni-52cd8f5d-6185-e865-de86-99e3d4eaa98d" Sep 10 01:11:46.665690 env[1267]: 2025-09-10 01:11:46.636 [INFO][3887] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" Sep 10 01:11:46.665690 env[1267]: 2025-09-10 01:11:46.636 [INFO][3887] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" Sep 10 01:11:46.665690 env[1267]: 2025-09-10 01:11:46.656 [INFO][3901] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" HandleID="k8s-pod-network.56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" Workload="localhost-k8s-csi--node--driver--588jm-eth0" Sep 10 01:11:46.665690 env[1267]: 2025-09-10 01:11:46.656 [INFO][3901] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:11:46.665690 env[1267]: 2025-09-10 01:11:46.656 [INFO][3901] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:11:46.665690 env[1267]: 2025-09-10 01:11:46.660 [WARNING][3901] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" HandleID="k8s-pod-network.56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" Workload="localhost-k8s-csi--node--driver--588jm-eth0" Sep 10 01:11:46.665690 env[1267]: 2025-09-10 01:11:46.660 [INFO][3901] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" HandleID="k8s-pod-network.56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" Workload="localhost-k8s-csi--node--driver--588jm-eth0" Sep 10 01:11:46.665690 env[1267]: 2025-09-10 01:11:46.663 [INFO][3901] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:11:46.665690 env[1267]: 2025-09-10 01:11:46.664 [INFO][3887] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" Sep 10 01:11:46.666050 env[1267]: time="2025-09-10T01:11:46.665811724Z" level=info msg="TearDown network for sandbox \"56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4\" successfully" Sep 10 01:11:46.666050 env[1267]: time="2025-09-10T01:11:46.665838812Z" level=info msg="StopPodSandbox for \"56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4\" returns successfully" Sep 10 01:11:46.666445 systemd-networkd[1063]: vxlan.calico: Gained IPv6LL Sep 10 01:11:46.667110 env[1267]: time="2025-09-10T01:11:46.667095440Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-588jm,Uid:433ded13-351c-45da-a35c-464e9f991379,Namespace:calico-system,Attempt:1,}" Sep 10 01:11:46.684598 env[1267]: 2025-09-10 01:11:46.644 [INFO][3892] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Sep 10 01:11:46.684598 env[1267]: 2025-09-10 01:11:46.644 [INFO][3892] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" iface="eth0" netns="/var/run/netns/cni-8abeb367-0137-5b3b-4021-6a4a584d50bc" Sep 10 01:11:46.684598 env[1267]: 2025-09-10 01:11:46.644 [INFO][3892] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" iface="eth0" netns="/var/run/netns/cni-8abeb367-0137-5b3b-4021-6a4a584d50bc" Sep 10 01:11:46.684598 env[1267]: 2025-09-10 01:11:46.644 [INFO][3892] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" iface="eth0" netns="/var/run/netns/cni-8abeb367-0137-5b3b-4021-6a4a584d50bc" Sep 10 01:11:46.684598 env[1267]: 2025-09-10 01:11:46.644 [INFO][3892] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Sep 10 01:11:46.684598 env[1267]: 2025-09-10 01:11:46.645 [INFO][3892] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Sep 10 01:11:46.684598 env[1267]: 2025-09-10 01:11:46.672 [INFO][3906] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" HandleID="k8s-pod-network.95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Workload="localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0" Sep 10 01:11:46.684598 env[1267]: 2025-09-10 01:11:46.673 [INFO][3906] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:11:46.684598 env[1267]: 2025-09-10 01:11:46.673 [INFO][3906] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:11:46.684598 env[1267]: 2025-09-10 01:11:46.680 [WARNING][3906] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" HandleID="k8s-pod-network.95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Workload="localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0" Sep 10 01:11:46.684598 env[1267]: 2025-09-10 01:11:46.680 [INFO][3906] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" HandleID="k8s-pod-network.95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Workload="localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0" Sep 10 01:11:46.684598 env[1267]: 2025-09-10 01:11:46.681 [INFO][3906] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:11:46.684598 env[1267]: 2025-09-10 01:11:46.683 [INFO][3892] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Sep 10 01:11:46.684987 env[1267]: time="2025-09-10T01:11:46.684704780Z" level=info msg="TearDown network for sandbox \"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\" successfully" Sep 10 01:11:46.684987 env[1267]: time="2025-09-10T01:11:46.684731723Z" level=info msg="StopPodSandbox for \"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\" returns successfully" Sep 10 01:11:46.685406 env[1267]: time="2025-09-10T01:11:46.685388709Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-65f67d55cc-tx6qp,Uid:a8ed0f6a-7272-404d-b5b2-53b42e84380c,Namespace:calico-apiserver,Attempt:1,}" Sep 10 01:11:46.756518 systemd-networkd[1063]: calia7d0254bcac: Link UP Sep 10 01:11:46.757911 systemd-networkd[1063]: calia7d0254bcac: Gained carrier Sep 10 01:11:46.758381 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia7d0254bcac: link becomes ready Sep 10 01:11:46.773545 env[1267]: 2025-09-10 01:11:46.703 [INFO][3914] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--588jm-eth0 csi-node-driver- calico-system 433ded13-351c-45da-a35c-464e9f991379 938 0 2025-09-10 01:11:20 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:6c96d95cc7 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-588jm eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calia7d0254bcac [] [] }} ContainerID="08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a" Namespace="calico-system" Pod="csi-node-driver-588jm" WorkloadEndpoint="localhost-k8s-csi--node--driver--588jm-" Sep 10 01:11:46.773545 env[1267]: 2025-09-10 01:11:46.703 [INFO][3914] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a" Namespace="calico-system" Pod="csi-node-driver-588jm" WorkloadEndpoint="localhost-k8s-csi--node--driver--588jm-eth0" Sep 10 01:11:46.773545 env[1267]: 2025-09-10 01:11:46.734 [INFO][3937] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a" HandleID="k8s-pod-network.08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a" Workload="localhost-k8s-csi--node--driver--588jm-eth0" Sep 10 01:11:46.773545 env[1267]: 2025-09-10 01:11:46.734 [INFO][3937] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a" HandleID="k8s-pod-network.08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a" Workload="localhost-k8s-csi--node--driver--588jm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd600), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-588jm", "timestamp":"2025-09-10 01:11:46.734033507 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 01:11:46.773545 env[1267]: 2025-09-10 01:11:46.734 [INFO][3937] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:11:46.773545 env[1267]: 2025-09-10 01:11:46.734 [INFO][3937] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:11:46.773545 env[1267]: 2025-09-10 01:11:46.734 [INFO][3937] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 01:11:46.773545 env[1267]: 2025-09-10 01:11:46.739 [INFO][3937] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a" host="localhost" Sep 10 01:11:46.773545 env[1267]: 2025-09-10 01:11:46.741 [INFO][3937] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 01:11:46.773545 env[1267]: 2025-09-10 01:11:46.743 [INFO][3937] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 01:11:46.773545 env[1267]: 2025-09-10 01:11:46.744 [INFO][3937] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 01:11:46.773545 env[1267]: 2025-09-10 01:11:46.745 [INFO][3937] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 01:11:46.773545 env[1267]: 2025-09-10 01:11:46.745 [INFO][3937] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a" host="localhost" Sep 10 01:11:46.773545 env[1267]: 2025-09-10 01:11:46.746 [INFO][3937] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a Sep 10 01:11:46.773545 env[1267]: 2025-09-10 01:11:46.749 [INFO][3937] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a" host="localhost" Sep 10 01:11:46.773545 env[1267]: 2025-09-10 01:11:46.752 [INFO][3937] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a" host="localhost" Sep 10 01:11:46.773545 env[1267]: 2025-09-10 01:11:46.752 [INFO][3937] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a" host="localhost" Sep 10 01:11:46.773545 env[1267]: 2025-09-10 01:11:46.752 [INFO][3937] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:11:46.773545 env[1267]: 2025-09-10 01:11:46.752 [INFO][3937] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a" HandleID="k8s-pod-network.08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a" Workload="localhost-k8s-csi--node--driver--588jm-eth0" Sep 10 01:11:46.774242 env[1267]: 2025-09-10 01:11:46.754 [INFO][3914] cni-plugin/k8s.go 418: Populated endpoint ContainerID="08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a" Namespace="calico-system" Pod="csi-node-driver-588jm" WorkloadEndpoint="localhost-k8s-csi--node--driver--588jm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--588jm-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"433ded13-351c-45da-a35c-464e9f991379", ResourceVersion:"938", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-588jm", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calia7d0254bcac", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:11:46.774242 env[1267]: 2025-09-10 01:11:46.754 [INFO][3914] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a" Namespace="calico-system" Pod="csi-node-driver-588jm" WorkloadEndpoint="localhost-k8s-csi--node--driver--588jm-eth0" Sep 10 01:11:46.774242 env[1267]: 2025-09-10 01:11:46.754 [INFO][3914] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia7d0254bcac ContainerID="08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a" Namespace="calico-system" Pod="csi-node-driver-588jm" WorkloadEndpoint="localhost-k8s-csi--node--driver--588jm-eth0" Sep 10 01:11:46.774242 env[1267]: 2025-09-10 01:11:46.758 [INFO][3914] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a" Namespace="calico-system" Pod="csi-node-driver-588jm" WorkloadEndpoint="localhost-k8s-csi--node--driver--588jm-eth0" Sep 10 01:11:46.774242 env[1267]: 2025-09-10 01:11:46.758 [INFO][3914] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a" Namespace="calico-system" Pod="csi-node-driver-588jm" WorkloadEndpoint="localhost-k8s-csi--node--driver--588jm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--588jm-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"433ded13-351c-45da-a35c-464e9f991379", ResourceVersion:"938", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a", Pod:"csi-node-driver-588jm", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calia7d0254bcac", MAC:"ce:39:d5:98:a3:9a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:11:46.774242 env[1267]: 2025-09-10 01:11:46.769 [INFO][3914] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a" Namespace="calico-system" Pod="csi-node-driver-588jm" WorkloadEndpoint="localhost-k8s-csi--node--driver--588jm-eth0" Sep 10 01:11:46.776000 audit[3956]: NETFILTER_CFG table=filter:106 family=2 entries=44 op=nft_register_chain pid=3956 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 01:11:46.776000 audit[3956]: SYSCALL arch=c000003e syscall=46 success=yes exit=21952 a0=3 a1=7fff3c326410 a2=0 a3=7fff3c3263fc items=0 ppid=3411 pid=3956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.776000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 01:11:46.788038 env[1267]: time="2025-09-10T01:11:46.787919668Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 01:11:46.788038 env[1267]: time="2025-09-10T01:11:46.787948294Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 01:11:46.788038 env[1267]: time="2025-09-10T01:11:46.787955314Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 01:11:46.788181 env[1267]: time="2025-09-10T01:11:46.788059915Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a pid=3967 runtime=io.containerd.runc.v2 Sep 10 01:11:46.795194 systemd[1]: Started cri-containerd-08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a.scope. Sep 10 01:11:46.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.808000 audit: BPF prog-id=176 op=LOAD Sep 10 01:11:46.808000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.808000 audit[3978]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=3967 pid=3978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.808000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038616232353534383461386635643436323963623135386637386539 Sep 10 01:11:46.809000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.809000 audit[3978]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=c items=0 ppid=3967 pid=3978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038616232353534383461386635643436323963623135386637386539 Sep 10 01:11:46.809000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.809000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.809000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.809000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.809000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.809000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.809000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.809000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.809000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.809000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.809000 audit: BPF prog-id=177 op=LOAD Sep 10 01:11:46.809000 audit[3978]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c00031e800 items=0 ppid=3967 pid=3978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038616232353534383461386635643436323963623135386637386539 Sep 10 01:11:46.809000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.809000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.809000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.809000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.809000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.809000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.809000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.809000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.809000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.809000 audit: BPF prog-id=178 op=LOAD Sep 10 01:11:46.809000 audit[3978]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c00031e848 items=0 ppid=3967 pid=3978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038616232353534383461386635643436323963623135386637386539 Sep 10 01:11:46.809000 audit: BPF prog-id=178 op=UNLOAD Sep 10 01:11:46.810000 audit: BPF prog-id=177 op=UNLOAD Sep 10 01:11:46.810000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.810000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.810000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.810000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.810000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.810000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.810000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.810000 audit[3978]: AVC avc: denied { perfmon } for pid=3978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.810000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.810000 audit[3978]: AVC avc: denied { bpf } for pid=3978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.810000 audit: BPF prog-id=179 op=LOAD Sep 10 01:11:46.810000 audit[3978]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c00031ec58 items=0 ppid=3967 pid=3978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.810000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038616232353534383461386635643436323963623135386637386539 Sep 10 01:11:46.812817 systemd-resolved[1193]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 01:11:46.820730 env[1267]: time="2025-09-10T01:11:46.820705964Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-588jm,Uid:433ded13-351c-45da-a35c-464e9f991379,Namespace:calico-system,Attempt:1,} returns sandbox id \"08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a\"" Sep 10 01:11:46.859717 systemd-networkd[1063]: calif7c63bbb2bf: Link UP Sep 10 01:11:46.862410 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif7c63bbb2bf: link becomes ready Sep 10 01:11:46.861250 systemd-networkd[1063]: calif7c63bbb2bf: Gained carrier Sep 10 01:11:46.870307 env[1267]: 2025-09-10 01:11:46.724 [INFO][3924] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0 calico-apiserver-65f67d55cc- calico-apiserver a8ed0f6a-7272-404d-b5b2-53b42e84380c 939 0 2025-09-10 01:11:19 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:65f67d55cc projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-65f67d55cc-tx6qp eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calif7c63bbb2bf [] [] }} ContainerID="53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018" Namespace="calico-apiserver" Pod="calico-apiserver-65f67d55cc-tx6qp" WorkloadEndpoint="localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-" Sep 10 01:11:46.870307 env[1267]: 2025-09-10 01:11:46.724 [INFO][3924] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018" Namespace="calico-apiserver" Pod="calico-apiserver-65f67d55cc-tx6qp" WorkloadEndpoint="localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0" Sep 10 01:11:46.870307 env[1267]: 2025-09-10 01:11:46.760 [INFO][3944] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018" HandleID="k8s-pod-network.53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018" Workload="localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0" Sep 10 01:11:46.870307 env[1267]: 2025-09-10 01:11:46.760 [INFO][3944] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018" HandleID="k8s-pod-network.53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018" Workload="localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00025b2b0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-65f67d55cc-tx6qp", "timestamp":"2025-09-10 01:11:46.760209664 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 01:11:46.870307 env[1267]: 2025-09-10 01:11:46.760 [INFO][3944] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:11:46.870307 env[1267]: 2025-09-10 01:11:46.760 [INFO][3944] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:11:46.870307 env[1267]: 2025-09-10 01:11:46.760 [INFO][3944] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 01:11:46.870307 env[1267]: 2025-09-10 01:11:46.839 [INFO][3944] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018" host="localhost" Sep 10 01:11:46.870307 env[1267]: 2025-09-10 01:11:46.841 [INFO][3944] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 01:11:46.870307 env[1267]: 2025-09-10 01:11:46.843 [INFO][3944] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 01:11:46.870307 env[1267]: 2025-09-10 01:11:46.844 [INFO][3944] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 01:11:46.870307 env[1267]: 2025-09-10 01:11:46.845 [INFO][3944] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 01:11:46.870307 env[1267]: 2025-09-10 01:11:46.845 [INFO][3944] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018" host="localhost" Sep 10 01:11:46.870307 env[1267]: 2025-09-10 01:11:46.846 [INFO][3944] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018 Sep 10 01:11:46.870307 env[1267]: 2025-09-10 01:11:46.848 [INFO][3944] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018" host="localhost" Sep 10 01:11:46.870307 env[1267]: 2025-09-10 01:11:46.850 [INFO][3944] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018" host="localhost" Sep 10 01:11:46.870307 env[1267]: 2025-09-10 01:11:46.850 [INFO][3944] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018" host="localhost" Sep 10 01:11:46.870307 env[1267]: 2025-09-10 01:11:46.850 [INFO][3944] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:11:46.870307 env[1267]: 2025-09-10 01:11:46.850 [INFO][3944] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018" HandleID="k8s-pod-network.53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018" Workload="localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0" Sep 10 01:11:46.870767 env[1267]: 2025-09-10 01:11:46.852 [INFO][3924] cni-plugin/k8s.go 418: Populated endpoint ContainerID="53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018" Namespace="calico-apiserver" Pod="calico-apiserver-65f67d55cc-tx6qp" WorkloadEndpoint="localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0", GenerateName:"calico-apiserver-65f67d55cc-", Namespace:"calico-apiserver", SelfLink:"", UID:"a8ed0f6a-7272-404d-b5b2-53b42e84380c", ResourceVersion:"939", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"65f67d55cc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-65f67d55cc-tx6qp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif7c63bbb2bf", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:11:46.870767 env[1267]: 2025-09-10 01:11:46.852 [INFO][3924] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018" Namespace="calico-apiserver" Pod="calico-apiserver-65f67d55cc-tx6qp" WorkloadEndpoint="localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0" Sep 10 01:11:46.870767 env[1267]: 2025-09-10 01:11:46.852 [INFO][3924] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif7c63bbb2bf ContainerID="53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018" Namespace="calico-apiserver" Pod="calico-apiserver-65f67d55cc-tx6qp" WorkloadEndpoint="localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0" Sep 10 01:11:46.870767 env[1267]: 2025-09-10 01:11:46.861 [INFO][3924] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018" Namespace="calico-apiserver" Pod="calico-apiserver-65f67d55cc-tx6qp" WorkloadEndpoint="localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0" Sep 10 01:11:46.870767 env[1267]: 2025-09-10 01:11:46.861 [INFO][3924] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018" Namespace="calico-apiserver" Pod="calico-apiserver-65f67d55cc-tx6qp" WorkloadEndpoint="localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0", GenerateName:"calico-apiserver-65f67d55cc-", Namespace:"calico-apiserver", SelfLink:"", UID:"a8ed0f6a-7272-404d-b5b2-53b42e84380c", ResourceVersion:"939", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"65f67d55cc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018", Pod:"calico-apiserver-65f67d55cc-tx6qp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif7c63bbb2bf", MAC:"42:04:95:cd:0b:ec", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:11:46.870767 env[1267]: 2025-09-10 01:11:46.868 [INFO][3924] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018" Namespace="calico-apiserver" Pod="calico-apiserver-65f67d55cc-tx6qp" WorkloadEndpoint="localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0" Sep 10 01:11:46.879165 env[1267]: time="2025-09-10T01:11:46.879129875Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 01:11:46.879249 env[1267]: time="2025-09-10T01:11:46.879154391Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 01:11:46.879249 env[1267]: time="2025-09-10T01:11:46.879161601Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 01:11:46.879401 env[1267]: time="2025-09-10T01:11:46.879378409Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018 pid=4014 runtime=io.containerd.runc.v2 Sep 10 01:11:46.886549 systemd[1]: Started cri-containerd-53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018.scope. Sep 10 01:11:46.902466 kernel: kauditd_printk_skb: 830 callbacks suppressed Sep 10 01:11:46.910239 kernel: audit: type=1400 audit(1757466706.897:1210): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.910271 kernel: audit: type=1400 audit(1757466706.897:1211): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.910285 kernel: audit: type=1400 audit(1757466706.898:1212): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.910299 kernel: audit: type=1400 audit(1757466706.898:1213): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.910234 systemd-resolved[1193]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 01:11:46.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.917732 kernel: audit: type=1400 audit(1757466706.898:1214): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.917765 kernel: audit: type=1400 audit(1757466706.898:1215): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.920223 kernel: audit: type=1400 audit(1757466706.898:1216): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.925560 kernel: audit: type=1400 audit(1757466706.898:1217): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.925594 kernel: audit: type=1400 audit(1757466706.898:1218): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.928049 kernel: audit: type=1400 audit(1757466706.901:1219): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.901000 audit: BPF prog-id=180 op=LOAD Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4014 pid=4022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533626237353634303539313134633331613634303162393739316139 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4014 pid=4022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533626237353634303539313134633331613634303162393739316139 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit: BPF prog-id=181 op=LOAD Sep 10 01:11:46.903000 audit[4022]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000e3ce0 items=0 ppid=4014 pid=4022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533626237353634303539313134633331613634303162393739316139 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit: BPF prog-id=182 op=LOAD Sep 10 01:11:46.903000 audit[4022]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000e3d28 items=0 ppid=4014 pid=4022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533626237353634303539313134633331613634303162393739316139 Sep 10 01:11:46.903000 audit: BPF prog-id=182 op=UNLOAD Sep 10 01:11:46.903000 audit: BPF prog-id=181 op=UNLOAD Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { perfmon } for pid=4022 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit[4022]: AVC avc: denied { bpf } for pid=4022 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:46.903000 audit: BPF prog-id=183 op=LOAD Sep 10 01:11:46.903000 audit[4022]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003e6138 items=0 ppid=4014 pid=4022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533626237353634303539313134633331613634303162393739316139 Sep 10 01:11:46.913000 audit[4043]: NETFILTER_CFG table=filter:107 family=2 entries=49 op=nft_register_chain pid=4043 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 01:11:46.913000 audit[4043]: SYSCALL arch=c000003e syscall=46 success=yes exit=25452 a0=3 a1=7ffd17a32bb0 a2=0 a3=7ffd17a32b9c items=0 ppid=3411 pid=4043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:46.913000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 01:11:46.935964 env[1267]: time="2025-09-10T01:11:46.935942208Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-65f67d55cc-tx6qp,Uid:a8ed0f6a-7272-404d-b5b2-53b42e84380c,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018\"" Sep 10 01:11:47.090739 systemd[1]: run-containerd-runc-k8s.io-2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167-runc.PJa1M7.mount: Deactivated successfully. Sep 10 01:11:47.090816 systemd[1]: run-netns-cni\x2d52cd8f5d\x2d6185\x2de865\x2dde86\x2d99e3d4eaa98d.mount: Deactivated successfully. Sep 10 01:11:47.090865 systemd[1]: run-netns-cni\x2d8abeb367\x2d0137\x2d5b3b\x2d4021\x2d6a4a584d50bc.mount: Deactivated successfully. Sep 10 01:11:47.249495 env[1267]: time="2025-09-10T01:11:47.249466791Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:47.250164 env[1267]: time="2025-09-10T01:11:47.250146736Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9a4eedeed4a531acefb7f5d0a1b7e3856b1a9a24d9e7d25deef2134d7a734c2d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:47.250960 env[1267]: time="2025-09-10T01:11:47.250945737Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:47.251654 env[1267]: time="2025-09-10T01:11:47.251641338Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:e7113761fc7633d515882f0d48b5c8d0b8e62f3f9d34823f2ee194bb16d2ec44,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:47.252004 env[1267]: time="2025-09-10T01:11:47.251990361Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\" returns image reference \"sha256:9a4eedeed4a531acefb7f5d0a1b7e3856b1a9a24d9e7d25deef2134d7a734c2d\"" Sep 10 01:11:47.253781 env[1267]: time="2025-09-10T01:11:47.253304108Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\"" Sep 10 01:11:47.302730 env[1267]: time="2025-09-10T01:11:47.302689062Z" level=info msg="CreateContainer within sandbox \"7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Sep 10 01:11:47.354250 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3711337188.mount: Deactivated successfully. Sep 10 01:11:47.378001 env[1267]: time="2025-09-10T01:11:47.377969287Z" level=info msg="CreateContainer within sandbox \"7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"5a1bb8c040040438361ee88e227d8dbdc66844628b818fb305cb63f11831fdda\"" Sep 10 01:11:47.381359 env[1267]: time="2025-09-10T01:11:47.379437476Z" level=info msg="StartContainer for \"5a1bb8c040040438361ee88e227d8dbdc66844628b818fb305cb63f11831fdda\"" Sep 10 01:11:47.397909 systemd[1]: Started cri-containerd-5a1bb8c040040438361ee88e227d8dbdc66844628b818fb305cb63f11831fdda.scope. Sep 10 01:11:47.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.408000 audit: BPF prog-id=184 op=LOAD Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3631 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:47.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561316262386330343030343034333833363165653838653232376438 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=3631 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:47.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561316262386330343030343034333833363165653838653232376438 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit: BPF prog-id=185 op=LOAD Sep 10 01:11:47.409000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0002d7d10 items=0 ppid=3631 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:47.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561316262386330343030343034333833363165653838653232376438 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit: BPF prog-id=186 op=LOAD Sep 10 01:11:47.409000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0002d7d58 items=0 ppid=3631 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:47.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561316262386330343030343034333833363165653838653232376438 Sep 10 01:11:47.409000 audit: BPF prog-id=186 op=UNLOAD Sep 10 01:11:47.409000 audit: BPF prog-id=185 op=UNLOAD Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.409000 audit: BPF prog-id=187 op=LOAD Sep 10 01:11:47.409000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003c0168 items=0 ppid=3631 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:47.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561316262386330343030343034333833363165653838653232376438 Sep 10 01:11:47.461424 env[1267]: time="2025-09-10T01:11:47.461400189Z" level=info msg="StartContainer for \"5a1bb8c040040438361ee88e227d8dbdc66844628b818fb305cb63f11831fdda\" returns successfully" Sep 10 01:11:47.564708 env[1267]: time="2025-09-10T01:11:47.564630122Z" level=info msg="StopPodSandbox for \"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\"" Sep 10 01:11:47.675000 audit[4068]: AVC avc: denied { search } for pid=4068 comm="nginx" name="crypto" dev="proc" ino=40455 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c667 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Sep 10 01:11:47.675000 audit[4068]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fedbef4c728 a2=0 a3=0 items=0 ppid=3631 pid=4068 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c667 key=(null) Sep 10 01:11:47.675000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Sep 10 01:11:47.687851 env[1267]: 2025-09-10 01:11:47.658 [INFO][4090] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Sep 10 01:11:47.687851 env[1267]: 2025-09-10 01:11:47.658 [INFO][4090] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" iface="eth0" netns="/var/run/netns/cni-9b1948ea-59fe-6b86-e699-a84e0347062b" Sep 10 01:11:47.687851 env[1267]: 2025-09-10 01:11:47.658 [INFO][4090] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" iface="eth0" netns="/var/run/netns/cni-9b1948ea-59fe-6b86-e699-a84e0347062b" Sep 10 01:11:47.687851 env[1267]: 2025-09-10 01:11:47.659 [INFO][4090] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" iface="eth0" netns="/var/run/netns/cni-9b1948ea-59fe-6b86-e699-a84e0347062b" Sep 10 01:11:47.687851 env[1267]: 2025-09-10 01:11:47.659 [INFO][4090] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Sep 10 01:11:47.687851 env[1267]: 2025-09-10 01:11:47.659 [INFO][4090] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Sep 10 01:11:47.687851 env[1267]: 2025-09-10 01:11:47.681 [INFO][4097] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" HandleID="k8s-pod-network.b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Workload="localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0" Sep 10 01:11:47.687851 env[1267]: 2025-09-10 01:11:47.681 [INFO][4097] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:11:47.687851 env[1267]: 2025-09-10 01:11:47.681 [INFO][4097] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:11:47.687851 env[1267]: 2025-09-10 01:11:47.685 [WARNING][4097] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" HandleID="k8s-pod-network.b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Workload="localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0" Sep 10 01:11:47.687851 env[1267]: 2025-09-10 01:11:47.685 [INFO][4097] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" HandleID="k8s-pod-network.b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Workload="localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0" Sep 10 01:11:47.687851 env[1267]: 2025-09-10 01:11:47.685 [INFO][4097] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:11:47.687851 env[1267]: 2025-09-10 01:11:47.686 [INFO][4090] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Sep 10 01:11:47.688229 env[1267]: time="2025-09-10T01:11:47.688009829Z" level=info msg="TearDown network for sandbox \"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\" successfully" Sep 10 01:11:47.688229 env[1267]: time="2025-09-10T01:11:47.688029173Z" level=info msg="StopPodSandbox for \"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\" returns successfully" Sep 10 01:11:47.688464 env[1267]: time="2025-09-10T01:11:47.688448739Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-xz6mb,Uid:5fd61191-5eac-4e78-9235-5003726f6150,Namespace:kube-system,Attempt:1,}" Sep 10 01:11:47.765769 systemd-networkd[1063]: cali36dac578137: Link UP Sep 10 01:11:47.767634 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 10 01:11:47.767676 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali36dac578137: link becomes ready Sep 10 01:11:47.767736 systemd-networkd[1063]: cali36dac578137: Gained carrier Sep 10 01:11:47.776624 env[1267]: 2025-09-10 01:11:47.716 [INFO][4111] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0 coredns-674b8bbfcf- kube-system 5fd61191-5eac-4e78-9235-5003726f6150 954 0 2025-09-10 01:11:09 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-xz6mb eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali36dac578137 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4" Namespace="kube-system" Pod="coredns-674b8bbfcf-xz6mb" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xz6mb-" Sep 10 01:11:47.776624 env[1267]: 2025-09-10 01:11:47.717 [INFO][4111] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4" Namespace="kube-system" Pod="coredns-674b8bbfcf-xz6mb" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0" Sep 10 01:11:47.776624 env[1267]: 2025-09-10 01:11:47.731 [INFO][4123] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4" HandleID="k8s-pod-network.cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4" Workload="localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0" Sep 10 01:11:47.776624 env[1267]: 2025-09-10 01:11:47.732 [INFO][4123] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4" HandleID="k8s-pod-network.cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4" Workload="localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d4ff0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-xz6mb", "timestamp":"2025-09-10 01:11:47.731983292 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 01:11:47.776624 env[1267]: 2025-09-10 01:11:47.735 [INFO][4123] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:11:47.776624 env[1267]: 2025-09-10 01:11:47.735 [INFO][4123] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:11:47.776624 env[1267]: 2025-09-10 01:11:47.735 [INFO][4123] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 01:11:47.776624 env[1267]: 2025-09-10 01:11:47.743 [INFO][4123] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4" host="localhost" Sep 10 01:11:47.776624 env[1267]: 2025-09-10 01:11:47.750 [INFO][4123] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 01:11:47.776624 env[1267]: 2025-09-10 01:11:47.753 [INFO][4123] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 01:11:47.776624 env[1267]: 2025-09-10 01:11:47.754 [INFO][4123] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 01:11:47.776624 env[1267]: 2025-09-10 01:11:47.755 [INFO][4123] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 01:11:47.776624 env[1267]: 2025-09-10 01:11:47.755 [INFO][4123] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4" host="localhost" Sep 10 01:11:47.776624 env[1267]: 2025-09-10 01:11:47.756 [INFO][4123] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4 Sep 10 01:11:47.776624 env[1267]: 2025-09-10 01:11:47.757 [INFO][4123] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4" host="localhost" Sep 10 01:11:47.776624 env[1267]: 2025-09-10 01:11:47.761 [INFO][4123] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4" host="localhost" Sep 10 01:11:47.776624 env[1267]: 2025-09-10 01:11:47.761 [INFO][4123] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4" host="localhost" Sep 10 01:11:47.776624 env[1267]: 2025-09-10 01:11:47.761 [INFO][4123] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:11:47.776624 env[1267]: 2025-09-10 01:11:47.761 [INFO][4123] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4" HandleID="k8s-pod-network.cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4" Workload="localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0" Sep 10 01:11:47.777184 env[1267]: 2025-09-10 01:11:47.762 [INFO][4111] cni-plugin/k8s.go 418: Populated endpoint ContainerID="cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4" Namespace="kube-system" Pod="coredns-674b8bbfcf-xz6mb" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"5fd61191-5eac-4e78-9235-5003726f6150", ResourceVersion:"954", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-xz6mb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali36dac578137", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:11:47.777184 env[1267]: 2025-09-10 01:11:47.762 [INFO][4111] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4" Namespace="kube-system" Pod="coredns-674b8bbfcf-xz6mb" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0" Sep 10 01:11:47.777184 env[1267]: 2025-09-10 01:11:47.762 [INFO][4111] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali36dac578137 ContainerID="cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4" Namespace="kube-system" Pod="coredns-674b8bbfcf-xz6mb" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0" Sep 10 01:11:47.777184 env[1267]: 2025-09-10 01:11:47.768 [INFO][4111] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4" Namespace="kube-system" Pod="coredns-674b8bbfcf-xz6mb" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0" Sep 10 01:11:47.777184 env[1267]: 2025-09-10 01:11:47.768 [INFO][4111] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4" Namespace="kube-system" Pod="coredns-674b8bbfcf-xz6mb" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"5fd61191-5eac-4e78-9235-5003726f6150", ResourceVersion:"954", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4", Pod:"coredns-674b8bbfcf-xz6mb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali36dac578137", MAC:"e2:cf:45:04:fb:f6", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:11:47.777184 env[1267]: 2025-09-10 01:11:47.774 [INFO][4111] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4" Namespace="kube-system" Pod="coredns-674b8bbfcf-xz6mb" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0" Sep 10 01:11:47.788002 env[1267]: time="2025-09-10T01:11:47.787952306Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 01:11:47.788094 env[1267]: time="2025-09-10T01:11:47.787997675Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 01:11:47.788094 env[1267]: time="2025-09-10T01:11:47.788007057Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 01:11:47.788160 env[1267]: time="2025-09-10T01:11:47.788117691Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4 pid=4149 runtime=io.containerd.runc.v2 Sep 10 01:11:47.790000 audit[4159]: NETFILTER_CFG table=filter:108 family=2 entries=58 op=nft_register_chain pid=4159 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 01:11:47.790000 audit[4159]: SYSCALL arch=c000003e syscall=46 success=yes exit=27304 a0=3 a1=7fffd12c4cb0 a2=0 a3=7fffd12c4c9c items=0 ppid=3411 pid=4159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:47.790000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 01:11:47.800620 systemd[1]: Started cri-containerd-cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4.scope. Sep 10 01:11:47.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit: BPF prog-id=188 op=LOAD Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4149 pid=4160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:47.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365646233353233323361313565303638653436616539626362326636 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4149 pid=4160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:47.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365646233353233323361313565303638653436616539626362326636 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit: BPF prog-id=189 op=LOAD Sep 10 01:11:47.809000 audit[4160]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00032dd10 items=0 ppid=4149 pid=4160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:47.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365646233353233323361313565303638653436616539626362326636 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit: BPF prog-id=190 op=LOAD Sep 10 01:11:47.809000 audit[4160]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00032dd58 items=0 ppid=4149 pid=4160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:47.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365646233353233323361313565303638653436616539626362326636 Sep 10 01:11:47.809000 audit: BPF prog-id=190 op=UNLOAD Sep 10 01:11:47.809000 audit: BPF prog-id=189 op=UNLOAD Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { perfmon } for pid=4160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit[4160]: AVC avc: denied { bpf } for pid=4160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.809000 audit: BPF prog-id=191 op=LOAD Sep 10 01:11:47.809000 audit[4160]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ac168 items=0 ppid=4149 pid=4160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:47.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365646233353233323361313565303638653436616539626362326636 Sep 10 01:11:47.812826 systemd-resolved[1193]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 01:11:47.832993 env[1267]: time="2025-09-10T01:11:47.832916787Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-xz6mb,Uid:5fd61191-5eac-4e78-9235-5003726f6150,Namespace:kube-system,Attempt:1,} returns sandbox id \"cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4\"" Sep 10 01:11:47.842267 env[1267]: time="2025-09-10T01:11:47.842240912Z" level=info msg="CreateContainer within sandbox \"cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 10 01:11:47.855454 env[1267]: time="2025-09-10T01:11:47.855424178Z" level=info msg="CreateContainer within sandbox \"cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"a09e2537a6ea6327e82e5a98c70d51b41c480d2a0558367534805ad67a17b479\"" Sep 10 01:11:47.856785 env[1267]: time="2025-09-10T01:11:47.856771714Z" level=info msg="StartContainer for \"a09e2537a6ea6327e82e5a98c70d51b41c480d2a0558367534805ad67a17b479\"" Sep 10 01:11:47.868502 systemd[1]: Started cri-containerd-a09e2537a6ea6327e82e5a98c70d51b41c480d2a0558367534805ad67a17b479.scope. Sep 10 01:11:47.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.882000 audit: BPF prog-id=192 op=LOAD Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=4149 pid=4193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:47.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130396532353337613665613633323765383265356139386337306435 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=8 items=0 ppid=4149 pid=4193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:47.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130396532353337613665613633323765383265356139386337306435 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit: BPF prog-id=193 op=LOAD Sep 10 01:11:47.883000 audit[4193]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c00026fde0 items=0 ppid=4149 pid=4193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:47.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130396532353337613665613633323765383265356139386337306435 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit: BPF prog-id=194 op=LOAD Sep 10 01:11:47.883000 audit[4193]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c00026fe28 items=0 ppid=4149 pid=4193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:47.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130396532353337613665613633323765383265356139386337306435 Sep 10 01:11:47.883000 audit: BPF prog-id=194 op=UNLOAD Sep 10 01:11:47.883000 audit: BPF prog-id=193 op=UNLOAD Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:47.883000 audit: BPF prog-id=195 op=LOAD Sep 10 01:11:47.883000 audit[4193]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c0003b2238 items=0 ppid=4149 pid=4193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:47.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130396532353337613665613633323765383265356139386337306435 Sep 10 01:11:47.900041 env[1267]: time="2025-09-10T01:11:47.899645267Z" level=info msg="StartContainer for \"a09e2537a6ea6327e82e5a98c70d51b41c480d2a0558367534805ad67a17b479\" returns successfully" Sep 10 01:11:47.946786 systemd-networkd[1063]: cali79df89b929f: Gained IPv6LL Sep 10 01:11:48.087611 systemd[1]: run-netns-cni\x2d9b1948ea\x2d59fe\x2d6b86\x2de699\x2da84e0347062b.mount: Deactivated successfully. Sep 10 01:11:48.241000 audit[4204]: AVC avc: denied { getattr } for pid=4204 comm="coredns" path="cgroup:[4026532722]" dev="nsfs" ino=4026532722 scontext=system_u:system_r:svirt_lxc_net_t:s0:c354,c963 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 10 01:11:48.241000 audit[4204]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00014a9d8 a2=c0000c9e48 a3=0 items=0 ppid=4149 pid=4204 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c354,c963 key=(null) Sep 10 01:11:48.241000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 10 01:11:48.266429 systemd-networkd[1063]: calibc5271a554e: Gained IPv6LL Sep 10 01:11:48.266617 systemd-networkd[1063]: calif7c63bbb2bf: Gained IPv6LL Sep 10 01:11:48.564691 env[1267]: time="2025-09-10T01:11:48.564657115Z" level=info msg="StopPodSandbox for \"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\"" Sep 10 01:11:48.586498 systemd-networkd[1063]: calia7d0254bcac: Gained IPv6LL Sep 10 01:11:48.673848 env[1267]: 2025-09-10 01:11:48.641 [INFO][4234] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Sep 10 01:11:48.673848 env[1267]: 2025-09-10 01:11:48.641 [INFO][4234] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" iface="eth0" netns="/var/run/netns/cni-1594999f-edf1-4f65-a26e-683df24d1c00" Sep 10 01:11:48.673848 env[1267]: 2025-09-10 01:11:48.641 [INFO][4234] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" iface="eth0" netns="/var/run/netns/cni-1594999f-edf1-4f65-a26e-683df24d1c00" Sep 10 01:11:48.673848 env[1267]: 2025-09-10 01:11:48.641 [INFO][4234] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" iface="eth0" netns="/var/run/netns/cni-1594999f-edf1-4f65-a26e-683df24d1c00" Sep 10 01:11:48.673848 env[1267]: 2025-09-10 01:11:48.641 [INFO][4234] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Sep 10 01:11:48.673848 env[1267]: 2025-09-10 01:11:48.641 [INFO][4234] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Sep 10 01:11:48.673848 env[1267]: 2025-09-10 01:11:48.664 [INFO][4242] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" HandleID="k8s-pod-network.aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Workload="localhost-k8s-coredns--674b8bbfcf--sntmg-eth0" Sep 10 01:11:48.673848 env[1267]: 2025-09-10 01:11:48.665 [INFO][4242] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:11:48.673848 env[1267]: 2025-09-10 01:11:48.665 [INFO][4242] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:11:48.673848 env[1267]: 2025-09-10 01:11:48.669 [WARNING][4242] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" HandleID="k8s-pod-network.aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Workload="localhost-k8s-coredns--674b8bbfcf--sntmg-eth0" Sep 10 01:11:48.673848 env[1267]: 2025-09-10 01:11:48.669 [INFO][4242] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" HandleID="k8s-pod-network.aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Workload="localhost-k8s-coredns--674b8bbfcf--sntmg-eth0" Sep 10 01:11:48.673848 env[1267]: 2025-09-10 01:11:48.670 [INFO][4242] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:11:48.673848 env[1267]: 2025-09-10 01:11:48.672 [INFO][4234] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Sep 10 01:11:48.675839 systemd[1]: run-netns-cni\x2d1594999f\x2dedf1\x2d4f65\x2da26e\x2d683df24d1c00.mount: Deactivated successfully. Sep 10 01:11:48.676895 env[1267]: time="2025-09-10T01:11:48.676873285Z" level=info msg="TearDown network for sandbox \"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\" successfully" Sep 10 01:11:48.676946 env[1267]: time="2025-09-10T01:11:48.676935083Z" level=info msg="StopPodSandbox for \"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\" returns successfully" Sep 10 01:11:48.677435 env[1267]: time="2025-09-10T01:11:48.677422406Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-sntmg,Uid:9bad00c4-3e3e-4827-9970-a77e3259bf14,Namespace:kube-system,Attempt:1,}" Sep 10 01:11:48.733100 kubelet[2111]: I0910 01:11:48.728918 2111 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-xz6mb" podStartSLOduration=39.728899866 podStartE2EDuration="39.728899866s" podCreationTimestamp="2025-09-10 01:11:09 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-10 01:11:48.728611913 +0000 UTC m=+44.374193341" watchObservedRunningTime="2025-09-10 01:11:48.728899866 +0000 UTC m=+44.374481283" Sep 10 01:11:48.830572 systemd-networkd[1063]: cali9b0342317b9: Link UP Sep 10 01:11:48.833458 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 10 01:11:48.833504 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9b0342317b9: link becomes ready Sep 10 01:11:48.833406 systemd-networkd[1063]: cali9b0342317b9: Gained carrier Sep 10 01:11:48.843405 systemd-networkd[1063]: cali36dac578137: Gained IPv6LL Sep 10 01:11:48.886088 env[1267]: 2025-09-10 01:11:48.707 [INFO][4250] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--sntmg-eth0 coredns-674b8bbfcf- kube-system 9bad00c4-3e3e-4827-9970-a77e3259bf14 964 0 2025-09-10 01:11:09 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-sntmg eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali9b0342317b9 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887" Namespace="kube-system" Pod="coredns-674b8bbfcf-sntmg" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--sntmg-" Sep 10 01:11:48.886088 env[1267]: 2025-09-10 01:11:48.707 [INFO][4250] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887" Namespace="kube-system" Pod="coredns-674b8bbfcf-sntmg" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--sntmg-eth0" Sep 10 01:11:48.886088 env[1267]: 2025-09-10 01:11:48.737 [INFO][4262] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887" HandleID="k8s-pod-network.76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887" Workload="localhost-k8s-coredns--674b8bbfcf--sntmg-eth0" Sep 10 01:11:48.886088 env[1267]: 2025-09-10 01:11:48.738 [INFO][4262] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887" HandleID="k8s-pod-network.76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887" Workload="localhost-k8s-coredns--674b8bbfcf--sntmg-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ceff0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-sntmg", "timestamp":"2025-09-10 01:11:48.737807671 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 01:11:48.886088 env[1267]: 2025-09-10 01:11:48.738 [INFO][4262] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:11:48.886088 env[1267]: 2025-09-10 01:11:48.738 [INFO][4262] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:11:48.886088 env[1267]: 2025-09-10 01:11:48.738 [INFO][4262] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 01:11:48.886088 env[1267]: 2025-09-10 01:11:48.782 [INFO][4262] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887" host="localhost" Sep 10 01:11:48.886088 env[1267]: 2025-09-10 01:11:48.794 [INFO][4262] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 01:11:48.886088 env[1267]: 2025-09-10 01:11:48.811 [INFO][4262] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 01:11:48.886088 env[1267]: 2025-09-10 01:11:48.813 [INFO][4262] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 01:11:48.886088 env[1267]: 2025-09-10 01:11:48.814 [INFO][4262] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 01:11:48.886088 env[1267]: 2025-09-10 01:11:48.814 [INFO][4262] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887" host="localhost" Sep 10 01:11:48.886088 env[1267]: 2025-09-10 01:11:48.815 [INFO][4262] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887 Sep 10 01:11:48.886088 env[1267]: 2025-09-10 01:11:48.818 [INFO][4262] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887" host="localhost" Sep 10 01:11:48.886088 env[1267]: 2025-09-10 01:11:48.823 [INFO][4262] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887" host="localhost" Sep 10 01:11:48.886088 env[1267]: 2025-09-10 01:11:48.823 [INFO][4262] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887" host="localhost" Sep 10 01:11:48.886088 env[1267]: 2025-09-10 01:11:48.823 [INFO][4262] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:11:48.886088 env[1267]: 2025-09-10 01:11:48.823 [INFO][4262] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887" HandleID="k8s-pod-network.76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887" Workload="localhost-k8s-coredns--674b8bbfcf--sntmg-eth0" Sep 10 01:11:48.889443 env[1267]: 2025-09-10 01:11:48.827 [INFO][4250] cni-plugin/k8s.go 418: Populated endpoint ContainerID="76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887" Namespace="kube-system" Pod="coredns-674b8bbfcf-sntmg" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--sntmg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--sntmg-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"9bad00c4-3e3e-4827-9970-a77e3259bf14", ResourceVersion:"964", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-sntmg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali9b0342317b9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:11:48.889443 env[1267]: 2025-09-10 01:11:48.827 [INFO][4250] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887" Namespace="kube-system" Pod="coredns-674b8bbfcf-sntmg" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--sntmg-eth0" Sep 10 01:11:48.889443 env[1267]: 2025-09-10 01:11:48.827 [INFO][4250] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali9b0342317b9 ContainerID="76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887" Namespace="kube-system" Pod="coredns-674b8bbfcf-sntmg" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--sntmg-eth0" Sep 10 01:11:48.889443 env[1267]: 2025-09-10 01:11:48.833 [INFO][4250] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887" Namespace="kube-system" Pod="coredns-674b8bbfcf-sntmg" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--sntmg-eth0" Sep 10 01:11:48.889443 env[1267]: 2025-09-10 01:11:48.834 [INFO][4250] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887" Namespace="kube-system" Pod="coredns-674b8bbfcf-sntmg" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--sntmg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--sntmg-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"9bad00c4-3e3e-4827-9970-a77e3259bf14", ResourceVersion:"964", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887", Pod:"coredns-674b8bbfcf-sntmg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali9b0342317b9", MAC:"ea:92:c9:43:35:da", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:11:48.889443 env[1267]: 2025-09-10 01:11:48.881 [INFO][4250] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887" Namespace="kube-system" Pod="coredns-674b8bbfcf-sntmg" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--sntmg-eth0" Sep 10 01:11:48.942829 env[1267]: time="2025-09-10T01:11:48.942146326Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 01:11:48.942829 env[1267]: time="2025-09-10T01:11:48.942180427Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 01:11:48.942829 env[1267]: time="2025-09-10T01:11:48.942187632Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 01:11:48.942829 env[1267]: time="2025-09-10T01:11:48.942280459Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887 pid=4284 runtime=io.containerd.runc.v2 Sep 10 01:11:48.956000 audit[4300]: NETFILTER_CFG table=filter:109 family=2 entries=52 op=nft_register_chain pid=4300 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 01:11:48.956000 audit[4300]: SYSCALL arch=c000003e syscall=46 success=yes exit=23908 a0=3 a1=7fff728d6d20 a2=0 a3=7fff728d6d0c items=0 ppid=3411 pid=4300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:48.956000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 01:11:48.968553 systemd[1]: Started cri-containerd-76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887.scope. Sep 10 01:11:48.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.989000 audit: BPF prog-id=196 op=LOAD Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { bpf } for pid=4293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4284 pid=4293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:48.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736656134633862313063616138343061643730303762323634653565 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { perfmon } for pid=4293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4284 pid=4293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:48.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736656134633862313063616138343061643730303762323634653565 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { bpf } for pid=4293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { bpf } for pid=4293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { bpf } for pid=4293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { perfmon } for pid=4293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { perfmon } for pid=4293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { perfmon } for pid=4293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { perfmon } for pid=4293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { perfmon } for pid=4293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { bpf } for pid=4293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { bpf } for pid=4293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit: BPF prog-id=197 op=LOAD Sep 10 01:11:48.990000 audit[4293]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00028d380 items=0 ppid=4284 pid=4293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:48.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736656134633862313063616138343061643730303762323634653565 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { bpf } for pid=4293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { bpf } for pid=4293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { perfmon } for pid=4293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { perfmon } for pid=4293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { perfmon } for pid=4293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { perfmon } for pid=4293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { perfmon } for pid=4293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { bpf } for pid=4293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { bpf } for pid=4293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit: BPF prog-id=198 op=LOAD Sep 10 01:11:48.990000 audit[4293]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00028d3c8 items=0 ppid=4284 pid=4293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:48.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736656134633862313063616138343061643730303762323634653565 Sep 10 01:11:48.990000 audit: BPF prog-id=198 op=UNLOAD Sep 10 01:11:48.990000 audit: BPF prog-id=197 op=UNLOAD Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { bpf } for pid=4293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { bpf } for pid=4293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { bpf } for pid=4293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { perfmon } for pid=4293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { perfmon } for pid=4293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { perfmon } for pid=4293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { perfmon } for pid=4293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { perfmon } for pid=4293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { bpf } for pid=4293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit[4293]: AVC avc: denied { bpf } for pid=4293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:48.990000 audit: BPF prog-id=199 op=LOAD Sep 10 01:11:48.990000 audit[4293]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00028d7d8 items=0 ppid=4284 pid=4293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:48.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736656134633862313063616138343061643730303762323634653565 Sep 10 01:11:48.994093 systemd-resolved[1193]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 01:11:49.034838 env[1267]: time="2025-09-10T01:11:49.034810598Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-sntmg,Uid:9bad00c4-3e3e-4827-9970-a77e3259bf14,Namespace:kube-system,Attempt:1,} returns sandbox id \"76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887\"" Sep 10 01:11:49.319000 audit[4324]: NETFILTER_CFG table=filter:110 family=2 entries=17 op=nft_register_rule pid=4324 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:49.319000 audit[4324]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffed11b8590 a2=0 a3=7ffed11b857c items=0 ppid=2249 pid=4324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:49.319000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:49.328000 audit[4324]: NETFILTER_CFG table=nat:111 family=2 entries=35 op=nft_register_chain pid=4324 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:49.328000 audit[4324]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffed11b8590 a2=0 a3=7ffed11b857c items=0 ppid=2249 pid=4324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:49.328000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:49.510000 audit[4326]: NETFILTER_CFG table=filter:112 family=2 entries=14 op=nft_register_rule pid=4326 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:49.510000 audit[4326]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc208cadc0 a2=0 a3=7ffc208cadac items=0 ppid=2249 pid=4326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:49.510000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:49.523330 kubelet[2111]: I0910 01:11:49.520540 2111 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 10 01:11:49.526000 audit[4326]: NETFILTER_CFG table=nat:113 family=2 entries=20 op=nft_register_rule pid=4326 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:49.526000 audit[4326]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffc208cadc0 a2=0 a3=7ffc208cadac items=0 ppid=2249 pid=4326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:49.526000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:49.576735 env[1267]: time="2025-09-10T01:11:49.576494835Z" level=info msg="StopPodSandbox for \"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\"" Sep 10 01:11:49.596105 env[1267]: time="2025-09-10T01:11:49.595346268Z" level=info msg="StopPodSandbox for \"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\"" Sep 10 01:11:49.599763 env[1267]: time="2025-09-10T01:11:49.599736569Z" level=info msg="CreateContainer within sandbox \"76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 10 01:11:49.631078 systemd[1]: run-containerd-runc-k8s.io-1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50-runc.gVL8kf.mount: Deactivated successfully. Sep 10 01:11:49.682976 env[1267]: time="2025-09-10T01:11:49.682933635Z" level=info msg="CreateContainer within sandbox \"76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"f09f39d212e214bd6139c058ed58859706f9e6b73505b86eb39e3ccc7a0ca6ae\"" Sep 10 01:11:50.246942 env[1267]: 2025-09-10 01:11:49.786 [INFO][4358] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Sep 10 01:11:50.246942 env[1267]: 2025-09-10 01:11:49.786 [INFO][4358] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" iface="eth0" netns="/var/run/netns/cni-d3a7174a-bce7-3184-c5ef-404738bca77b" Sep 10 01:11:50.246942 env[1267]: 2025-09-10 01:11:49.786 [INFO][4358] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" iface="eth0" netns="/var/run/netns/cni-d3a7174a-bce7-3184-c5ef-404738bca77b" Sep 10 01:11:50.246942 env[1267]: 2025-09-10 01:11:49.786 [INFO][4358] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" iface="eth0" netns="/var/run/netns/cni-d3a7174a-bce7-3184-c5ef-404738bca77b" Sep 10 01:11:50.246942 env[1267]: 2025-09-10 01:11:49.786 [INFO][4358] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Sep 10 01:11:50.246942 env[1267]: 2025-09-10 01:11:49.786 [INFO][4358] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Sep 10 01:11:50.246942 env[1267]: 2025-09-10 01:11:50.200 [INFO][4383] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" HandleID="k8s-pod-network.1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Workload="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" Sep 10 01:11:50.246942 env[1267]: 2025-09-10 01:11:50.209 [INFO][4383] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:11:50.246942 env[1267]: 2025-09-10 01:11:50.210 [INFO][4383] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:11:50.246942 env[1267]: 2025-09-10 01:11:50.231 [WARNING][4383] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" HandleID="k8s-pod-network.1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Workload="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" Sep 10 01:11:50.246942 env[1267]: 2025-09-10 01:11:50.231 [INFO][4383] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" HandleID="k8s-pod-network.1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Workload="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" Sep 10 01:11:50.246942 env[1267]: 2025-09-10 01:11:50.237 [INFO][4383] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:11:50.246942 env[1267]: 2025-09-10 01:11:50.244 [INFO][4358] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Sep 10 01:11:50.252548 env[1267]: time="2025-09-10T01:11:50.250519535Z" level=info msg="TearDown network for sandbox \"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\" successfully" Sep 10 01:11:50.252548 env[1267]: time="2025-09-10T01:11:50.250544971Z" level=info msg="StopPodSandbox for \"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\" returns successfully" Sep 10 01:11:50.248746 systemd[1]: run-netns-cni\x2dd3a7174a\x2dbce7\x2d3184\x2dc5ef\x2d404738bca77b.mount: Deactivated successfully. Sep 10 01:11:50.265799 env[1267]: 2025-09-10 01:11:49.765 [INFO][4354] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Sep 10 01:11:50.265799 env[1267]: 2025-09-10 01:11:49.772 [INFO][4354] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" iface="eth0" netns="/var/run/netns/cni-2b2bed54-b6ca-4641-8688-f4245cf9f0c7" Sep 10 01:11:50.265799 env[1267]: 2025-09-10 01:11:49.773 [INFO][4354] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" iface="eth0" netns="/var/run/netns/cni-2b2bed54-b6ca-4641-8688-f4245cf9f0c7" Sep 10 01:11:50.265799 env[1267]: 2025-09-10 01:11:49.773 [INFO][4354] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" iface="eth0" netns="/var/run/netns/cni-2b2bed54-b6ca-4641-8688-f4245cf9f0c7" Sep 10 01:11:50.265799 env[1267]: 2025-09-10 01:11:49.773 [INFO][4354] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Sep 10 01:11:50.265799 env[1267]: 2025-09-10 01:11:49.773 [INFO][4354] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Sep 10 01:11:50.265799 env[1267]: 2025-09-10 01:11:50.202 [INFO][4381] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" HandleID="k8s-pod-network.b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Workload="localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0" Sep 10 01:11:50.265799 env[1267]: 2025-09-10 01:11:50.209 [INFO][4381] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:11:50.265799 env[1267]: 2025-09-10 01:11:50.237 [INFO][4381] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:11:50.265799 env[1267]: 2025-09-10 01:11:50.250 [WARNING][4381] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" HandleID="k8s-pod-network.b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Workload="localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0" Sep 10 01:11:50.265799 env[1267]: 2025-09-10 01:11:50.250 [INFO][4381] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" HandleID="k8s-pod-network.b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Workload="localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0" Sep 10 01:11:50.265799 env[1267]: 2025-09-10 01:11:50.261 [INFO][4381] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:11:50.265799 env[1267]: 2025-09-10 01:11:50.263 [INFO][4354] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Sep 10 01:11:50.273296 env[1267]: time="2025-09-10T01:11:50.269717345Z" level=info msg="TearDown network for sandbox \"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\" successfully" Sep 10 01:11:50.273296 env[1267]: time="2025-09-10T01:11:50.269751065Z" level=info msg="StopPodSandbox for \"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\" returns successfully" Sep 10 01:11:50.268116 systemd[1]: run-netns-cni\x2d2b2bed54\x2db6ca\x2d4641\x2d8688\x2df4245cf9f0c7.mount: Deactivated successfully. Sep 10 01:11:50.342469 env[1267]: time="2025-09-10T01:11:50.342438894Z" level=info msg="StartContainer for \"f09f39d212e214bd6139c058ed58859706f9e6b73505b86eb39e3ccc7a0ca6ae\"" Sep 10 01:11:50.390721 systemd[1]: Started cri-containerd-f09f39d212e214bd6139c058ed58859706f9e6b73505b86eb39e3ccc7a0ca6ae.scope. Sep 10 01:11:50.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.407000 audit: BPF prog-id=200 op=LOAD Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { bpf } for pid=4406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4284 pid=4406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:50.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630396633396432313265323134626436313339633035386564353838 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { perfmon } for pid=4406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4284 pid=4406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:50.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630396633396432313265323134626436313339633035386564353838 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { bpf } for pid=4406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { bpf } for pid=4406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { bpf } for pid=4406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { perfmon } for pid=4406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { perfmon } for pid=4406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { perfmon } for pid=4406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { perfmon } for pid=4406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { perfmon } for pid=4406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { bpf } for pid=4406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { bpf } for pid=4406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit: BPF prog-id=201 op=LOAD Sep 10 01:11:50.408000 audit[4406]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00031abc0 items=0 ppid=4284 pid=4406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:50.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630396633396432313265323134626436313339633035386564353838 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { bpf } for pid=4406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { bpf } for pid=4406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { perfmon } for pid=4406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { perfmon } for pid=4406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { perfmon } for pid=4406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { perfmon } for pid=4406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { perfmon } for pid=4406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { bpf } for pid=4406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { bpf } for pid=4406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit: BPF prog-id=202 op=LOAD Sep 10 01:11:50.408000 audit[4406]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00031ac08 items=0 ppid=4284 pid=4406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:50.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630396633396432313265323134626436313339633035386564353838 Sep 10 01:11:50.408000 audit: BPF prog-id=202 op=UNLOAD Sep 10 01:11:50.408000 audit: BPF prog-id=201 op=UNLOAD Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { bpf } for pid=4406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { bpf } for pid=4406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { bpf } for pid=4406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { perfmon } for pid=4406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { perfmon } for pid=4406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { perfmon } for pid=4406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { perfmon } for pid=4406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { perfmon } for pid=4406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { bpf } for pid=4406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit[4406]: AVC avc: denied { bpf } for pid=4406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:50.408000 audit: BPF prog-id=203 op=LOAD Sep 10 01:11:50.408000 audit[4406]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00031b018 items=0 ppid=4284 pid=4406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:50.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630396633396432313265323134626436313339633035386564353838 Sep 10 01:11:50.432028 env[1267]: time="2025-09-10T01:11:50.431998345Z" level=info msg="StartContainer for \"f09f39d212e214bd6139c058ed58859706f9e6b73505b86eb39e3ccc7a0ca6ae\" returns successfully" Sep 10 01:11:50.432552 env[1267]: time="2025-09-10T01:11:50.432530779Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-67bb596d88-mtqfq,Uid:0d86b565-8184-416c-b12b-737eb73d2b94,Namespace:calico-system,Attempt:1,}" Sep 10 01:11:50.438691 env[1267]: time="2025-09-10T01:11:50.438666829Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64564cc5c9-z6hvk,Uid:373a83e4-9cfa-498c-a1d2-cf000ad59143,Namespace:calico-apiserver,Attempt:1,}" Sep 10 01:11:50.582211 systemd-networkd[1063]: cali9b0342317b9: Gained IPv6LL Sep 10 01:11:50.910670 systemd-networkd[1063]: cali53dd666f0e1: Link UP Sep 10 01:11:50.927807 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 10 01:11:50.927854 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali53dd666f0e1: link becomes ready Sep 10 01:11:50.912997 systemd-networkd[1063]: cali53dd666f0e1: Gained carrier Sep 10 01:11:51.014528 env[1267]: 2025-09-10 01:11:50.589 [INFO][4434] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0 calico-apiserver-64564cc5c9- calico-apiserver 373a83e4-9cfa-498c-a1d2-cf000ad59143 982 0 2025-09-10 01:11:18 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:64564cc5c9 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-64564cc5c9-z6hvk eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali53dd666f0e1 [] [] }} ContainerID="36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" Namespace="calico-apiserver" Pod="calico-apiserver-64564cc5c9-z6hvk" WorkloadEndpoint="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-" Sep 10 01:11:51.014528 env[1267]: 2025-09-10 01:11:50.589 [INFO][4434] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" Namespace="calico-apiserver" Pod="calico-apiserver-64564cc5c9-z6hvk" WorkloadEndpoint="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" Sep 10 01:11:51.014528 env[1267]: 2025-09-10 01:11:50.676 [INFO][4467] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" HandleID="k8s-pod-network.36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" Workload="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" Sep 10 01:11:51.014528 env[1267]: 2025-09-10 01:11:50.679 [INFO][4467] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" HandleID="k8s-pod-network.36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" Workload="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ccff0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-64564cc5c9-z6hvk", "timestamp":"2025-09-10 01:11:50.675549647 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 01:11:51.014528 env[1267]: 2025-09-10 01:11:50.679 [INFO][4467] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:11:51.014528 env[1267]: 2025-09-10 01:11:50.679 [INFO][4467] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:11:51.014528 env[1267]: 2025-09-10 01:11:50.695 [INFO][4467] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 01:11:51.014528 env[1267]: 2025-09-10 01:11:50.725 [INFO][4467] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" host="localhost" Sep 10 01:11:51.014528 env[1267]: 2025-09-10 01:11:50.775 [INFO][4467] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 01:11:51.014528 env[1267]: 2025-09-10 01:11:50.789 [INFO][4467] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 01:11:51.014528 env[1267]: 2025-09-10 01:11:50.790 [INFO][4467] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 01:11:51.014528 env[1267]: 2025-09-10 01:11:50.792 [INFO][4467] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 01:11:51.014528 env[1267]: 2025-09-10 01:11:50.792 [INFO][4467] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" host="localhost" Sep 10 01:11:51.014528 env[1267]: 2025-09-10 01:11:50.793 [INFO][4467] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81 Sep 10 01:11:51.014528 env[1267]: 2025-09-10 01:11:50.807 [INFO][4467] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" host="localhost" Sep 10 01:11:51.014528 env[1267]: 2025-09-10 01:11:50.860 [INFO][4467] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" host="localhost" Sep 10 01:11:51.014528 env[1267]: 2025-09-10 01:11:50.860 [INFO][4467] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" host="localhost" Sep 10 01:11:51.014528 env[1267]: 2025-09-10 01:11:50.860 [INFO][4467] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:11:51.014528 env[1267]: 2025-09-10 01:11:50.860 [INFO][4467] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" HandleID="k8s-pod-network.36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" Workload="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" Sep 10 01:11:51.080632 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie9652f7e06c: link becomes ready Sep 10 01:11:51.089189 env[1267]: 2025-09-10 01:11:50.861 [INFO][4434] cni-plugin/k8s.go 418: Populated endpoint ContainerID="36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" Namespace="calico-apiserver" Pod="calico-apiserver-64564cc5c9-z6hvk" WorkloadEndpoint="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0", GenerateName:"calico-apiserver-64564cc5c9-", Namespace:"calico-apiserver", SelfLink:"", UID:"373a83e4-9cfa-498c-a1d2-cf000ad59143", ResourceVersion:"982", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64564cc5c9", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-64564cc5c9-z6hvk", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali53dd666f0e1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:11:51.089189 env[1267]: 2025-09-10 01:11:50.861 [INFO][4434] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" Namespace="calico-apiserver" Pod="calico-apiserver-64564cc5c9-z6hvk" WorkloadEndpoint="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" Sep 10 01:11:51.089189 env[1267]: 2025-09-10 01:11:50.861 [INFO][4434] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali53dd666f0e1 ContainerID="36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" Namespace="calico-apiserver" Pod="calico-apiserver-64564cc5c9-z6hvk" WorkloadEndpoint="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" Sep 10 01:11:51.089189 env[1267]: 2025-09-10 01:11:50.926 [INFO][4434] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" Namespace="calico-apiserver" Pod="calico-apiserver-64564cc5c9-z6hvk" WorkloadEndpoint="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" Sep 10 01:11:51.089189 env[1267]: 2025-09-10 01:11:50.926 [INFO][4434] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" Namespace="calico-apiserver" Pod="calico-apiserver-64564cc5c9-z6hvk" WorkloadEndpoint="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0", GenerateName:"calico-apiserver-64564cc5c9-", Namespace:"calico-apiserver", SelfLink:"", UID:"373a83e4-9cfa-498c-a1d2-cf000ad59143", ResourceVersion:"982", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64564cc5c9", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81", Pod:"calico-apiserver-64564cc5c9-z6hvk", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali53dd666f0e1", MAC:"7a:49:00:b2:48:26", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:11:51.089189 env[1267]: 2025-09-10 01:11:51.012 [INFO][4434] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" Namespace="calico-apiserver" Pod="calico-apiserver-64564cc5c9-z6hvk" WorkloadEndpoint="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" Sep 10 01:11:51.089189 env[1267]: 2025-09-10 01:11:50.587 [INFO][4429] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0 calico-kube-controllers-67bb596d88- calico-system 0d86b565-8184-416c-b12b-737eb73d2b94 981 0 2025-09-10 01:11:20 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:67bb596d88 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-67bb596d88-mtqfq eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calie9652f7e06c [] [] }} ContainerID="358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f" Namespace="calico-system" Pod="calico-kube-controllers-67bb596d88-mtqfq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-" Sep 10 01:11:51.055113 systemd-networkd[1063]: calie9652f7e06c: Link UP Sep 10 01:11:51.118144 env[1267]: 2025-09-10 01:11:50.588 [INFO][4429] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f" Namespace="calico-system" Pod="calico-kube-controllers-67bb596d88-mtqfq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0" Sep 10 01:11:51.118144 env[1267]: 2025-09-10 01:11:50.690 [INFO][4461] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f" HandleID="k8s-pod-network.358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f" Workload="localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0" Sep 10 01:11:51.118144 env[1267]: 2025-09-10 01:11:50.690 [INFO][4461] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f" HandleID="k8s-pod-network.358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f" Workload="localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00025b270), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-67bb596d88-mtqfq", "timestamp":"2025-09-10 01:11:50.690184361 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 01:11:51.118144 env[1267]: 2025-09-10 01:11:50.690 [INFO][4461] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:11:51.118144 env[1267]: 2025-09-10 01:11:50.860 [INFO][4461] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:11:51.118144 env[1267]: 2025-09-10 01:11:50.860 [INFO][4461] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 01:11:51.118144 env[1267]: 2025-09-10 01:11:50.867 [INFO][4461] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f" host="localhost" Sep 10 01:11:51.118144 env[1267]: 2025-09-10 01:11:50.870 [INFO][4461] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 01:11:51.118144 env[1267]: 2025-09-10 01:11:50.879 [INFO][4461] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 01:11:51.118144 env[1267]: 2025-09-10 01:11:50.880 [INFO][4461] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 01:11:51.118144 env[1267]: 2025-09-10 01:11:50.907 [INFO][4461] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 01:11:51.118144 env[1267]: 2025-09-10 01:11:50.907 [INFO][4461] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f" host="localhost" Sep 10 01:11:51.118144 env[1267]: 2025-09-10 01:11:51.003 [INFO][4461] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f Sep 10 01:11:51.118144 env[1267]: 2025-09-10 01:11:51.034 [INFO][4461] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f" host="localhost" Sep 10 01:11:51.118144 env[1267]: 2025-09-10 01:11:51.049 [INFO][4461] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.137/26] block=192.168.88.128/26 handle="k8s-pod-network.358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f" host="localhost" Sep 10 01:11:51.118144 env[1267]: 2025-09-10 01:11:51.049 [INFO][4461] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.137/26] handle="k8s-pod-network.358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f" host="localhost" Sep 10 01:11:51.118144 env[1267]: 2025-09-10 01:11:51.049 [INFO][4461] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:11:51.118144 env[1267]: 2025-09-10 01:11:51.049 [INFO][4461] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.137/26] IPv6=[] ContainerID="358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f" HandleID="k8s-pod-network.358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f" Workload="localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0" Sep 10 01:11:51.118144 env[1267]: 2025-09-10 01:11:51.051 [INFO][4429] cni-plugin/k8s.go 418: Populated endpoint ContainerID="358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f" Namespace="calico-system" Pod="calico-kube-controllers-67bb596d88-mtqfq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0", GenerateName:"calico-kube-controllers-67bb596d88-", Namespace:"calico-system", SelfLink:"", UID:"0d86b565-8184-416c-b12b-737eb73d2b94", ResourceVersion:"981", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"67bb596d88", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-67bb596d88-mtqfq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie9652f7e06c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:11:51.056535 systemd-networkd[1063]: calie9652f7e06c: Gained carrier Sep 10 01:11:51.134607 env[1267]: 2025-09-10 01:11:51.051 [INFO][4429] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.137/32] ContainerID="358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f" Namespace="calico-system" Pod="calico-kube-controllers-67bb596d88-mtqfq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0" Sep 10 01:11:51.134607 env[1267]: 2025-09-10 01:11:51.051 [INFO][4429] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie9652f7e06c ContainerID="358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f" Namespace="calico-system" Pod="calico-kube-controllers-67bb596d88-mtqfq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0" Sep 10 01:11:51.134607 env[1267]: 2025-09-10 01:11:51.056 [INFO][4429] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f" Namespace="calico-system" Pod="calico-kube-controllers-67bb596d88-mtqfq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0" Sep 10 01:11:51.134607 env[1267]: 2025-09-10 01:11:51.057 [INFO][4429] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f" Namespace="calico-system" Pod="calico-kube-controllers-67bb596d88-mtqfq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0", GenerateName:"calico-kube-controllers-67bb596d88-", Namespace:"calico-system", SelfLink:"", UID:"0d86b565-8184-416c-b12b-737eb73d2b94", ResourceVersion:"981", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"67bb596d88", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f", Pod:"calico-kube-controllers-67bb596d88-mtqfq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie9652f7e06c", MAC:"06:52:4e:2d:49:40", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:11:51.134607 env[1267]: 2025-09-10 01:11:51.068 [INFO][4429] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f" Namespace="calico-system" Pod="calico-kube-controllers-67bb596d88-mtqfq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0" Sep 10 01:11:51.087422 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2177475433.mount: Deactivated successfully. Sep 10 01:11:51.229000 audit[4507]: NETFILTER_CFG table=filter:114 family=2 entries=89 op=nft_register_chain pid=4507 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 01:11:51.229000 audit[4507]: SYSCALL arch=c000003e syscall=46 success=yes exit=45692 a0=3 a1=7ffd2587c660 a2=0 a3=7ffd2587c64c items=0 ppid=3411 pid=4507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:51.229000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 01:11:51.290444 env[1267]: time="2025-09-10T01:11:51.277608095Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 01:11:51.290444 env[1267]: time="2025-09-10T01:11:51.277628969Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 01:11:51.290444 env[1267]: time="2025-09-10T01:11:51.277635705Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 01:11:51.290444 env[1267]: time="2025-09-10T01:11:51.277706884Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81 pid=4516 runtime=io.containerd.runc.v2 Sep 10 01:11:51.294265 systemd[1]: run-containerd-runc-k8s.io-36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81-runc.ov46EB.mount: Deactivated successfully. Sep 10 01:11:51.298360 systemd[1]: Started cri-containerd-36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81.scope. Sep 10 01:11:51.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit: BPF prog-id=204 op=LOAD Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4516 pid=4527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:51.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336383233666162633932376264626632666533323063346662626333 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4516 pid=4527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:51.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336383233666162633932376264626632666533323063346662626333 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit: BPF prog-id=205 op=LOAD Sep 10 01:11:51.316000 audit[4527]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00025ff00 items=0 ppid=4516 pid=4527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:51.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336383233666162633932376264626632666533323063346662626333 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit: BPF prog-id=206 op=LOAD Sep 10 01:11:51.316000 audit[4527]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00025ff48 items=0 ppid=4516 pid=4527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:51.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336383233666162633932376264626632666533323063346662626333 Sep 10 01:11:51.316000 audit: BPF prog-id=206 op=UNLOAD Sep 10 01:11:51.316000 audit: BPF prog-id=205 op=UNLOAD Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { perfmon } for pid=4527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit[4527]: AVC avc: denied { bpf } for pid=4527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.316000 audit: BPF prog-id=207 op=LOAD Sep 10 01:11:51.316000 audit[4527]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000388358 items=0 ppid=4516 pid=4527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:51.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336383233666162633932376264626632666533323063346662626333 Sep 10 01:11:51.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit: BPF prog-id=208 op=LOAD Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4553 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:51.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335386136353139353836376232353434366366333135333265316335 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4553 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:51.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335386136353139353836376232353434366366333135333265316335 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit: BPF prog-id=209 op=LOAD Sep 10 01:11:51.394000 audit[4564]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000275dc0 items=0 ppid=4553 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:51.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335386136353139353836376232353434366366333135333265316335 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit: BPF prog-id=210 op=LOAD Sep 10 01:11:51.394000 audit[4564]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000275e08 items=0 ppid=4553 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:51.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335386136353139353836376232353434366366333135333265316335 Sep 10 01:11:51.394000 audit: BPF prog-id=210 op=UNLOAD Sep 10 01:11:51.394000 audit: BPF prog-id=209 op=UNLOAD Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:51.394000 audit: BPF prog-id=211 op=LOAD Sep 10 01:11:51.394000 audit[4564]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00036c218 items=0 ppid=4553 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:51.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335386136353139353836376232353434366366333135333265316335 Sep 10 01:11:51.318896 systemd-resolved[1193]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 01:11:51.464179 env[1267]: time="2025-09-10T01:11:51.352825274Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 01:11:51.464179 env[1267]: time="2025-09-10T01:11:51.352848947Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 01:11:51.464179 env[1267]: time="2025-09-10T01:11:51.352855967Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 01:11:51.464179 env[1267]: time="2025-09-10T01:11:51.352915642Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f pid=4553 runtime=io.containerd.runc.v2 Sep 10 01:11:51.464179 env[1267]: time="2025-09-10T01:11:51.368660351Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64564cc5c9-z6hvk,Uid:373a83e4-9cfa-498c-a1d2-cf000ad59143,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81\"" Sep 10 01:11:51.464179 env[1267]: time="2025-09-10T01:11:51.421780369Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-67bb596d88-mtqfq,Uid:0d86b565-8184-416c-b12b-737eb73d2b94,Namespace:calico-system,Attempt:1,} returns sandbox id \"358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f\"" Sep 10 01:11:51.373035 systemd[1]: Started cri-containerd-358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f.scope. Sep 10 01:11:51.396503 systemd-resolved[1193]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 01:11:52.195460 kernel: kauditd_printk_skb: 476 callbacks suppressed Sep 10 01:11:52.213483 kernel: audit: type=1325 audit(1757466712.190:1364): table=filter:115 family=2 entries=14 op=nft_register_rule pid=4594 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:52.230678 kernel: audit: type=1300 audit(1757466712.190:1364): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffa5c846c0 a2=0 a3=7fffa5c846ac items=0 ppid=2249 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:52.230752 kernel: audit: type=1327 audit(1757466712.190:1364): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:52.230781 kernel: audit: type=1325 audit(1757466712.202:1365): table=nat:116 family=2 entries=44 op=nft_register_rule pid=4594 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:52.230804 kernel: audit: type=1300 audit(1757466712.202:1365): arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7fffa5c846c0 a2=0 a3=7fffa5c846ac items=0 ppid=2249 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:52.230832 kernel: audit: type=1327 audit(1757466712.202:1365): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:52.190000 audit[4594]: NETFILTER_CFG table=filter:115 family=2 entries=14 op=nft_register_rule pid=4594 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:52.190000 audit[4594]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffa5c846c0 a2=0 a3=7fffa5c846ac items=0 ppid=2249 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:52.190000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:52.202000 audit[4594]: NETFILTER_CFG table=nat:116 family=2 entries=44 op=nft_register_rule pid=4594 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:52.202000 audit[4594]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7fffa5c846c0 a2=0 a3=7fffa5c846ac items=0 ppid=2249 pid=4594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:52.202000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:52.603000 audit[4417]: AVC avc: denied { getattr } for pid=4417 comm="coredns" path="cgroup:[4026532614]" dev="nsfs" ino=4026532614 scontext=system_u:system_r:svirt_lxc_net_t:s0:c428,c545 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 10 01:11:52.622858 kernel: audit: type=1400 audit(1757466712.603:1366): avc: denied { getattr } for pid=4417 comm="coredns" path="cgroup:[4026532614]" dev="nsfs" ino=4026532614 scontext=system_u:system_r:svirt_lxc_net_t:s0:c428,c545 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 10 01:11:52.622903 kernel: audit: type=1300 audit(1757466712.603:1366): arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c0001545b8 a2=c0004bbbd8 a3=0 items=0 ppid=4284 pid=4417 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c428,c545 key=(null) Sep 10 01:11:52.622921 kernel: audit: type=1327 audit(1757466712.603:1366): proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 10 01:11:52.603000 audit[4417]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c0001545b8 a2=c0004bbbd8 a3=0 items=0 ppid=4284 pid=4417 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c428,c545 key=(null) Sep 10 01:11:52.603000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 10 01:11:52.618432 systemd-networkd[1063]: cali53dd666f0e1: Gained IPv6LL Sep 10 01:11:52.746402 systemd-networkd[1063]: calie9652f7e06c: Gained IPv6LL Sep 10 01:11:52.887281 env[1267]: time="2025-09-10T01:11:52.887201787Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:52.890957 env[1267]: time="2025-09-10T01:11:52.890633052Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a7d029fd8f6be94c26af980675c1650818e1e6e19dbd2f8c13e6e61963f021e8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:52.896857 env[1267]: time="2025-09-10T01:11:52.896822210Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:52.898850 env[1267]: time="2025-09-10T01:11:52.898824629Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:46297703ab3739331a00a58f0d6a5498c8d3b6523ad947eed68592ee0f3e79f0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:52.899209 env[1267]: time="2025-09-10T01:11:52.899192213Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\" returns image reference \"sha256:a7d029fd8f6be94c26af980675c1650818e1e6e19dbd2f8c13e6e61963f021e8\"" Sep 10 01:11:53.077116 kubelet[2111]: I0910 01:11:50.752486 2111 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-sntmg" podStartSLOduration=41.725439735 podStartE2EDuration="41.725439735s" podCreationTimestamp="2025-09-10 01:11:09 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-10 01:11:50.724479525 +0000 UTC m=+46.370060946" watchObservedRunningTime="2025-09-10 01:11:50.725439735 +0000 UTC m=+46.371021162" Sep 10 01:11:53.815058 env[1267]: time="2025-09-10T01:11:53.814933311Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 10 01:11:54.169323 env[1267]: time="2025-09-10T01:11:54.169203288Z" level=info msg="CreateContainer within sandbox \"baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Sep 10 01:11:54.189715 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3418867827.mount: Deactivated successfully. Sep 10 01:11:54.194962 env[1267]: time="2025-09-10T01:11:54.194938896Z" level=info msg="CreateContainer within sandbox \"baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"d33397f53ea424cac6098c9e3d1f857cdb8f55da3d920bd5fd7e60c7a3a6ce91\"" Sep 10 01:11:54.197240 env[1267]: time="2025-09-10T01:11:54.197222851Z" level=info msg="StartContainer for \"d33397f53ea424cac6098c9e3d1f857cdb8f55da3d920bd5fd7e60c7a3a6ce91\"" Sep 10 01:11:54.221390 systemd[1]: Started cri-containerd-d33397f53ea424cac6098c9e3d1f857cdb8f55da3d920bd5fd7e60c7a3a6ce91.scope. Sep 10 01:11:54.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.244000 audit: BPF prog-id=212 op=LOAD Sep 10 01:11:54.309192 kernel: audit: type=1400 audit(1757466714.244:1367): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.247000 audit[4606]: AVC avc: denied { bpf } for pid=4606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.247000 audit[4606]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=3781 pid=4606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:54.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433333339376635336561343234636163363039386339653364316638 Sep 10 01:11:54.247000 audit[4606]: AVC avc: denied { perfmon } for pid=4606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.247000 audit[4606]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=8 items=0 ppid=3781 pid=4606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:54.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433333339376635336561343234636163363039386339653364316638 Sep 10 01:11:54.247000 audit[4606]: AVC avc: denied { bpf } for pid=4606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.247000 audit[4606]: AVC avc: denied { bpf } for pid=4606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.247000 audit[4606]: AVC avc: denied { bpf } for pid=4606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.247000 audit[4606]: AVC avc: denied { perfmon } for pid=4606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.247000 audit[4606]: AVC avc: denied { perfmon } for pid=4606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.247000 audit[4606]: AVC avc: denied { perfmon } for pid=4606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.247000 audit[4606]: AVC avc: denied { perfmon } for pid=4606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.247000 audit[4606]: AVC avc: denied { perfmon } for pid=4606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.247000 audit[4606]: AVC avc: denied { bpf } for pid=4606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.247000 audit[4606]: AVC avc: denied { bpf } for pid=4606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.247000 audit: BPF prog-id=213 op=LOAD Sep 10 01:11:54.247000 audit[4606]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c0003058a0 items=0 ppid=3781 pid=4606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:54.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433333339376635336561343234636163363039386339653364316638 Sep 10 01:11:54.248000 audit[4606]: AVC avc: denied { bpf } for pid=4606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.248000 audit[4606]: AVC avc: denied { bpf } for pid=4606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.248000 audit[4606]: AVC avc: denied { perfmon } for pid=4606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.248000 audit[4606]: AVC avc: denied { perfmon } for pid=4606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.248000 audit[4606]: AVC avc: denied { perfmon } for pid=4606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.248000 audit[4606]: AVC avc: denied { perfmon } for pid=4606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.248000 audit[4606]: AVC avc: denied { perfmon } for pid=4606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.248000 audit[4606]: AVC avc: denied { bpf } for pid=4606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.248000 audit[4606]: AVC avc: denied { bpf } for pid=4606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.248000 audit: BPF prog-id=214 op=LOAD Sep 10 01:11:54.248000 audit[4606]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c0003058e8 items=0 ppid=3781 pid=4606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:54.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433333339376635336561343234636163363039386339653364316638 Sep 10 01:11:54.248000 audit: BPF prog-id=214 op=UNLOAD Sep 10 01:11:54.248000 audit: BPF prog-id=213 op=UNLOAD Sep 10 01:11:54.248000 audit[4606]: AVC avc: denied { bpf } for pid=4606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.248000 audit[4606]: AVC avc: denied { bpf } for pid=4606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.248000 audit[4606]: AVC avc: denied { bpf } for pid=4606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.248000 audit[4606]: AVC avc: denied { perfmon } for pid=4606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.248000 audit[4606]: AVC avc: denied { perfmon } for pid=4606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.248000 audit[4606]: AVC avc: denied { perfmon } for pid=4606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.248000 audit[4606]: AVC avc: denied { perfmon } for pid=4606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.248000 audit[4606]: AVC avc: denied { perfmon } for pid=4606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.248000 audit[4606]: AVC avc: denied { bpf } for pid=4606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.248000 audit[4606]: AVC avc: denied { bpf } for pid=4606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:54.248000 audit: BPF prog-id=215 op=LOAD Sep 10 01:11:54.248000 audit[4606]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c000305cf8 items=0 ppid=3781 pid=4606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:54.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433333339376635336561343234636163363039386339653364316638 Sep 10 01:11:54.315000 audit[4617]: NETFILTER_CFG table=filter:117 family=2 entries=14 op=nft_register_rule pid=4617 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:54.315000 audit[4617]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffa89034c0 a2=0 a3=7fffa89034ac items=0 ppid=2249 pid=4617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:54.315000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:54.318019 env[1267]: time="2025-09-10T01:11:54.310406564Z" level=info msg="StartContainer for \"d33397f53ea424cac6098c9e3d1f857cdb8f55da3d920bd5fd7e60c7a3a6ce91\" returns successfully" Sep 10 01:11:54.406000 audit[4617]: NETFILTER_CFG table=nat:118 family=2 entries=56 op=nft_register_chain pid=4617 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:54.406000 audit[4617]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7fffa89034c0 a2=0 a3=7fffa89034ac items=0 ppid=2249 pid=4617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:54.406000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:55.186252 systemd[1]: run-containerd-runc-k8s.io-d33397f53ea424cac6098c9e3d1f857cdb8f55da3d920bd5fd7e60c7a3a6ce91-runc.beYYCE.mount: Deactivated successfully. Sep 10 01:11:55.290000 audit[4640]: NETFILTER_CFG table=filter:119 family=2 entries=14 op=nft_register_rule pid=4640 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:55.290000 audit[4640]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffba5de970 a2=0 a3=7fffba5de95c items=0 ppid=2249 pid=4640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:55.290000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:55.294000 audit[4640]: NETFILTER_CFG table=nat:120 family=2 entries=20 op=nft_register_rule pid=4640 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:55.294000 audit[4640]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fffba5de970 a2=0 a3=7fffba5de95c items=0 ppid=2249 pid=4640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:55.294000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:56.198480 systemd[1]: run-containerd-runc-k8s.io-d33397f53ea424cac6098c9e3d1f857cdb8f55da3d920bd5fd7e60c7a3a6ce91-runc.ppdvAp.mount: Deactivated successfully. Sep 10 01:11:58.488101 env[1267]: time="2025-09-10T01:11:58.488074234Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:58.513308 env[1267]: time="2025-09-10T01:11:58.496542384Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:58.513308 env[1267]: time="2025-09-10T01:11:58.500725296Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:58.513308 env[1267]: time="2025-09-10T01:11:58.502813658Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:11:58.513308 env[1267]: time="2025-09-10T01:11:58.503086025Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a\"" Sep 10 01:11:58.552383 env[1267]: time="2025-09-10T01:11:58.552186290Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\"" Sep 10 01:11:58.722887 env[1267]: time="2025-09-10T01:11:58.722856373Z" level=info msg="CreateContainer within sandbox \"2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 10 01:11:58.741099 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3622789674.mount: Deactivated successfully. Sep 10 01:11:58.754695 env[1267]: time="2025-09-10T01:11:58.744468330Z" level=info msg="CreateContainer within sandbox \"2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"61ad4920401cb12bd41d893b0d30762fc0c79a1e17f901176f88522826f31033\"" Sep 10 01:11:58.761744 env[1267]: time="2025-09-10T01:11:58.761715595Z" level=info msg="StartContainer for \"61ad4920401cb12bd41d893b0d30762fc0c79a1e17f901176f88522826f31033\"" Sep 10 01:11:58.807964 systemd[1]: Started cri-containerd-61ad4920401cb12bd41d893b0d30762fc0c79a1e17f901176f88522826f31033.scope. Sep 10 01:11:58.842941 kernel: kauditd_printk_skb: 68 callbacks suppressed Sep 10 01:11:58.865306 kernel: audit: type=1400 audit(1757466718.838:1389): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.867664 kernel: audit: type=1400 audit(1757466718.838:1390): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.867728 kernel: audit: type=1400 audit(1757466718.838:1391): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.871877 kernel: audit: type=1400 audit(1757466718.838:1392): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.871902 kernel: audit: type=1400 audit(1757466718.838:1393): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.871919 kernel: audit: type=1400 audit(1757466718.838:1394): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.871968 kernel: audit: type=1400 audit(1757466718.838:1395): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.874675 kernel: audit: type=1400 audit(1757466718.838:1396): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.875580 kernel: audit: type=1400 audit(1757466718.838:1397): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.876145 kernel: audit: type=1400 audit(1757466718.841:1398): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.841000 audit: BPF prog-id=216 op=LOAD Sep 10 01:11:58.842000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.842000 audit[4697]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3827 pid=4697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:58.842000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631616434393230343031636231326264343164383933623064333037 Sep 10 01:11:58.842000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.842000 audit[4697]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3827 pid=4697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:58.842000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631616434393230343031636231326264343164383933623064333037 Sep 10 01:11:58.842000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.842000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.842000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.842000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.842000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.842000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.842000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.842000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.842000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.842000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.842000 audit: BPF prog-id=217 op=LOAD Sep 10 01:11:58.842000 audit[4697]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003186c0 items=0 ppid=3827 pid=4697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:58.842000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631616434393230343031636231326264343164383933623064333037 Sep 10 01:11:58.844000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.844000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.844000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.844000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.844000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.844000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.844000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.844000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.844000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.844000 audit: BPF prog-id=218 op=LOAD Sep 10 01:11:58.844000 audit[4697]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000318708 items=0 ppid=3827 pid=4697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:58.844000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631616434393230343031636231326264343164383933623064333037 Sep 10 01:11:58.847000 audit: BPF prog-id=218 op=UNLOAD Sep 10 01:11:58.847000 audit: BPF prog-id=217 op=UNLOAD Sep 10 01:11:58.847000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.847000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.847000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.847000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.847000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.847000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.847000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.847000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.847000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.847000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:11:58.847000 audit: BPF prog-id=219 op=LOAD Sep 10 01:11:58.847000 audit[4697]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000318b18 items=0 ppid=3827 pid=4697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:58.847000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631616434393230343031636231326264343164383933623064333037 Sep 10 01:11:58.909535 env[1267]: time="2025-09-10T01:11:58.893331246Z" level=info msg="StartContainer for \"61ad4920401cb12bd41d893b0d30762fc0c79a1e17f901176f88522826f31033\" returns successfully" Sep 10 01:11:59.344145 kubelet[2111]: I0910 01:11:59.337329 2111 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-64564cc5c9-lj22c" podStartSLOduration=29.047427224 podStartE2EDuration="41.323614762s" podCreationTimestamp="2025-09-10 01:11:18 +0000 UTC" firstStartedPulling="2025-09-10 01:11:46.262934032 +0000 UTC m=+41.908515452" lastFinishedPulling="2025-09-10 01:11:58.539121568 +0000 UTC m=+54.184702990" observedRunningTime="2025-09-10 01:11:59.306747762 +0000 UTC m=+54.952329184" watchObservedRunningTime="2025-09-10 01:11:59.323614762 +0000 UTC m=+54.969196184" Sep 10 01:11:59.362950 kubelet[2111]: I0910 01:11:59.344472 2111 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-54d579b49d-ndnrv" podStartSLOduration=32.740505271 podStartE2EDuration="40.344462184s" podCreationTimestamp="2025-09-10 01:11:19 +0000 UTC" firstStartedPulling="2025-09-10 01:11:46.185584889 +0000 UTC m=+41.831166305" lastFinishedPulling="2025-09-10 01:11:53.789541799 +0000 UTC m=+49.435123218" observedRunningTime="2025-09-10 01:11:55.204553305 +0000 UTC m=+50.850134733" watchObservedRunningTime="2025-09-10 01:11:59.344462184 +0000 UTC m=+54.990043606" Sep 10 01:11:59.586000 audit[4727]: NETFILTER_CFG table=filter:121 family=2 entries=14 op=nft_register_rule pid=4727 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:59.586000 audit[4727]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffa4b75030 a2=0 a3=7fffa4b7501c items=0 ppid=2249 pid=4727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:59.586000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:59.591000 audit[4727]: NETFILTER_CFG table=nat:122 family=2 entries=20 op=nft_register_rule pid=4727 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:11:59.591000 audit[4727]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fffa4b75030 a2=0 a3=7fffa4b7501c items=0 ppid=2249 pid=4727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:11:59.591000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:11:59.662649 systemd[1]: run-containerd-runc-k8s.io-61ad4920401cb12bd41d893b0d30762fc0c79a1e17f901176f88522826f31033-runc.eKyYol.mount: Deactivated successfully. Sep 10 01:11:59.983000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:11:59.983000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000b44500 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:11:59.983000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:11:59.983000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:11:59.983000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0014da4b0 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:11:59.983000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:12:00.296328 kubelet[2111]: I0910 01:12:00.296252 2111 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 10 01:12:00.572500 env[1267]: time="2025-09-10T01:12:00.572435826Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:00.574945 env[1267]: time="2025-09-10T01:12:00.574347775Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:666f4e02e75c30547109a06ed75b415a990a970811173aa741379cfaac4d9dd7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:00.575584 env[1267]: time="2025-09-10T01:12:00.575571179Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:00.576524 env[1267]: time="2025-09-10T01:12:00.576510719Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:f22c88018d8b58c4ef0052f594b216a13bd6852166ac131a538c5ab2fba23bb2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:00.578221 env[1267]: time="2025-09-10T01:12:00.576825068Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\" returns image reference \"sha256:666f4e02e75c30547109a06ed75b415a990a970811173aa741379cfaac4d9dd7\"" Sep 10 01:12:00.578221 env[1267]: time="2025-09-10T01:12:00.577793548Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 10 01:12:00.597147 env[1267]: time="2025-09-10T01:12:00.597124674Z" level=info msg="CreateContainer within sandbox \"08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Sep 10 01:12:00.610505 env[1267]: time="2025-09-10T01:12:00.610476740Z" level=info msg="CreateContainer within sandbox \"08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"feab280e4b68c8c4ec130f7dbd0b7e1db949365a4e5b40d9a782f508d0ed4eab\"" Sep 10 01:12:00.610837 env[1267]: time="2025-09-10T01:12:00.610816532Z" level=info msg="StartContainer for \"feab280e4b68c8c4ec130f7dbd0b7e1db949365a4e5b40d9a782f508d0ed4eab\"" Sep 10 01:12:00.631132 systemd[1]: Started cri-containerd-feab280e4b68c8c4ec130f7dbd0b7e1db949365a4e5b40d9a782f508d0ed4eab.scope. Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { perfmon } for pid=4743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fdcc7fc26d8 items=0 ppid=3967 pid=4743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:00.653000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665616232383065346236386338633465633133306637646264306237 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { bpf } for pid=4743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { bpf } for pid=4743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { bpf } for pid=4743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { perfmon } for pid=4743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { perfmon } for pid=4743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { perfmon } for pid=4743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { perfmon } for pid=4743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { perfmon } for pid=4743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { bpf } for pid=4743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { bpf } for pid=4743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit: BPF prog-id=220 op=LOAD Sep 10 01:12:00.653000 audit[4743]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0002e1e78 items=0 ppid=3967 pid=4743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:00.653000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665616232383065346236386338633465633133306637646264306237 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { bpf } for pid=4743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { bpf } for pid=4743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { perfmon } for pid=4743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { perfmon } for pid=4743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { perfmon } for pid=4743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { perfmon } for pid=4743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { perfmon } for pid=4743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { bpf } for pid=4743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { bpf } for pid=4743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit: BPF prog-id=221 op=LOAD Sep 10 01:12:00.653000 audit[4743]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0002e1ec8 items=0 ppid=3967 pid=4743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:00.653000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665616232383065346236386338633465633133306637646264306237 Sep 10 01:12:00.653000 audit: BPF prog-id=221 op=UNLOAD Sep 10 01:12:00.653000 audit: BPF prog-id=220 op=UNLOAD Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { bpf } for pid=4743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { bpf } for pid=4743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { bpf } for pid=4743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { perfmon } for pid=4743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { perfmon } for pid=4743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { perfmon } for pid=4743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { perfmon } for pid=4743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { perfmon } for pid=4743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { bpf } for pid=4743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit[4743]: AVC avc: denied { bpf } for pid=4743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:00.653000 audit: BPF prog-id=222 op=LOAD Sep 10 01:12:00.653000 audit[4743]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0002e1f58 items=0 ppid=3967 pid=4743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:00.653000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665616232383065346236386338633465633133306637646264306237 Sep 10 01:12:00.666021 env[1267]: time="2025-09-10T01:12:00.665992357Z" level=info msg="StartContainer for \"feab280e4b68c8c4ec130f7dbd0b7e1db949365a4e5b40d9a782f508d0ed4eab\" returns successfully" Sep 10 01:12:00.719000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:12:00.719000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c007952260 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:12:00.719000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:12:00.719000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:12:00.719000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c00a90c8d0 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:12:00.719000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:12:00.719000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6730 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:12:00.719000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00a88de00 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:12:00.719000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:12:00.725000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:12:00.725000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c00a90c900 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:12:00.725000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:12:00.730000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6736 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:12:00.730000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c00a90c990 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:12:00.730000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:12:00.732000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:12:00.732000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c0079522a0 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:12:00.732000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:12:00.928000 audit[4711]: AVC avc: denied { watch } for pid=4711 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_11_33.3120734617/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c562 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c339,c562 tclass=file permissive=0 Sep 10 01:12:00.928000 audit[4711]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0017ac380 a2=fc6 a3=0 items=0 ppid=3827 pid=4711 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c562 key=(null) Sep 10 01:12:00.928000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 01:12:00.953483 env[1267]: time="2025-09-10T01:12:00.953437777Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:00.954626 env[1267]: time="2025-09-10T01:12:00.954602788Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:00.955422 env[1267]: time="2025-09-10T01:12:00.955407818Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:00.957776 env[1267]: time="2025-09-10T01:12:00.957740791Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:00.958096 env[1267]: time="2025-09-10T01:12:00.958077747Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a\"" Sep 10 01:12:00.959259 env[1267]: time="2025-09-10T01:12:00.959246073Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\"" Sep 10 01:12:00.962324 env[1267]: time="2025-09-10T01:12:00.962293345Z" level=info msg="CreateContainer within sandbox \"53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 10 01:12:00.983122 env[1267]: time="2025-09-10T01:12:00.983091480Z" level=info msg="CreateContainer within sandbox \"53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"1905e0ad7d1e88cb4c3d24c22991165273f10ac9fe0cc408cba1c8bf70e8b525\"" Sep 10 01:12:00.985939 env[1267]: time="2025-09-10T01:12:00.983645516Z" level=info msg="StartContainer for \"1905e0ad7d1e88cb4c3d24c22991165273f10ac9fe0cc408cba1c8bf70e8b525\"" Sep 10 01:12:01.016122 systemd[1]: Started cri-containerd-1905e0ad7d1e88cb4c3d24c22991165273f10ac9fe0cc408cba1c8bf70e8b525.scope. Sep 10 01:12:01.018453 systemd[1]: run-containerd-runc-k8s.io-1905e0ad7d1e88cb4c3d24c22991165273f10ac9fe0cc408cba1c8bf70e8b525-runc.rPh0Oa.mount: Deactivated successfully. Sep 10 01:12:01.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit: BPF prog-id=223 op=LOAD Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4014 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:01.058000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139303565306164376431653838636234633364323463323239393131 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4014 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:01.058000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139303565306164376431653838636234633364323463323239393131 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit: BPF prog-id=224 op=LOAD Sep 10 01:12:01.058000 audit[4780]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000383dc0 items=0 ppid=4014 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:01.058000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139303565306164376431653838636234633364323463323239393131 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit: BPF prog-id=225 op=LOAD Sep 10 01:12:01.058000 audit[4780]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000383e08 items=0 ppid=4014 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:01.058000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139303565306164376431653838636234633364323463323239393131 Sep 10 01:12:01.058000 audit: BPF prog-id=225 op=UNLOAD Sep 10 01:12:01.058000 audit: BPF prog-id=224 op=UNLOAD Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:01.058000 audit: BPF prog-id=226 op=LOAD Sep 10 01:12:01.058000 audit[4780]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003e0218 items=0 ppid=4014 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:01.058000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139303565306164376431653838636234633364323463323239393131 Sep 10 01:12:01.123542 env[1267]: time="2025-09-10T01:12:01.114413616Z" level=info msg="StartContainer for \"1905e0ad7d1e88cb4c3d24c22991165273f10ac9fe0cc408cba1c8bf70e8b525\" returns successfully" Sep 10 01:12:01.378558 kubelet[2111]: I0910 01:12:01.377434 2111 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-65f67d55cc-tx6qp" podStartSLOduration=28.347516408 podStartE2EDuration="42.369587399s" podCreationTimestamp="2025-09-10 01:11:19 +0000 UTC" firstStartedPulling="2025-09-10 01:11:46.936652571 +0000 UTC m=+42.582233987" lastFinishedPulling="2025-09-10 01:12:00.958723561 +0000 UTC m=+56.604304978" observedRunningTime="2025-09-10 01:12:01.34072414 +0000 UTC m=+56.986305561" watchObservedRunningTime="2025-09-10 01:12:01.369587399 +0000 UTC m=+57.015168828" Sep 10 01:12:01.557000 audit[4817]: NETFILTER_CFG table=filter:123 family=2 entries=14 op=nft_register_rule pid=4817 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:12:01.557000 audit[4817]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc2ad7c890 a2=0 a3=7ffc2ad7c87c items=0 ppid=2249 pid=4817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:01.557000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:12:01.561000 audit[4817]: NETFILTER_CFG table=nat:124 family=2 entries=20 op=nft_register_rule pid=4817 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:12:01.561000 audit[4817]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffc2ad7c890 a2=0 a3=7ffc2ad7c87c items=0 ppid=2249 pid=4817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:01.561000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:12:01.931000 audit[4791]: AVC avc: denied { watch } for pid=4791 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_11_33.1359678746/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c725 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c604,c725 tclass=file permissive=0 Sep 10 01:12:01.931000 audit[4791]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0013ef8c0 a2=fc6 a3=0 items=0 ppid=4014 pid=4791 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c725 key=(null) Sep 10 01:12:01.931000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 01:12:02.456000 audit[4819]: NETFILTER_CFG table=filter:125 family=2 entries=13 op=nft_register_rule pid=4819 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:12:02.456000 audit[4819]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe090af7e0 a2=0 a3=7ffe090af7cc items=0 ppid=2249 pid=4819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:02.456000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:12:02.459000 audit[4819]: NETFILTER_CFG table=nat:126 family=2 entries=27 op=nft_register_chain pid=4819 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:12:02.459000 audit[4819]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffe090af7e0 a2=0 a3=7ffe090af7cc items=0 ppid=2249 pid=4819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:02.459000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:12:03.893438 kubelet[2111]: I0910 01:12:03.858425 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/d18149dc-ca0e-4795-a11e-37e684c36cd5-calico-apiserver-certs\") pod \"calico-apiserver-65f67d55cc-tsnl2\" (UID: \"d18149dc-ca0e-4795-a11e-37e684c36cd5\") " pod="calico-apiserver/calico-apiserver-65f67d55cc-tsnl2" Sep 10 01:12:03.960414 kubelet[2111]: I0910 01:12:03.906365 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fjnk2\" (UniqueName: \"kubernetes.io/projected/d18149dc-ca0e-4795-a11e-37e684c36cd5-kube-api-access-fjnk2\") pod \"calico-apiserver-65f67d55cc-tsnl2\" (UID: \"d18149dc-ca0e-4795-a11e-37e684c36cd5\") " pod="calico-apiserver/calico-apiserver-65f67d55cc-tsnl2" Sep 10 01:12:04.094690 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2223186372.mount: Deactivated successfully. Sep 10 01:12:04.488247 env[1267]: time="2025-09-10T01:12:04.488209398Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:04.526364 env[1267]: time="2025-09-10T01:12:04.525892298Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7e29b0984d517678aab6ca138482c318989f6f28daf9d3b5dd6e4a5a3115ac16,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:04.541861 env[1267]: time="2025-09-10T01:12:04.541825019Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:04.546672 env[1267]: time="2025-09-10T01:12:04.546060248Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:29becebc47401da9997a2a30f4c25c511a5f379d17275680b048224829af71a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:04.546672 env[1267]: time="2025-09-10T01:12:04.546588004Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\" returns image reference \"sha256:7e29b0984d517678aab6ca138482c318989f6f28daf9d3b5dd6e4a5a3115ac16\"" Sep 10 01:12:05.593925 env[1267]: time="2025-09-10T01:12:05.593897300Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 10 01:12:05.734413 systemd[1]: Created slice kubepods-besteffort-podd18149dc_ca0e_4795_a11e_37e684c36cd5.slice. Sep 10 01:12:05.766665 env[1267]: time="2025-09-10T01:12:05.766626904Z" level=info msg="StopPodSandbox for \"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\"" Sep 10 01:12:05.892382 env[1267]: time="2025-09-10T01:12:05.892251231Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-65f67d55cc-tsnl2,Uid:d18149dc-ca0e-4795-a11e-37e684c36cd5,Namespace:calico-apiserver,Attempt:0,}" Sep 10 01:12:06.102831 env[1267]: time="2025-09-10T01:12:06.102790966Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:06.105409 env[1267]: time="2025-09-10T01:12:06.105125056Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:06.108973 env[1267]: time="2025-09-10T01:12:06.108389082Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:06.111682 env[1267]: time="2025-09-10T01:12:06.111664832Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:06.113099 env[1267]: time="2025-09-10T01:12:06.111890297Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a\"" Sep 10 01:12:07.194107 env[1267]: 2025-09-10 01:12:06.469 [WARNING][4839] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0", GenerateName:"calico-apiserver-64564cc5c9-", Namespace:"calico-apiserver", SelfLink:"", UID:"373a83e4-9cfa-498c-a1d2-cf000ad59143", ResourceVersion:"1066", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64564cc5c9", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81", Pod:"calico-apiserver-64564cc5c9-z6hvk", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali53dd666f0e1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:12:07.194107 env[1267]: 2025-09-10 01:12:06.477 [INFO][4839] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Sep 10 01:12:07.194107 env[1267]: 2025-09-10 01:12:06.477 [INFO][4839] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" iface="eth0" netns="" Sep 10 01:12:07.194107 env[1267]: 2025-09-10 01:12:06.477 [INFO][4839] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Sep 10 01:12:07.194107 env[1267]: 2025-09-10 01:12:06.477 [INFO][4839] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Sep 10 01:12:07.194107 env[1267]: 2025-09-10 01:12:06.882 [INFO][4858] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" HandleID="k8s-pod-network.1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Workload="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" Sep 10 01:12:07.194107 env[1267]: 2025-09-10 01:12:06.887 [INFO][4858] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:12:07.194107 env[1267]: 2025-09-10 01:12:07.140 [INFO][4858] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:12:07.194107 env[1267]: 2025-09-10 01:12:07.148 [WARNING][4858] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" HandleID="k8s-pod-network.1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Workload="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" Sep 10 01:12:07.194107 env[1267]: 2025-09-10 01:12:07.148 [INFO][4858] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" HandleID="k8s-pod-network.1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Workload="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" Sep 10 01:12:07.194107 env[1267]: 2025-09-10 01:12:07.165 [INFO][4858] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:12:07.194107 env[1267]: 2025-09-10 01:12:07.172 [INFO][4839] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Sep 10 01:12:07.194107 env[1267]: time="2025-09-10T01:12:07.188245097Z" level=info msg="TearDown network for sandbox \"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\" successfully" Sep 10 01:12:07.194107 env[1267]: time="2025-09-10T01:12:07.188267139Z" level=info msg="StopPodSandbox for \"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\" returns successfully" Sep 10 01:12:07.553435 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 10 01:12:07.575577 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0782367611c: link becomes ready Sep 10 01:12:07.575647 kernel: kauditd_printk_skb: 195 callbacks suppressed Sep 10 01:12:07.584270 kernel: audit: type=1400 audit(1757466727.517:1447): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:12:07.603465 kernel: audit: type=1400 audit(1757466727.518:1448): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:12:07.603542 kernel: audit: type=1300 audit(1757466727.518:1448): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e99740 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:12:07.603574 kernel: audit: type=1327 audit(1757466727.518:1448): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:12:07.603599 kernel: audit: type=1300 audit(1757466727.517:1447): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000cd9900 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:12:07.603618 kernel: audit: type=1327 audit(1757466727.517:1447): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:12:07.603642 kernel: audit: type=1400 audit(1757466727.560:1449): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:12:07.603667 kernel: audit: type=1300 audit(1757466727.560:1449): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000cd9920 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:12:07.603686 kernel: audit: type=1327 audit(1757466727.560:1449): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:12:07.517000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:12:07.518000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:12:07.518000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e99740 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:12:07.779995 kernel: audit: type=1400 audit(1757466727.750:1450): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:12:07.518000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:12:07.517000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000cd9900 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:12:07.517000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:12:07.560000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:12:07.560000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000cd9920 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:12:07.560000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:12:07.750000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:12:07.750000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cd9c40 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:12:07.750000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:12:07.379928 systemd-networkd[1063]: cali0782367611c: Link UP Sep 10 01:12:07.380053 systemd-networkd[1063]: cali0782367611c: Gained carrier Sep 10 01:12:08.295726 env[1267]: 2025-09-10 01:12:06.472 [INFO][4844] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--65f67d55cc--tsnl2-eth0 calico-apiserver-65f67d55cc- calico-apiserver d18149dc-ca0e-4795-a11e-37e684c36cd5 1086 0 2025-09-10 01:12:02 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:65f67d55cc projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-65f67d55cc-tsnl2 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali0782367611c [] [] }} ContainerID="4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc" Namespace="calico-apiserver" Pod="calico-apiserver-65f67d55cc-tsnl2" WorkloadEndpoint="localhost-k8s-calico--apiserver--65f67d55cc--tsnl2-" Sep 10 01:12:08.295726 env[1267]: 2025-09-10 01:12:06.477 [INFO][4844] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc" Namespace="calico-apiserver" Pod="calico-apiserver-65f67d55cc-tsnl2" WorkloadEndpoint="localhost-k8s-calico--apiserver--65f67d55cc--tsnl2-eth0" Sep 10 01:12:08.295726 env[1267]: 2025-09-10 01:12:06.882 [INFO][4860] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc" HandleID="k8s-pod-network.4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc" Workload="localhost-k8s-calico--apiserver--65f67d55cc--tsnl2-eth0" Sep 10 01:12:08.295726 env[1267]: 2025-09-10 01:12:06.887 [INFO][4860] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc" HandleID="k8s-pod-network.4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc" Workload="localhost-k8s-calico--apiserver--65f67d55cc--tsnl2-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00031a8f0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-65f67d55cc-tsnl2", "timestamp":"2025-09-10 01:12:06.882060406 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 10 01:12:08.295726 env[1267]: 2025-09-10 01:12:06.887 [INFO][4860] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:12:08.295726 env[1267]: 2025-09-10 01:12:06.892 [INFO][4860] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:12:08.295726 env[1267]: 2025-09-10 01:12:06.893 [INFO][4860] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Sep 10 01:12:08.295726 env[1267]: 2025-09-10 01:12:07.009 [INFO][4860] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc" host="localhost" Sep 10 01:12:08.295726 env[1267]: 2025-09-10 01:12:07.052 [INFO][4860] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Sep 10 01:12:08.295726 env[1267]: 2025-09-10 01:12:07.069 [INFO][4860] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Sep 10 01:12:08.295726 env[1267]: 2025-09-10 01:12:07.070 [INFO][4860] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Sep 10 01:12:08.295726 env[1267]: 2025-09-10 01:12:07.072 [INFO][4860] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Sep 10 01:12:08.295726 env[1267]: 2025-09-10 01:12:07.072 [INFO][4860] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc" host="localhost" Sep 10 01:12:08.295726 env[1267]: 2025-09-10 01:12:07.072 [INFO][4860] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc Sep 10 01:12:08.295726 env[1267]: 2025-09-10 01:12:07.121 [INFO][4860] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc" host="localhost" Sep 10 01:12:08.295726 env[1267]: 2025-09-10 01:12:07.140 [INFO][4860] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.138/26] block=192.168.88.128/26 handle="k8s-pod-network.4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc" host="localhost" Sep 10 01:12:08.295726 env[1267]: 2025-09-10 01:12:07.140 [INFO][4860] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.138/26] handle="k8s-pod-network.4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc" host="localhost" Sep 10 01:12:08.295726 env[1267]: 2025-09-10 01:12:07.140 [INFO][4860] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:12:08.295726 env[1267]: 2025-09-10 01:12:07.140 [INFO][4860] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.138/26] IPv6=[] ContainerID="4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc" HandleID="k8s-pod-network.4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc" Workload="localhost-k8s-calico--apiserver--65f67d55cc--tsnl2-eth0" Sep 10 01:12:08.353020 env[1267]: 2025-09-10 01:12:07.201 [INFO][4844] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc" Namespace="calico-apiserver" Pod="calico-apiserver-65f67d55cc-tsnl2" WorkloadEndpoint="localhost-k8s-calico--apiserver--65f67d55cc--tsnl2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--65f67d55cc--tsnl2-eth0", GenerateName:"calico-apiserver-65f67d55cc-", Namespace:"calico-apiserver", SelfLink:"", UID:"d18149dc-ca0e-4795-a11e-37e684c36cd5", ResourceVersion:"1086", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 12, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"65f67d55cc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-65f67d55cc-tsnl2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.138/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0782367611c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:12:08.353020 env[1267]: 2025-09-10 01:12:07.217 [INFO][4844] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.138/32] ContainerID="4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc" Namespace="calico-apiserver" Pod="calico-apiserver-65f67d55cc-tsnl2" WorkloadEndpoint="localhost-k8s-calico--apiserver--65f67d55cc--tsnl2-eth0" Sep 10 01:12:08.353020 env[1267]: 2025-09-10 01:12:07.224 [INFO][4844] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0782367611c ContainerID="4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc" Namespace="calico-apiserver" Pod="calico-apiserver-65f67d55cc-tsnl2" WorkloadEndpoint="localhost-k8s-calico--apiserver--65f67d55cc--tsnl2-eth0" Sep 10 01:12:08.353020 env[1267]: 2025-09-10 01:12:07.369 [INFO][4844] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc" Namespace="calico-apiserver" Pod="calico-apiserver-65f67d55cc-tsnl2" WorkloadEndpoint="localhost-k8s-calico--apiserver--65f67d55cc--tsnl2-eth0" Sep 10 01:12:08.353020 env[1267]: 2025-09-10 01:12:07.378 [INFO][4844] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc" Namespace="calico-apiserver" Pod="calico-apiserver-65f67d55cc-tsnl2" WorkloadEndpoint="localhost-k8s-calico--apiserver--65f67d55cc--tsnl2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--65f67d55cc--tsnl2-eth0", GenerateName:"calico-apiserver-65f67d55cc-", Namespace:"calico-apiserver", SelfLink:"", UID:"d18149dc-ca0e-4795-a11e-37e684c36cd5", ResourceVersion:"1086", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 12, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"65f67d55cc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc", Pod:"calico-apiserver-65f67d55cc-tsnl2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.138/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0782367611c", MAC:"a2:42:8d:46:11:fb", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:12:08.353020 env[1267]: 2025-09-10 01:12:08.207 [INFO][4844] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc" Namespace="calico-apiserver" Pod="calico-apiserver-65f67d55cc-tsnl2" WorkloadEndpoint="localhost-k8s-calico--apiserver--65f67d55cc--tsnl2-eth0" Sep 10 01:12:08.401211 env[1267]: time="2025-09-10T01:12:08.399950131Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 10 01:12:08.401211 env[1267]: time="2025-09-10T01:12:08.400013842Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 10 01:12:08.401211 env[1267]: time="2025-09-10T01:12:08.400021946Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 10 01:12:08.401211 env[1267]: time="2025-09-10T01:12:08.400115374Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc pid=4887 runtime=io.containerd.runc.v2 Sep 10 01:12:08.435969 systemd[1]: run-containerd-runc-k8s.io-4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc-runc.nh5r2L.mount: Deactivated successfully. Sep 10 01:12:08.510881 systemd[1]: Started cri-containerd-4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc.scope. Sep 10 01:12:08.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.547000 audit: BPF prog-id=227 op=LOAD Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c7c48 a2=10 a3=1c items=0 ppid=4887 pid=4897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:08.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436313366373764613334616232346335353863343165313464353662 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c76b0 a2=3c a3=c items=0 ppid=4887 pid=4897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:08.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436313366373764613334616232346335353863343165313464353662 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit: BPF prog-id=228 op=LOAD Sep 10 01:12:08.548000 audit[4897]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c79d8 a2=78 a3=c000249470 items=0 ppid=4887 pid=4897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:08.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436313366373764613334616232346335353863343165313464353662 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit: BPF prog-id=229 op=LOAD Sep 10 01:12:08.548000 audit[4897]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001c7770 a2=78 a3=c0002494b8 items=0 ppid=4887 pid=4897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:08.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436313366373764613334616232346335353863343165313464353662 Sep 10 01:12:08.548000 audit: BPF prog-id=229 op=UNLOAD Sep 10 01:12:08.548000 audit: BPF prog-id=228 op=UNLOAD Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { perfmon } for pid=4897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit[4897]: AVC avc: denied { bpf } for pid=4897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:08.548000 audit: BPF prog-id=230 op=LOAD Sep 10 01:12:08.548000 audit[4897]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c7c30 a2=78 a3=c0002498c8 items=0 ppid=4887 pid=4897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:08.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436313366373764613334616232346335353863343165313464353662 Sep 10 01:12:08.553570 systemd-resolved[1193]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Sep 10 01:12:08.664457 env[1267]: time="2025-09-10T01:12:08.593232204Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-65f67d55cc-tsnl2,Uid:d18149dc-ca0e-4795-a11e-37e684c36cd5,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc\"" Sep 10 01:12:08.991000 audit[4922]: NETFILTER_CFG table=filter:127 family=2 entries=69 op=nft_register_chain pid=4922 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 01:12:08.991000 audit[4922]: SYSCALL arch=c000003e syscall=46 success=yes exit=31392 a0=3 a1=7ffce61f9680 a2=0 a3=7ffce61f966c items=0 ppid=3411 pid=4922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:08.991000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 01:12:09.134599 systemd-networkd[1063]: cali0782367611c: Gained IPv6LL Sep 10 01:12:12.136092 env[1267]: time="2025-09-10T01:12:12.135587388Z" level=info msg="CreateContainer within sandbox \"7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Sep 10 01:12:12.136092 env[1267]: time="2025-09-10T01:12:12.135909741Z" level=info msg="RemovePodSandbox for \"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\"" Sep 10 01:12:12.136092 env[1267]: time="2025-09-10T01:12:12.135926433Z" level=info msg="Forcibly stopping sandbox \"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\"" Sep 10 01:12:12.311295 env[1267]: time="2025-09-10T01:12:12.292786213Z" level=info msg="CreateContainer within sandbox \"7be2bb183184e79690eb332a538244cd9a72a53e26919908066fee45f201397b\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"da5ed06cd1c388f8b72b5717a18208f7efdb55f869b14f86503f29306ac8f09a\"" Sep 10 01:12:12.926963 env[1267]: time="2025-09-10T01:12:12.926920753Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\"" Sep 10 01:12:13.696217 env[1267]: time="2025-09-10T01:12:13.695893088Z" level=info msg="StartContainer for \"da5ed06cd1c388f8b72b5717a18208f7efdb55f869b14f86503f29306ac8f09a\"" Sep 10 01:12:13.765685 systemd[1]: run-containerd-runc-k8s.io-da5ed06cd1c388f8b72b5717a18208f7efdb55f869b14f86503f29306ac8f09a-runc.DyfDl7.mount: Deactivated successfully. Sep 10 01:12:14.068752 systemd[1]: Started cri-containerd-da5ed06cd1c388f8b72b5717a18208f7efdb55f869b14f86503f29306ac8f09a.scope. Sep 10 01:12:14.124483 kernel: kauditd_printk_skb: 62 callbacks suppressed Sep 10 01:12:14.206756 kernel: audit: type=1400 audit(1757466734.110:1470): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.224865 kernel: audit: type=1400 audit(1757466734.110:1471): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.224928 kernel: audit: type=1400 audit(1757466734.110:1472): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.224956 kernel: audit: type=1400 audit(1757466734.110:1473): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.243484 kernel: audit: type=1400 audit(1757466734.110:1474): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.257730 kernel: audit: type=1400 audit(1757466734.110:1475): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.273531 kernel: audit: type=1400 audit(1757466734.110:1476): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.273591 kernel: audit: type=1400 audit(1757466734.110:1477): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.273634 kernel: audit: type=1400 audit(1757466734.110:1478): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.273666 kernel: audit: type=1400 audit(1757466734.110:1479): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.110000 audit: BPF prog-id=231 op=LOAD Sep 10 01:12:14.120000 audit[4945]: AVC avc: denied { bpf } for pid=4945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.120000 audit[4945]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3631 pid=4945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:14.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461356564303663643163333838663862373262353731376131383230 Sep 10 01:12:14.120000 audit[4945]: AVC avc: denied { perfmon } for pid=4945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.120000 audit[4945]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=3631 pid=4945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:14.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461356564303663643163333838663862373262353731376131383230 Sep 10 01:12:14.120000 audit[4945]: AVC avc: denied { bpf } for pid=4945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.120000 audit[4945]: AVC avc: denied { bpf } for pid=4945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.120000 audit[4945]: AVC avc: denied { bpf } for pid=4945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.120000 audit[4945]: AVC avc: denied { perfmon } for pid=4945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.120000 audit[4945]: AVC avc: denied { perfmon } for pid=4945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.120000 audit[4945]: AVC avc: denied { perfmon } for pid=4945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.120000 audit[4945]: AVC avc: denied { perfmon } for pid=4945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.120000 audit[4945]: AVC avc: denied { perfmon } for pid=4945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.120000 audit[4945]: AVC avc: denied { bpf } for pid=4945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.120000 audit[4945]: AVC avc: denied { bpf } for pid=4945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.120000 audit: BPF prog-id=232 op=LOAD Sep 10 01:12:14.120000 audit[4945]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c00029e1f0 items=0 ppid=3631 pid=4945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:14.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461356564303663643163333838663862373262353731376131383230 Sep 10 01:12:14.123000 audit[4945]: AVC avc: denied { bpf } for pid=4945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.123000 audit[4945]: AVC avc: denied { bpf } for pid=4945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.123000 audit[4945]: AVC avc: denied { perfmon } for pid=4945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.123000 audit[4945]: AVC avc: denied { perfmon } for pid=4945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.123000 audit[4945]: AVC avc: denied { perfmon } for pid=4945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.123000 audit[4945]: AVC avc: denied { perfmon } for pid=4945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.123000 audit[4945]: AVC avc: denied { perfmon } for pid=4945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.123000 audit[4945]: AVC avc: denied { bpf } for pid=4945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.123000 audit[4945]: AVC avc: denied { bpf } for pid=4945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.123000 audit: BPF prog-id=233 op=LOAD Sep 10 01:12:14.123000 audit[4945]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c00029e238 items=0 ppid=3631 pid=4945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:14.123000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461356564303663643163333838663862373262353731376131383230 Sep 10 01:12:14.123000 audit: BPF prog-id=233 op=UNLOAD Sep 10 01:12:14.123000 audit: BPF prog-id=232 op=UNLOAD Sep 10 01:12:14.123000 audit[4945]: AVC avc: denied { bpf } for pid=4945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.123000 audit[4945]: AVC avc: denied { bpf } for pid=4945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.123000 audit[4945]: AVC avc: denied { bpf } for pid=4945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.123000 audit[4945]: AVC avc: denied { perfmon } for pid=4945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.123000 audit[4945]: AVC avc: denied { perfmon } for pid=4945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.123000 audit[4945]: AVC avc: denied { perfmon } for pid=4945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.123000 audit[4945]: AVC avc: denied { perfmon } for pid=4945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.123000 audit[4945]: AVC avc: denied { perfmon } for pid=4945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.123000 audit[4945]: AVC avc: denied { bpf } for pid=4945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.123000 audit[4945]: AVC avc: denied { bpf } for pid=4945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:12:14.123000 audit: BPF prog-id=234 op=LOAD Sep 10 01:12:14.123000 audit[4945]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c00029e648 items=0 ppid=3631 pid=4945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:14.123000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461356564303663643163333838663862373262353731376131383230 Sep 10 01:12:14.464556 env[1267]: time="2025-09-10T01:12:14.221410613Z" level=info msg="StartContainer for \"da5ed06cd1c388f8b72b5717a18208f7efdb55f869b14f86503f29306ac8f09a\" returns successfully" Sep 10 01:12:22.455893 env[1267]: time="2025-09-10T01:12:22.435010605Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:22.455893 env[1267]: time="2025-09-10T01:12:22.465532392Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:df191a54fb79de3c693f8b1b864a1bd3bd14f63b3fff9d5fa4869c471ce3cd37,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:22.455893 env[1267]: time="2025-09-10T01:12:22.478065850Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:22.455893 env[1267]: time="2025-09-10T01:12:22.484020988Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:27c4187717f08f0a5727019d8beb7597665eb47e69eaa1d7d091a7e28913e577,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:22.455893 env[1267]: time="2025-09-10T01:12:22.484207656Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\" returns image reference \"sha256:df191a54fb79de3c693f8b1b864a1bd3bd14f63b3fff9d5fa4869c471ce3cd37\"" Sep 10 01:12:23.587723 env[1267]: 2025-09-10 01:12:13.900 [WARNING][4933] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0", GenerateName:"calico-apiserver-64564cc5c9-", Namespace:"calico-apiserver", SelfLink:"", UID:"373a83e4-9cfa-498c-a1d2-cf000ad59143", ResourceVersion:"1066", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64564cc5c9", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81", Pod:"calico-apiserver-64564cc5c9-z6hvk", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali53dd666f0e1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:12:23.587723 env[1267]: 2025-09-10 01:12:14.085 [INFO][4933] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Sep 10 01:12:23.587723 env[1267]: 2025-09-10 01:12:14.085 [INFO][4933] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" iface="eth0" netns="" Sep 10 01:12:23.587723 env[1267]: 2025-09-10 01:12:14.106 [INFO][4933] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Sep 10 01:12:23.587723 env[1267]: 2025-09-10 01:12:14.106 [INFO][4933] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Sep 10 01:12:23.587723 env[1267]: 2025-09-10 01:12:17.580 [INFO][4965] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" HandleID="k8s-pod-network.1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Workload="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" Sep 10 01:12:23.587723 env[1267]: 2025-09-10 01:12:17.672 [INFO][4965] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:12:23.587723 env[1267]: 2025-09-10 01:12:17.676 [INFO][4965] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:12:23.587723 env[1267]: 2025-09-10 01:12:18.943 [WARNING][4965] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" HandleID="k8s-pod-network.1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Workload="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" Sep 10 01:12:23.587723 env[1267]: 2025-09-10 01:12:19.103 [INFO][4965] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" HandleID="k8s-pod-network.1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Workload="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" Sep 10 01:12:23.587723 env[1267]: 2025-09-10 01:12:23.387 [INFO][4965] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:12:23.587723 env[1267]: 2025-09-10 01:12:23.559 [INFO][4933] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662" Sep 10 01:12:23.587723 env[1267]: time="2025-09-10T01:12:23.587111121Z" level=info msg="TearDown network for sandbox \"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\" successfully" Sep 10 01:12:23.784955 env[1267]: time="2025-09-10T01:12:23.608947460Z" level=info msg="RemovePodSandbox \"1f0e011f5b24e3731890e36cefeefc6068de78af69d9a401d02933582a5d7662\" returns successfully" Sep 10 01:12:27.148921 env[1267]: time="2025-09-10T01:12:27.148748427Z" level=info msg="StopPodSandbox for \"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\"" Sep 10 01:12:27.869778 env[1267]: time="2025-09-10T01:12:27.869649666Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\"" Sep 10 01:12:30.785526 env[1267]: time="2025-09-10T01:12:30.778107974Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:30.785526 env[1267]: time="2025-09-10T01:12:30.796753502Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b8f31c4fdaed3fa08af64de3d37d65a4c2ea0d9f6f522cb60d2e0cb424f8dd8a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:30.785526 env[1267]: time="2025-09-10T01:12:30.804521040Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:30.785526 env[1267]: time="2025-09-10T01:12:30.812890404Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:731ab232ca708102ab332340b1274d5cd656aa896ecc5368ee95850b811df86f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 10 01:12:30.785526 env[1267]: time="2025-09-10T01:12:30.813358523Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\" returns image reference \"sha256:b8f31c4fdaed3fa08af64de3d37d65a4c2ea0d9f6f522cb60d2e0cb424f8dd8a\"" Sep 10 01:12:32.429720 env[1267]: time="2025-09-10T01:12:32.342505666Z" level=error msg="ExecSync for \"d33397f53ea424cac6098c9e3d1f857cdb8f55da3d920bd5fd7e60c7a3a6ce91\" failed" error="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" Sep 10 01:12:35.443727 env[1267]: 2025-09-10 01:12:32.106 [WARNING][5028] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0", GenerateName:"calico-apiserver-65f67d55cc-", Namespace:"calico-apiserver", SelfLink:"", UID:"a8ed0f6a-7272-404d-b5b2-53b42e84380c", ResourceVersion:"1055", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"65f67d55cc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018", Pod:"calico-apiserver-65f67d55cc-tx6qp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif7c63bbb2bf", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:12:35.443727 env[1267]: 2025-09-10 01:12:32.782 [INFO][5028] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Sep 10 01:12:35.443727 env[1267]: 2025-09-10 01:12:32.795 [INFO][5028] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" iface="eth0" netns="" Sep 10 01:12:35.443727 env[1267]: 2025-09-10 01:12:32.801 [INFO][5028] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Sep 10 01:12:35.443727 env[1267]: 2025-09-10 01:12:32.808 [INFO][5028] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Sep 10 01:12:35.443727 env[1267]: 2025-09-10 01:12:35.086 [INFO][5053] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" HandleID="k8s-pod-network.95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Workload="localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0" Sep 10 01:12:35.443727 env[1267]: 2025-09-10 01:12:35.155 [INFO][5053] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:12:35.443727 env[1267]: 2025-09-10 01:12:35.176 [INFO][5053] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:12:35.443727 env[1267]: 2025-09-10 01:12:35.278 [WARNING][5053] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" HandleID="k8s-pod-network.95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Workload="localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0" Sep 10 01:12:35.443727 env[1267]: 2025-09-10 01:12:35.278 [INFO][5053] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" HandleID="k8s-pod-network.95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Workload="localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0" Sep 10 01:12:35.443727 env[1267]: 2025-09-10 01:12:35.282 [INFO][5053] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:12:35.443727 env[1267]: 2025-09-10 01:12:35.389 [INFO][5028] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Sep 10 01:12:35.443727 env[1267]: time="2025-09-10T01:12:35.437961147Z" level=info msg="TearDown network for sandbox \"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\" successfully" Sep 10 01:12:35.443727 env[1267]: time="2025-09-10T01:12:35.437992859Z" level=info msg="StopPodSandbox for \"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\" returns successfully" Sep 10 01:12:36.613722 systemd[1]: Started sshd@7-139.178.70.105:22-147.75.109.163:53138.service. Sep 10 01:12:36.938545 kernel: kauditd_printk_skb: 47 callbacks suppressed Sep 10 01:12:36.949191 kernel: audit: type=1130 audit(1757466756.628:1488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.105:22-147.75.109.163:53138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:12:36.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.105:22-147.75.109.163:53138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:12:37.309399 sshd[5060]: Accepted publickey for core from 147.75.109.163 port 53138 ssh2: RSA SHA256:0IUR5emySKOryc09IkQfiEMy48OZjcmwN/1tG3dFsA8 Sep 10 01:12:37.364428 kernel: audit: type=1101 audit(1757466757.307:1489): pid=5060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:12:37.366637 kernel: audit: type=1103 audit(1757466757.316:1490): pid=5060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:12:37.368176 kernel: audit: type=1006 audit(1757466757.316:1491): pid=5060 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Sep 10 01:12:37.371111 kernel: audit: type=1300 audit(1757466757.316:1491): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda149c7d0 a2=3 a3=0 items=0 ppid=1 pid=5060 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:37.373451 kernel: audit: type=1327 audit(1757466757.316:1491): proctitle=737368643A20636F7265205B707269765D Sep 10 01:12:37.307000 audit[5060]: USER_ACCT pid=5060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:12:37.316000 audit[5060]: CRED_ACQ pid=5060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:12:37.316000 audit[5060]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda149c7d0 a2=3 a3=0 items=0 ppid=1 pid=5060 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:12:37.316000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 01:12:37.321949 sshd[5060]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 01:12:37.467536 systemd-logind[1239]: New session 10 of user core. Sep 10 01:12:37.474374 systemd[1]: Started session-10.scope. Sep 10 01:12:37.501181 kernel: audit: type=1105 audit(1757466757.482:1492): pid=5060 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:12:37.501249 kernel: audit: type=1103 audit(1757466757.487:1493): pid=5065 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:12:37.482000 audit[5060]: USER_START pid=5060 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:12:37.487000 audit[5065]: CRED_ACQ pid=5065 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:12:39.748651 env[1267]: time="2025-09-10T01:12:39.748612069Z" level=info msg="RemovePodSandbox for \"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\"" Sep 10 01:12:39.748651 env[1267]: time="2025-09-10T01:12:39.748638100Z" level=info msg="Forcibly stopping sandbox \"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\"" Sep 10 01:12:40.074607 kubelet[2111]: E0910 01:12:39.633360 2111 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" containerID="d33397f53ea424cac6098c9e3d1f857cdb8f55da3d920bd5fd7e60c7a3a6ce91" cmd=["/health","-live"] Sep 10 01:12:42.405676 env[1267]: 2025-09-10 01:12:41.281 [WARNING][5098] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0", GenerateName:"calico-apiserver-65f67d55cc-", Namespace:"calico-apiserver", SelfLink:"", UID:"a8ed0f6a-7272-404d-b5b2-53b42e84380c", ResourceVersion:"1055", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"65f67d55cc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"53bb7564059114c31a6401b9791a90bd86888d1ee4d6d2d7b1191ef4d3e95018", Pod:"calico-apiserver-65f67d55cc-tx6qp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif7c63bbb2bf", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:12:42.405676 env[1267]: 2025-09-10 01:12:41.327 [INFO][5098] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Sep 10 01:12:42.405676 env[1267]: 2025-09-10 01:12:41.333 [INFO][5098] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" iface="eth0" netns="" Sep 10 01:12:42.405676 env[1267]: 2025-09-10 01:12:41.336 [INFO][5098] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Sep 10 01:12:42.405676 env[1267]: 2025-09-10 01:12:41.336 [INFO][5098] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Sep 10 01:12:42.405676 env[1267]: 2025-09-10 01:12:42.184 [INFO][5112] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" HandleID="k8s-pod-network.95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Workload="localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0" Sep 10 01:12:42.405676 env[1267]: 2025-09-10 01:12:42.197 [INFO][5112] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:12:42.405676 env[1267]: 2025-09-10 01:12:42.199 [INFO][5112] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:12:42.405676 env[1267]: 2025-09-10 01:12:42.313 [WARNING][5112] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" HandleID="k8s-pod-network.95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Workload="localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0" Sep 10 01:12:42.405676 env[1267]: 2025-09-10 01:12:42.315 [INFO][5112] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" HandleID="k8s-pod-network.95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Workload="localhost-k8s-calico--apiserver--65f67d55cc--tx6qp-eth0" Sep 10 01:12:42.405676 env[1267]: 2025-09-10 01:12:42.316 [INFO][5112] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:12:42.405676 env[1267]: 2025-09-10 01:12:42.355 [INFO][5098] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0" Sep 10 01:12:42.405676 env[1267]: time="2025-09-10T01:12:42.390137054Z" level=info msg="TearDown network for sandbox \"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\" successfully" Sep 10 01:12:42.572425 env[1267]: time="2025-09-10T01:12:42.422220019Z" level=info msg="RemovePodSandbox \"95e746f00169c51af2d6f263a7e82545015a83cce7c8e6083bd972f1c87656d0\" returns successfully" Sep 10 01:13:00.047000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:13:00.534603 kernel: audit: type=1400 audit(1757466780.047:1494): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:13:00.599978 kernel: audit: type=1300 audit(1757466780.047:1494): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0032ae810 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:13:00.600058 kernel: audit: type=1327 audit(1757466780.047:1494): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:13:00.604076 kernel: audit: type=1400 audit(1757466780.051:1495): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:13:00.623790 kernel: audit: type=1300 audit(1757466780.051:1495): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c003234480 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:13:00.623896 kernel: audit: type=1327 audit(1757466780.051:1495): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:13:00.047000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0032ae810 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:13:00.047000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:13:00.051000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:13:00.051000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c003234480 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:13:00.051000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:13:00.804000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:13:00.804000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c006530a50 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:13:00.813988 kernel: audit: type=1400 audit(1757466780.804:1496): avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:13:00.814050 kernel: audit: type=1300 audit(1757466780.804:1496): arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c006530a50 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:13:00.815204 kernel: audit: type=1327 audit(1757466780.804:1496): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:13:00.804000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:13:00.818359 kernel: audit: type=1400 audit(1757466780.808:1497): avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6736 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:13:00.808000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6736 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:13:00.808000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=85 a1=c006e7a210 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:13:00.808000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:13:00.821000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:13:00.821000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c00ccf43e0 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:13:00.821000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:13:00.873000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:13:00.873000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c006e7a2d0 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:13:00.873000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:13:00.876000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6730 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:13:00.876000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c006e7a450 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:13:00.876000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:13:00.891000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:13:00.891000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=82 a1=c00ccf4940 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:13:00.891000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:13:00.980000 audit[4711]: AVC avc: denied { watch } for pid=4711 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_11_33.3120734617/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c562 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c339,c562 tclass=file permissive=0 Sep 10 01:13:00.980000 audit[4711]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0023bd760 a2=fc6 a3=0 items=0 ppid=3827 pid=4711 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c562 key=(null) Sep 10 01:13:00.980000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 01:13:01.940000 audit[4791]: AVC avc: denied { watch } for pid=4791 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_11_33.1359678746/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c725 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c604,c725 tclass=file permissive=0 Sep 10 01:13:01.940000 audit[4791]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0028e9520 a2=fc6 a3=0 items=0 ppid=4014 pid=4791 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c725 key=(null) Sep 10 01:13:01.940000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 01:13:03.971412 kubelet[2111]: E0910 01:12:39.682826 2111 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="28.543s" Sep 10 01:13:06.814360 kubelet[2111]: E0910 01:13:06.799251 2111 controller.go:195] "Failed to update lease" err="Put \"https://139.178.70.105:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": context deadline exceeded" Sep 10 01:13:06.928721 kubelet[2111]: E0910 01:13:06.875573 2111 kubelet.go:2460] "Skipping pod synchronization" err="container runtime is down" Sep 10 01:13:06.970939 env[1267]: time="2025-09-10T01:13:06.970643825Z" level=info msg="CreateContainer within sandbox \"36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 10 01:13:06.979049 env[1267]: time="2025-09-10T01:13:06.971102853Z" level=info msg="StopPodSandbox for \"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\"" Sep 10 01:13:07.142171 env[1267]: time="2025-09-10T01:13:07.142098752Z" level=info msg="CreateContainer within sandbox \"36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c\"" Sep 10 01:13:07.865000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:13:08.083469 kernel: kauditd_printk_skb: 20 callbacks suppressed Sep 10 01:13:08.114242 kernel: audit: type=1400 audit(1757466787.865:1504): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:13:08.119839 kernel: audit: type=1300 audit(1757466787.865:1504): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0021475a0 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:13:08.122388 kernel: audit: type=1327 audit(1757466787.865:1504): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:13:08.122418 kernel: audit: type=1400 audit(1757466787.874:1505): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:13:08.122435 kernel: audit: type=1300 audit(1757466787.874:1505): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002147620 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:13:08.122451 kernel: audit: type=1327 audit(1757466787.874:1505): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:13:08.127169 kernel: audit: type=1400 audit(1757466787.874:1506): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:13:08.128374 kernel: audit: type=1300 audit(1757466787.874:1506): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c003234e40 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:13:08.128398 kernel: audit: type=1327 audit(1757466787.874:1506): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:13:08.128417 kernel: audit: type=1400 audit(1757466787.904:1507): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:13:07.865000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0021475a0 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:13:07.865000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:13:07.874000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:13:07.874000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002147620 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:13:07.874000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:13:07.874000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:13:07.874000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c003234e40 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:13:07.874000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:13:07.904000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:13:07.904000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002147ae0 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:13:07.904000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:13:12.163902 env[1267]: time="2025-09-10T01:13:12.148358141Z" level=error msg="ExecSync for \"d33397f53ea424cac6098c9e3d1f857cdb8f55da3d920bd5fd7e60c7a3a6ce91\" failed" error="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" Sep 10 01:13:14.452090 env[1267]: 2025-09-10 01:13:13.375 [WARNING][5170] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"5fd61191-5eac-4e78-9235-5003726f6150", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4", Pod:"coredns-674b8bbfcf-xz6mb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali36dac578137", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:13:14.452090 env[1267]: 2025-09-10 01:13:13.423 [INFO][5170] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Sep 10 01:13:14.452090 env[1267]: 2025-09-10 01:13:13.425 [INFO][5170] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" iface="eth0" netns="" Sep 10 01:13:14.452090 env[1267]: 2025-09-10 01:13:13.426 [INFO][5170] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Sep 10 01:13:14.452090 env[1267]: 2025-09-10 01:13:13.426 [INFO][5170] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Sep 10 01:13:14.452090 env[1267]: 2025-09-10 01:13:14.209 [INFO][5198] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" HandleID="k8s-pod-network.b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Workload="localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0" Sep 10 01:13:14.452090 env[1267]: 2025-09-10 01:13:14.239 [INFO][5198] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:13:14.452090 env[1267]: 2025-09-10 01:13:14.241 [INFO][5198] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:13:14.452090 env[1267]: 2025-09-10 01:13:14.394 [WARNING][5198] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" HandleID="k8s-pod-network.b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Workload="localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0" Sep 10 01:13:14.452090 env[1267]: 2025-09-10 01:13:14.395 [INFO][5198] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" HandleID="k8s-pod-network.b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Workload="localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0" Sep 10 01:13:14.452090 env[1267]: 2025-09-10 01:13:14.404 [INFO][5198] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:13:14.452090 env[1267]: 2025-09-10 01:13:14.425 [INFO][5170] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Sep 10 01:13:14.452090 env[1267]: time="2025-09-10T01:13:14.449561667Z" level=info msg="TearDown network for sandbox \"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\" successfully" Sep 10 01:13:14.452090 env[1267]: time="2025-09-10T01:13:14.449593318Z" level=info msg="StopPodSandbox for \"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\" returns successfully" Sep 10 01:13:28.477106 kubelet[2111]: E0910 01:13:25.433651 2111 controller.go:195] "Failed to update lease" err="Put \"https://139.178.70.105:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Sep 10 01:13:30.376586 kubelet[2111]: E0910 01:13:29.889797 2111 kubelet_node_status.go:548] "Error updating node status, will retry" err="failed to patch status \"{\\\"status\\\":{\\\"$setElementOrder/conditions\\\":[{\\\"type\\\":\\\"NetworkUnavailable\\\"},{\\\"type\\\":\\\"MemoryPressure\\\"},{\\\"type\\\":\\\"DiskPressure\\\"},{\\\"type\\\":\\\"PIDPressure\\\"},{\\\"type\\\":\\\"Ready\\\"}],\\\"conditions\\\":[{\\\"lastHeartbeatTime\\\":\\\"2025-09-10T01:12:14Z\\\",\\\"type\\\":\\\"MemoryPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2025-09-10T01:12:14Z\\\",\\\"type\\\":\\\"DiskPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2025-09-10T01:12:14Z\\\",\\\"type\\\":\\\"PIDPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2025-09-10T01:12:26Z\\\",\\\"type\\\":\\\"Ready\\\"}],\\\"images\\\":[{\\\"names\\\":[\\\"ghcr.io/flatcar/calico/node@sha256:bcb8146fcaeced1e1c88fad3eaa697f1680746bd23c3e7e8d4535bc484c6f2a1\\\",\\\"ghcr.io/flatcar/calico/node:v3.30.3\\\"],\\\"sizeBytes\\\":157078201},{\\\"names\\\":[\\\"ghcr.io/flatcar/calico/cni@sha256:73d1e391050490d54e5bee8ff2b1a50a8be1746c98dc530361b00e8c0ab63f87\\\",\\\"ghcr.io/flatcar/calico/cni:v3.30.3\\\"],\\\"sizeBytes\\\":71933316},{\\\"names\\\":[\\\"ghcr.io/flatcar/calico/goldmane@sha256:46297703ab3739331a00a58f0d6a5498c8d3b6523ad947eed68592ee0f3e79f0\\\",\\\"ghcr.io/flatcar/calico/goldmane:v3.30.3\\\"],\\\"sizeBytes\\\":66357372},{\\\"names\\\":[\\\"registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121\\\",\\\"registry.k8s.io/etcd:3.5.21-0\\\"],\\\"sizeBytes\\\":58938593},{\\\"names\\\":[\\\"ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b\\\",\\\"ghcr.io/flatcar/calico/apiserver:v3.30.3\\\"],\\\"sizeBytes\\\":48826583},{\\\"names\\\":[\\\"ghcr.io/flatcar/calico/typha@sha256:f4a3d61ffda9c98a53adeb412c5af404ca3727a3cc2d0b4ef28d197bdd47ecaa\\\",\\\"ghcr.io/flatcar/calico/typha:v3.30.3\\\"],\\\"sizeBytes\\\":35237243},{\\\"names\\\":[\\\"ghcr.io/flatcar/calico/whisker-backend@sha256:29becebc47401da9997a2a30f4c25c511a5f379d17275680b048224829af71a5\\\",\\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\\\"],\\\"sizeBytes\\\":33085375},{\\\"names\\\":[\\\"registry.k8s.io/kube-proxy@sha256:bb04e9247da3aaeb96406b4d530a79fc865695b6807353dd1a28871df0d7f837\\\",\\\"registry.k8s.io/kube-proxy:v1.33.4\\\"],\\\"sizeBytes\\\":31898645},{\\\"names\\\":[\\\"registry.k8s.io/kube-apiserver@sha256:0d441d0d347145b3f02f20cb313239cdae86067643d7f70803fab8bac2d28876\\\",\\\"registry.k8s.io/kube-apiserver:v1.33.4\\\"],\\\"sizeBytes\\\":30075464},{\\\"names\\\":[\\\"registry.k8s.io/kube-controller-manager@sha256:bd22c2af2f30a8f818568b4d5fe131098fdd38267e9e07872cfc33e8f5876bc3\\\",\\\"registry.k8s.io/kube-controller-manager:v1.33.4\\\"],\\\"sizeBytes\\\":27646961},{\\\"names\\\":[\\\"quay.io/tigera/operator@sha256:00a7a9b62f9b9a4e0856128b078539783b8352b07f707bff595cb604cc580f6e\\\",\\\"quay.io/tigera/operator:v1.38.6\\\"],\\\"sizeBytes\\\":25058604},{\\\"names\\\":[\\\"registry.k8s.io/kube-scheduler@sha256:71533e5a960e2955a54164905e92dac516ec874a23e0bf31304db82650101a4a\\\",\\\"registry.k8s.io/kube-scheduler:v1.33.4\\\"],\\\"sizeBytes\\\":21782824},{\\\"names\\\":[\\\"registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97\\\",\\\"registry.k8s.io/coredns/coredns:v1.12.0\\\"],\\\"sizeBytes\\\":20939036},{\\\"names\\\":[\\\"ghcr.io/flatcar/calico/csi@sha256:f22c88018d8b58c4ef0052f594b216a13bd6852166ac131a538c5ab2fba23bb2\\\",\\\"ghcr.io/flatcar/calico/csi:v3.30.3\\\"],\\\"sizeBytes\\\":10253230},{\\\"names\\\":[\\\"ghcr.io/flatcar/calico/whisker@sha256:e7113761fc7633d515882f0d48b5c8d0b8e62f3f9d34823f2ee194bb16d2ec44\\\",\\\"ghcr.io/flatcar/calico/whisker:v3.30.3\\\"],\\\"sizeBytes\\\":6153986},{\\\"names\\\":[\\\"ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:81bdfcd9dbd36624dc35354e8c181c75631ba40e6c7df5820f5f56cea36f0ef9\\\",\\\"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\\\"],\\\"sizeBytes\\\":5939323},{\\\"names\\\":[\\\"registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a\\\",\\\"registry.k8s.io/pause:3.10\\\"],\\\"sizeBytes\\\":320368},{\\\"names\\\":[\\\"registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db\\\",\\\"registry.k8s.io/pause:3.6\\\"],\\\"sizeBytes\\\":301773}]}}\" for node \"localhost\": Patch \"https://139.178.70.105:6443/api/v1/nodes/localhost/status?timeout=10s\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)" Sep 10 01:13:31.480794 env[1267]: time="2025-09-10T01:13:31.480490189Z" level=info msg="RemovePodSandbox for \"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\"" Sep 10 01:13:31.480794 env[1267]: time="2025-09-10T01:13:31.480514975Z" level=info msg="Forcibly stopping sandbox \"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\"" Sep 10 01:13:31.611786 kubelet[2111]: E0910 01:13:31.606181 2111 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" containerID="d33397f53ea424cac6098c9e3d1f857cdb8f55da3d920bd5fd7e60c7a3a6ce91" cmd=["/health","-ready"] Sep 10 01:13:31.927957 env[1267]: time="2025-09-10T01:13:31.927832476Z" level=info msg="StartContainer for \"13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c\"" Sep 10 01:13:32.063165 systemd[1]: Started cri-containerd-13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c.scope. Sep 10 01:13:32.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.149530 kernel: kauditd_printk_skb: 2 callbacks suppressed Sep 10 01:13:32.160696 kernel: audit: type=1400 audit(1757466812.118:1508): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.162302 kernel: audit: type=1400 audit(1757466812.118:1509): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.162360 kernel: audit: type=1400 audit(1757466812.118:1510): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.162381 kernel: audit: type=1400 audit(1757466812.118:1511): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.162399 kernel: audit: type=1400 audit(1757466812.118:1512): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.162423 kernel: audit: type=1400 audit(1757466812.118:1513): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.162443 kernel: audit: type=1400 audit(1757466812.118:1514): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.162458 kernel: audit: type=1400 audit(1757466812.118:1515): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.162475 kernel: audit: type=1400 audit(1757466812.118:1516): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.162505 kernel: audit: type=1400 audit(1757466812.119:1517): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.119000 audit: BPF prog-id=235 op=LOAD Sep 10 01:13:32.119000 audit[5258]: AVC avc: denied { bpf } for pid=5258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.119000 audit[5258]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4516 pid=5258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:13:32.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133663834666337373730313336316165653630396135623531613439 Sep 10 01:13:32.119000 audit[5258]: AVC avc: denied { perfmon } for pid=5258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.119000 audit[5258]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4516 pid=5258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:13:32.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133663834666337373730313336316165653630396135623531613439 Sep 10 01:13:32.119000 audit[5258]: AVC avc: denied { bpf } for pid=5258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.119000 audit[5258]: AVC avc: denied { bpf } for pid=5258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.119000 audit[5258]: AVC avc: denied { bpf } for pid=5258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.119000 audit[5258]: AVC avc: denied { perfmon } for pid=5258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.119000 audit[5258]: AVC avc: denied { perfmon } for pid=5258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.119000 audit[5258]: AVC avc: denied { perfmon } for pid=5258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.119000 audit[5258]: AVC avc: denied { perfmon } for pid=5258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.119000 audit[5258]: AVC avc: denied { perfmon } for pid=5258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.119000 audit[5258]: AVC avc: denied { bpf } for pid=5258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.119000 audit[5258]: AVC avc: denied { bpf } for pid=5258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.119000 audit: BPF prog-id=236 op=LOAD Sep 10 01:13:32.119000 audit[5258]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000390900 items=0 ppid=4516 pid=5258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:13:32.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133663834666337373730313336316165653630396135623531613439 Sep 10 01:13:32.127000 audit[5258]: AVC avc: denied { bpf } for pid=5258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.127000 audit[5258]: AVC avc: denied { bpf } for pid=5258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.127000 audit[5258]: AVC avc: denied { perfmon } for pid=5258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.127000 audit[5258]: AVC avc: denied { perfmon } for pid=5258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.127000 audit[5258]: AVC avc: denied { perfmon } for pid=5258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.127000 audit[5258]: AVC avc: denied { perfmon } for pid=5258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.127000 audit[5258]: AVC avc: denied { perfmon } for pid=5258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.127000 audit[5258]: AVC avc: denied { bpf } for pid=5258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.127000 audit[5258]: AVC avc: denied { bpf } for pid=5258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.127000 audit: BPF prog-id=237 op=LOAD Sep 10 01:13:32.127000 audit[5258]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000390948 items=0 ppid=4516 pid=5258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:13:32.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133663834666337373730313336316165653630396135623531613439 Sep 10 01:13:32.134000 audit: BPF prog-id=237 op=UNLOAD Sep 10 01:13:32.134000 audit: BPF prog-id=236 op=UNLOAD Sep 10 01:13:32.134000 audit[5258]: AVC avc: denied { bpf } for pid=5258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.134000 audit[5258]: AVC avc: denied { bpf } for pid=5258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.134000 audit[5258]: AVC avc: denied { bpf } for pid=5258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.134000 audit[5258]: AVC avc: denied { perfmon } for pid=5258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.134000 audit[5258]: AVC avc: denied { perfmon } for pid=5258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.134000 audit[5258]: AVC avc: denied { perfmon } for pid=5258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.134000 audit[5258]: AVC avc: denied { perfmon } for pid=5258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.134000 audit[5258]: AVC avc: denied { perfmon } for pid=5258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.134000 audit[5258]: AVC avc: denied { bpf } for pid=5258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.134000 audit[5258]: AVC avc: denied { bpf } for pid=5258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:13:32.134000 audit: BPF prog-id=238 op=LOAD Sep 10 01:13:32.134000 audit[5258]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000390d58 items=0 ppid=4516 pid=5258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:13:32.134000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133663834666337373730313336316165653630396135623531613439 Sep 10 01:13:32.231323 env[1267]: time="2025-09-10T01:13:32.231282666Z" level=info msg="StartContainer for \"13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c\" returns successfully" Sep 10 01:13:42.082943 env[1267]: time="2025-09-10T01:13:42.071840455Z" level=error msg="ExecSync for \"1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50\" failed" error="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 10s exceeded: context deadline exceeded" Sep 10 01:13:44.026570 env[1267]: 2025-09-10 01:13:38.666 [WARNING][5243] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"5fd61191-5eac-4e78-9235-5003726f6150", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4", Pod:"coredns-674b8bbfcf-xz6mb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali36dac578137", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:13:44.026570 env[1267]: 2025-09-10 01:13:38.909 [INFO][5243] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Sep 10 01:13:44.026570 env[1267]: 2025-09-10 01:13:38.910 [INFO][5243] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" iface="eth0" netns="" Sep 10 01:13:44.026570 env[1267]: 2025-09-10 01:13:38.915 [INFO][5243] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Sep 10 01:13:44.026570 env[1267]: 2025-09-10 01:13:38.915 [INFO][5243] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Sep 10 01:13:44.026570 env[1267]: 2025-09-10 01:13:43.472 [INFO][5310] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" HandleID="k8s-pod-network.b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Workload="localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0" Sep 10 01:13:44.026570 env[1267]: 2025-09-10 01:13:43.492 [INFO][5310] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:13:44.026570 env[1267]: 2025-09-10 01:13:43.500 [INFO][5310] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:13:44.026570 env[1267]: 2025-09-10 01:13:43.860 [WARNING][5310] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" HandleID="k8s-pod-network.b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Workload="localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0" Sep 10 01:13:44.026570 env[1267]: 2025-09-10 01:13:43.884 [INFO][5310] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" HandleID="k8s-pod-network.b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Workload="localhost-k8s-coredns--674b8bbfcf--xz6mb-eth0" Sep 10 01:13:44.026570 env[1267]: 2025-09-10 01:13:43.890 [INFO][5310] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:13:44.026570 env[1267]: 2025-09-10 01:13:43.964 [INFO][5243] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e" Sep 10 01:13:44.026570 env[1267]: time="2025-09-10T01:13:44.025803281Z" level=info msg="TearDown network for sandbox \"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\" successfully" Sep 10 01:13:44.448904 env[1267]: time="2025-09-10T01:13:44.075466303Z" level=info msg="RemovePodSandbox \"b461c7f0bb4f528c1be7c7fb5a3829371151be672cfbf132d97bab520d8c948e\" returns successfully" Sep 10 01:13:46.034703 systemd[1]: cri-containerd-13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c.scope: Deactivated successfully. Sep 10 01:13:46.116262 kernel: kauditd_printk_skb: 47 callbacks suppressed Sep 10 01:13:46.120601 kernel: audit: type=1334 audit(1757466826.039:1526): prog-id=235 op=UNLOAD Sep 10 01:13:46.124210 kernel: audit: type=1334 audit(1757466826.042:1527): prog-id=238 op=UNLOAD Sep 10 01:13:46.039000 audit: BPF prog-id=235 op=UNLOAD Sep 10 01:13:46.042000 audit: BPF prog-id=238 op=UNLOAD Sep 10 01:13:46.137079 env[1267]: time="2025-09-10T01:13:46.090690897Z" level=info msg="shim disconnected" id=13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c Sep 10 01:13:46.137079 env[1267]: time="2025-09-10T01:13:46.090725470Z" level=warning msg="cleaning up after shim disconnected" id=13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c namespace=k8s.io Sep 10 01:13:46.137079 env[1267]: time="2025-09-10T01:13:46.090735602Z" level=info msg="cleaning up dead shim" Sep 10 01:13:46.137079 env[1267]: time="2025-09-10T01:13:46.099649133Z" level=warning msg="cleanup warnings time=\"2025-09-10T01:13:46Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5334 runtime=io.containerd.runc.v2\n" Sep 10 01:13:46.103895 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c-rootfs.mount: Deactivated successfully. Sep 10 01:13:47.841392 sshd[5060]: pam_unix(sshd:session): session closed for user core Sep 10 01:13:48.287108 kernel: audit: type=1106 audit(1757466828.064:1528): pid=5060 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:13:48.303088 kernel: audit: type=1104 audit(1757466828.072:1529): pid=5060 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:13:48.309469 kernel: audit: type=1130 audit(1757466828.107:1530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.105:22-147.75.109.163:35658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:13:48.309511 kernel: audit: type=1131 audit(1757466828.107:1531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.105:22-147.75.109.163:53138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:13:48.064000 audit[5060]: USER_END pid=5060 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:13:48.072000 audit[5060]: CRED_DISP pid=5060 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:13:48.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.105:22-147.75.109.163:35658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:13:48.107000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.105:22-147.75.109.163:53138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:13:48.107262 systemd[1]: Started sshd@8-139.178.70.105:22-147.75.109.163:35658.service. Sep 10 01:13:48.107834 systemd[1]: sshd@7-139.178.70.105:22-147.75.109.163:53138.service: Deactivated successfully. Sep 10 01:13:48.117248 systemd[1]: session-10.scope: Deactivated successfully. Sep 10 01:13:48.117458 systemd[1]: session-10.scope: Consumed 20.080s CPU time. Sep 10 01:13:48.118148 systemd-logind[1239]: Session 10 logged out. Waiting for processes to exit. Sep 10 01:13:48.118877 systemd-logind[1239]: Removed session 10. Sep 10 01:13:48.679000 audit[5348]: USER_ACCT pid=5348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:13:48.683424 kernel: audit: type=1101 audit(1757466828.679:1532): pid=5348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:13:48.683464 sshd[5348]: Accepted publickey for core from 147.75.109.163 port 35658 ssh2: RSA SHA256:0IUR5emySKOryc09IkQfiEMy48OZjcmwN/1tG3dFsA8 Sep 10 01:13:48.692147 kernel: audit: type=1103 audit(1757466828.683:1533): pid=5348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:13:48.692177 kernel: audit: type=1006 audit(1757466828.683:1534): pid=5348 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Sep 10 01:13:48.692194 kernel: audit: type=1300 audit(1757466828.683:1534): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef4cc9e80 a2=3 a3=0 items=0 ppid=1 pid=5348 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:13:48.683000 audit[5348]: CRED_ACQ pid=5348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:13:48.683000 audit[5348]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef4cc9e80 a2=3 a3=0 items=0 ppid=1 pid=5348 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:13:48.683000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 01:13:48.695865 sshd[5348]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 01:13:48.820194 systemd-logind[1239]: New session 11 of user core. Sep 10 01:13:48.829000 audit[5348]: USER_START pid=5348 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:13:48.831000 audit[5351]: CRED_ACQ pid=5351 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:13:48.820911 systemd[1]: Started session-11.scope. Sep 10 01:13:54.330531 kubelet[2111]: W0910 01:13:53.526854 2111 watcher.go:93] Error while processing event ("/sys/fs/cgroup/kubepods.slice/kubepods-besteffort.slice/kubepods-besteffort-pod373a83e4_9cfa_498c_a1d2_cf000ad59143.slice/cri-containerd-13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c.scope": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/kubepods.slice/kubepods-besteffort.slice/kubepods-besteffort-pod373a83e4_9cfa_498c_a1d2_cf000ad59143.slice/cri-containerd-13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c.scope: no such file or directory Sep 10 01:13:54.688920 env[1267]: time="2025-09-10T01:13:54.688878789Z" level=info msg="StopPodSandbox for \"56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4\"" Sep 10 01:13:57.498458 env[1267]: 2025-09-10 01:13:56.931 [WARNING][5381] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--588jm-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"433ded13-351c-45da-a35c-464e9f991379", ResourceVersion:"942", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a", Pod:"csi-node-driver-588jm", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calia7d0254bcac", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:13:57.498458 env[1267]: 2025-09-10 01:13:56.951 [INFO][5381] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" Sep 10 01:13:57.498458 env[1267]: 2025-09-10 01:13:56.952 [INFO][5381] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" iface="eth0" netns="" Sep 10 01:13:57.498458 env[1267]: 2025-09-10 01:13:56.953 [INFO][5381] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" Sep 10 01:13:57.498458 env[1267]: 2025-09-10 01:13:56.953 [INFO][5381] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" Sep 10 01:13:57.498458 env[1267]: 2025-09-10 01:13:57.329 [INFO][5410] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" HandleID="k8s-pod-network.56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" Workload="localhost-k8s-csi--node--driver--588jm-eth0" Sep 10 01:13:57.498458 env[1267]: 2025-09-10 01:13:57.342 [INFO][5410] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:13:57.498458 env[1267]: 2025-09-10 01:13:57.345 [INFO][5410] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:13:57.498458 env[1267]: 2025-09-10 01:13:57.412 [WARNING][5410] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" HandleID="k8s-pod-network.56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" Workload="localhost-k8s-csi--node--driver--588jm-eth0" Sep 10 01:13:57.498458 env[1267]: 2025-09-10 01:13:57.412 [INFO][5410] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" HandleID="k8s-pod-network.56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" Workload="localhost-k8s-csi--node--driver--588jm-eth0" Sep 10 01:13:57.498458 env[1267]: 2025-09-10 01:13:57.443 [INFO][5410] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:13:57.498458 env[1267]: 2025-09-10 01:13:57.467 [INFO][5381] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" Sep 10 01:13:57.498458 env[1267]: time="2025-09-10T01:13:57.490763516Z" level=info msg="TearDown network for sandbox \"56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4\" successfully" Sep 10 01:13:57.498458 env[1267]: time="2025-09-10T01:13:57.490791261Z" level=info msg="StopPodSandbox for \"56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4\" returns successfully" Sep 10 01:14:00.138843 kubelet[2111]: E0910 01:13:59.572778 2111 controller.go:195] "Failed to update lease" err="Put \"https://139.178.70.105:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Sep 10 01:14:00.449291 kernel: kauditd_printk_skb: 3 callbacks suppressed Sep 10 01:14:00.456503 kernel: audit: type=1400 audit(1757466840.167:1537): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:14:00.458168 kernel: audit: type=1300 audit(1757466840.167:1537): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e82540 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:14:00.458205 kernel: audit: type=1327 audit(1757466840.167:1537): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:14:00.458225 kernel: audit: type=1400 audit(1757466840.184:1538): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:14:00.458995 kernel: audit: type=1300 audit(1757466840.184:1538): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0009c0f80 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:14:00.459054 kernel: audit: type=1327 audit(1757466840.184:1538): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:14:00.167000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:14:00.167000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e82540 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:14:00.167000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:14:00.184000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:14:00.184000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0009c0f80 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:14:00.184000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:14:00.918000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:14:00.943275 kernel: audit: type=1400 audit(1757466840.918:1539): avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:14:00.943372 kernel: audit: type=1300 audit(1757466840.918:1539): arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c0065306f0 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:14:00.943399 kernel: audit: type=1327 audit(1757466840.918:1539): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:14:00.943419 kernel: audit: type=1400 audit(1757466840.925:1540): avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6736 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:14:00.918000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c0065306f0 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:14:00.918000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:14:00.925000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6736 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:14:00.925000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c007ee3ec0 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:14:00.925000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:14:00.966000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:14:00.966000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00880b400 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:14:00.966000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:14:00.999000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:14:00.999000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c0065318c0 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:14:00.999000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:14:01.010000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6730 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:14:01.010000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c006531980 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:14:01.010000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:14:01.043000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:14:01.043000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c00880b420 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:14:01.043000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:14:01.248000 audit[4711]: AVC avc: denied { watch } for pid=4711 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_11_33.3120734617/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c562 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c339,c562 tclass=file permissive=0 Sep 10 01:14:01.248000 audit[4711]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001780d60 a2=fc6 a3=0 items=0 ppid=3827 pid=4711 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c562 key=(null) Sep 10 01:14:01.248000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 01:14:01.972000 audit[4791]: AVC avc: denied { watch } for pid=4791 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_11_33.1359678746/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c725 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c604,c725 tclass=file permissive=0 Sep 10 01:14:01.972000 audit[4791]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0028e9760 a2=fc6 a3=0 items=0 ppid=4014 pid=4791 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c725 key=(null) Sep 10 01:14:01.972000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 01:14:08.116000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:14:08.220693 kernel: kauditd_printk_skb: 20 callbacks suppressed Sep 10 01:14:08.256722 kernel: audit: type=1400 audit(1757466848.116:1547): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:14:08.274926 kernel: audit: type=1300 audit(1757466848.116:1547): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c001f62680 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:14:08.274976 kernel: audit: type=1327 audit(1757466848.116:1547): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:14:08.275005 kernel: audit: type=1400 audit(1757466848.153:1548): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:14:08.278747 kernel: audit: type=1400 audit(1757466848.153:1549): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:14:08.278781 kernel: audit: type=1300 audit(1757466848.153:1548): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0000da4c0 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:14:08.278805 kernel: audit: type=1327 audit(1757466848.153:1548): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:14:08.278830 kernel: audit: type=1300 audit(1757466848.153:1549): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001f62a00 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:14:08.281880 kernel: audit: type=1327 audit(1757466848.153:1549): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:14:08.287359 kernel: audit: type=1400 audit(1757466848.153:1550): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:14:08.116000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c001f62680 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:14:08.116000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:14:08.153000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:14:08.153000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:14:08.153000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0000da4c0 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:14:08.153000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:14:08.153000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001f62a00 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:14:08.153000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:14:08.153000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:14:08.153000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0000da620 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:14:08.153000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:14:08.327000 audit[5419]: NETFILTER_CFG table=filter:128 family=2 entries=17 op=nft_register_rule pid=5419 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:14:08.327000 audit[5419]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffd1b732810 a2=0 a3=7ffd1b7327fc items=0 ppid=2249 pid=5419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:14:08.327000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:14:08.332000 audit[5419]: NETFILTER_CFG table=nat:129 family=2 entries=59 op=nft_unregister_chain pid=5419 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:14:08.332000 audit[5419]: SYSCALL arch=c000003e syscall=46 success=yes exit=4364 a0=3 a1=7ffd1b732810 a2=0 a3=7ffd1b7327fc items=0 ppid=2249 pid=5419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:14:08.332000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:14:08.440000 audit[5421]: NETFILTER_CFG table=filter:130 family=2 entries=22 op=nft_register_rule pid=5421 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:14:08.440000 audit[5421]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffd0a221670 a2=0 a3=7ffd0a22165c items=0 ppid=2249 pid=5421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:14:08.440000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:14:08.445000 audit[5421]: NETFILTER_CFG table=nat:131 family=2 entries=12 op=nft_register_rule pid=5421 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:14:08.445000 audit[5421]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd0a221670 a2=0 a3=0 items=0 ppid=2249 pid=5421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:14:08.445000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:14:33.064263 kubelet[2111]: E0910 01:14:24.316300 2111 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": Get \"https://139.178.70.105:6443/api/v1/nodes/localhost?timeout=10s\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)" Sep 10 01:14:35.202483 kubelet[2111]: E0910 01:13:59.825509 2111 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 10s exceeded: context deadline exceeded" containerID="1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50" cmd=["/bin/calico-node","-bird-ready","-felix-ready"] Sep 10 01:14:56.465554 sshd[5348]: pam_unix(sshd:session): session closed for user core Sep 10 01:14:56.604613 kernel: kauditd_printk_skb: 14 callbacks suppressed Sep 10 01:14:56.615103 kernel: audit: type=1106 audit(1757466896.541:1555): pid=5348 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:14:56.622768 kernel: audit: type=1104 audit(1757466896.545:1556): pid=5348 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:14:56.622813 kernel: audit: type=1130 audit(1757466896.554:1557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.105:22-147.75.109.163:57384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:14:56.622840 kernel: audit: type=1131 audit(1757466896.561:1558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.105:22-147.75.109.163:35658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:14:56.541000 audit[5348]: USER_END pid=5348 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:14:56.545000 audit[5348]: CRED_DISP pid=5348 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:14:56.554000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.105:22-147.75.109.163:57384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:14:56.561000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.105:22-147.75.109.163:35658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:14:56.554253 systemd[1]: Started sshd@9-139.178.70.105:22-147.75.109.163:57384.service. Sep 10 01:14:56.560106 systemd[1]: sshd@8-139.178.70.105:22-147.75.109.163:35658.service: Deactivated successfully. Sep 10 01:14:56.562718 systemd[1]: session-11.scope: Deactivated successfully. Sep 10 01:14:56.562808 systemd[1]: session-11.scope: Consumed 12.571s CPU time. Sep 10 01:14:56.565882 systemd-logind[1239]: Session 11 logged out. Waiting for processes to exit. Sep 10 01:14:56.566849 systemd-logind[1239]: Removed session 11. Sep 10 01:14:56.794555 sshd[5463]: Accepted publickey for core from 147.75.109.163 port 57384 ssh2: RSA SHA256:0IUR5emySKOryc09IkQfiEMy48OZjcmwN/1tG3dFsA8 Sep 10 01:14:56.808821 kernel: audit: type=1101 audit(1757466896.794:1559): pid=5463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:14:56.808862 kernel: audit: type=1103 audit(1757466896.799:1560): pid=5463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:14:56.808880 kernel: audit: type=1006 audit(1757466896.799:1561): pid=5463 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Sep 10 01:14:56.808895 kernel: audit: type=1300 audit(1757466896.799:1561): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb2b42bd0 a2=3 a3=0 items=0 ppid=1 pid=5463 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:14:56.794000 audit[5463]: USER_ACCT pid=5463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:14:56.812257 kernel: audit: type=1327 audit(1757466896.799:1561): proctitle=737368643A20636F7265205B707269765D Sep 10 01:14:56.799000 audit[5463]: CRED_ACQ pid=5463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:14:56.799000 audit[5463]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb2b42bd0 a2=3 a3=0 items=0 ppid=1 pid=5463 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:14:56.799000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 01:14:56.811151 sshd[5463]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 01:14:56.905827 systemd-logind[1239]: New session 12 of user core. Sep 10 01:14:56.906440 systemd[1]: Started session-12.scope. Sep 10 01:14:56.921224 kernel: audit: type=1105 audit(1757466896.914:1562): pid=5463 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:14:56.914000 audit[5463]: USER_START pid=5463 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:14:56.924000 audit[5466]: CRED_ACQ pid=5466 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:15:00.313000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:15:00.313000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0033b8840 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:15:00.313000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:15:00.313000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:15:00.313000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c003696b60 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:15:00.313000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:15:01.013000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:15:01.013000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c00a36ae40 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:15:01.013000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:15:01.021000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6730 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:15:01.021000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00a36af60 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:15:01.021000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:15:01.057000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:15:01.057000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c006b9aa80 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:15:01.057000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:15:01.148000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:15:01.148000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00880a820 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:15:01.148000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:15:01.148000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6736 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:15:01.148000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c009276780 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:15:01.148000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:15:01.211000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:15:01.211000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00880bac0 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:15:01.211000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:15:01.278000 audit[4711]: AVC avc: denied { watch } for pid=4711 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_11_33.3120734617/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c562 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c339,c562 tclass=file permissive=0 Sep 10 01:15:01.278000 audit[4711]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001780000 a2=fc6 a3=0 items=0 ppid=3827 pid=4711 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c562 key=(null) Sep 10 01:15:01.278000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 01:15:01.985566 kernel: kauditd_printk_skb: 28 callbacks suppressed Sep 10 01:15:02.053364 kernel: audit: type=1400 audit(1757466901.982:1573): avc: denied { watch } for pid=4791 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_11_33.1359678746/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c725 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c604,c725 tclass=file permissive=0 Sep 10 01:15:02.074644 kernel: audit: type=1300 audit(1757466901.982:1573): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0028e8160 a2=fc6 a3=0 items=0 ppid=4014 pid=4791 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c725 key=(null) Sep 10 01:15:02.081737 kernel: audit: type=1327 audit(1757466901.982:1573): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 01:15:01.982000 audit[4791]: AVC avc: denied { watch } for pid=4791 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_11_33.1359678746/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c725 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c604,c725 tclass=file permissive=0 Sep 10 01:15:01.982000 audit[4791]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0028e8160 a2=fc6 a3=0 items=0 ppid=4014 pid=4791 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c725 key=(null) Sep 10 01:15:01.982000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 01:15:06.778759 kubelet[2111]: I0910 01:15:06.774200 2111 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"node-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:15:06.841812 kubelet[2111]: I0910 01:15:06.788393 2111 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"whisker-backend-key-pair\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:15:06.841812 kubelet[2111]: I0910 01:15:06.808171 2111 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:15:06.841812 kubelet[2111]: I0910 01:15:06.825705 2111 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:15:06.846398 kubelet[2111]: I0910 01:15:06.846375 2111 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:15:06.848922 kubelet[2111]: I0910 01:15:06.846482 2111 reflector.go:556] "Warning: watch ended with error" reflector="object-\"tigera-operator\"/\"kubernetes-services-endpoint\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:15:06.848922 kubelet[2111]: I0910 01:15:06.846504 2111 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-apiserver\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:15:06.848922 kubelet[2111]: I0910 01:15:06.846537 2111 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane-key-pair\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:15:06.848922 kubelet[2111]: I0910 01:15:06.846557 2111 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"whisker-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:15:06.848922 kubelet[2111]: I0910 01:15:06.846573 2111 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:15:06.848922 kubelet[2111]: I0910 01:15:06.846589 2111 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"coredns\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:15:06.848922 kubelet[2111]: I0910 01:15:06.846606 2111 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-apiserver\"/\"calico-apiserver-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:15:07.068227 kubelet[2111]: I0910 01:15:07.068131 2111 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:15:07.093931 kubelet[2111]: I0910 01:15:07.093894 2111 reflector.go:556] "Warning: watch ended with error" reflector="pkg/kubelet/config/apiserver.go:66" type="*v1.Pod" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:15:07.147636 kubelet[2111]: I0910 01:15:07.147605 2111 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"kube-proxy\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:15:07.151908 kubelet[2111]: I0910 01:15:07.151890 2111 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:15:07.225168 kubelet[2111]: I0910 01:15:07.225140 2111 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"cni-config\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:15:07.269307 kubelet[2111]: I0910 01:15:07.263057 2111 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:15:07.494911 kubelet[2111]: I0910 01:15:07.494882 2111 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:15:07.765862 kubelet[2111]: I0910 01:15:06.747483 2111 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"tigera-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:15:07.983895 kubelet[2111]: I0910 01:15:07.983857 2111 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"typha-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:15:08.197000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:15:08.328142 kernel: audit: type=1400 audit(1757466908.197:1574): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:15:08.441550 kernel: audit: type=1300 audit(1757466908.197:1574): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c003697080 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:15:08.441671 kernel: audit: type=1327 audit(1757466908.197:1574): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:15:08.515710 kernel: audit: type=1400 audit(1757466908.212:1575): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:15:08.542429 kernel: audit: type=1300 audit(1757466908.212:1575): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0035c6e40 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:15:08.542568 kernel: audit: type=1327 audit(1757466908.212:1575): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:15:08.555641 kernel: audit: type=1400 audit(1757466908.227:1576): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:15:08.555698 kernel: audit: type=1300 audit(1757466908.227:1576): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c0036970a0 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:15:08.567679 kernel: audit: type=1327 audit(1757466908.227:1576): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:15:08.567721 kernel: audit: type=1400 audit(1757466908.228:1577): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:15:08.197000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c003697080 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:15:08.197000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:15:08.212000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:15:08.212000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0035c6e40 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:15:08.212000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:15:08.227000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:15:08.227000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c0036970a0 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:15:08.227000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:15:08.228000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:15:08.228000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0035c6e60 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:15:08.228000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:15:38.392527 sshd[5463]: pam_unix(sshd:session): session closed for user core Sep 10 01:15:38.492683 kernel: kauditd_printk_skb: 2 callbacks suppressed Sep 10 01:15:38.498377 kernel: audit: type=1106 audit(1757466938.438:1578): pid=5463 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:15:38.500492 kernel: audit: type=1104 audit(1757466938.444:1579): pid=5463 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:15:38.500548 kernel: audit: type=1130 audit(1757466938.448:1580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.105:22-147.75.109.163:43064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:15:38.501427 kernel: audit: type=1131 audit(1757466938.449:1581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.105:22-147.75.109.163:57384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:15:38.438000 audit[5463]: USER_END pid=5463 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:15:38.444000 audit[5463]: CRED_DISP pid=5463 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:15:38.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.105:22-147.75.109.163:43064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:15:38.449000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.105:22-147.75.109.163:57384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:15:38.450160 systemd[1]: Started sshd@10-139.178.70.105:22-147.75.109.163:43064.service. Sep 10 01:15:38.450612 systemd[1]: sshd@9-139.178.70.105:22-147.75.109.163:57384.service: Deactivated successfully. Sep 10 01:15:38.454858 systemd[1]: session-12.scope: Deactivated successfully. Sep 10 01:15:38.454955 systemd[1]: session-12.scope: Consumed 9.084s CPU time. Sep 10 01:15:38.458612 systemd-logind[1239]: Session 12 logged out. Waiting for processes to exit. Sep 10 01:15:38.460118 systemd-logind[1239]: Removed session 12. Sep 10 01:15:38.563096 sshd[5485]: Accepted publickey for core from 147.75.109.163 port 43064 ssh2: RSA SHA256:0IUR5emySKOryc09IkQfiEMy48OZjcmwN/1tG3dFsA8 Sep 10 01:15:38.561000 audit[5485]: USER_ACCT pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:15:38.565000 audit[5485]: CRED_ACQ pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:15:38.571412 kernel: audit: type=1101 audit(1757466938.561:1582): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:15:38.575865 kernel: audit: type=1103 audit(1757466938.565:1583): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:15:38.578388 kernel: audit: type=1006 audit(1757466938.566:1584): pid=5485 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Sep 10 01:15:38.578416 kernel: audit: type=1300 audit(1757466938.566:1584): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd4985010 a2=3 a3=0 items=0 ppid=1 pid=5485 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:15:38.578879 kernel: audit: type=1327 audit(1757466938.566:1584): proctitle=737368643A20636F7265205B707269765D Sep 10 01:15:38.566000 audit[5485]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd4985010 a2=3 a3=0 items=0 ppid=1 pid=5485 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:15:38.566000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 01:15:38.577617 sshd[5485]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 01:15:38.649881 systemd[1]: Started session-13.scope. Sep 10 01:15:38.650510 systemd-logind[1239]: New session 13 of user core. Sep 10 01:15:38.655000 audit[5485]: USER_START pid=5485 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:15:38.661505 kernel: audit: type=1105 audit(1757466938.655:1585): pid=5485 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:15:38.661000 audit[5489]: CRED_ACQ pid=5489 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:15:39.760200 sshd[5485]: pam_unix(sshd:session): session closed for user core Sep 10 01:15:39.801000 audit[5485]: USER_END pid=5485 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:15:39.802000 audit[5485]: CRED_DISP pid=5485 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:15:39.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.105:22-147.75.109.163:43072 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:15:39.818000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.105:22-147.75.109.163:43064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:15:39.817080 systemd[1]: Started sshd@11-139.178.70.105:22-147.75.109.163:43072.service. Sep 10 01:15:39.819731 systemd[1]: sshd@10-139.178.70.105:22-147.75.109.163:43064.service: Deactivated successfully. Sep 10 01:15:39.820518 systemd[1]: session-13.scope: Deactivated successfully. Sep 10 01:15:39.823539 systemd-logind[1239]: Session 13 logged out. Waiting for processes to exit. Sep 10 01:15:39.824307 systemd-logind[1239]: Removed session 13. Sep 10 01:15:39.946000 audit[5496]: USER_ACCT pid=5496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:15:39.947000 audit[5496]: CRED_ACQ pid=5496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:15:39.947000 audit[5496]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdffda5210 a2=3 a3=0 items=0 ppid=1 pid=5496 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:15:39.947000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 01:15:39.973508 sshd[5496]: Accepted publickey for core from 147.75.109.163 port 43072 ssh2: RSA SHA256:0IUR5emySKOryc09IkQfiEMy48OZjcmwN/1tG3dFsA8 Sep 10 01:15:39.954186 sshd[5496]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 01:15:40.004653 systemd[1]: Started session-14.scope. Sep 10 01:15:40.005056 systemd-logind[1239]: New session 14 of user core. Sep 10 01:15:40.008000 audit[5496]: USER_START pid=5496 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:15:40.010000 audit[5500]: CRED_ACQ pid=5500 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:16:00.413000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:16:00.627514 kernel: kauditd_printk_skb: 12 callbacks suppressed Sep 10 01:16:00.640612 kernel: audit: type=1400 audit(1757466960.413:1596): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:16:00.645513 kernel: audit: type=1300 audit(1757466960.413:1596): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0026e9aa0 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:16:00.646805 kernel: audit: type=1327 audit(1757466960.413:1596): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:16:00.646841 kernel: audit: type=1400 audit(1757466960.416:1597): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:16:00.646859 kernel: audit: type=1300 audit(1757466960.416:1597): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0024c5280 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:16:00.648882 kernel: audit: type=1327 audit(1757466960.416:1597): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:16:00.413000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0026e9aa0 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:16:00.413000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:16:00.416000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:16:00.416000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0024c5280 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:16:00.416000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:16:01.044000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:16:01.180700 kernel: audit: type=1400 audit(1757466961.044:1598): avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:16:01.191388 kernel: audit: type=1300 audit(1757466961.044:1598): arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c011716600 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:16:01.194283 kernel: audit: type=1327 audit(1757466961.044:1598): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:16:01.194313 kernel: audit: type=1400 audit(1757466961.107:1599): avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:16:01.044000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c011716600 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:16:01.044000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:16:01.107000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:16:01.107000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c0096e9e30 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:16:01.107000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:16:01.149000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6736 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:16:01.149000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c0096e9e60 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:16:01.149000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:16:01.152000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:16:01.152000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c0068c8b80 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:16:01.152000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:16:01.315000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:16:01.315000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c0068c8d00 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:16:01.315000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:16:01.325000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6730 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:16:01.325000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c005c22cc0 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:16:01.325000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:16:01.382000 audit[4711]: AVC avc: denied { watch } for pid=4711 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_11_33.3120734617/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c562 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c339,c562 tclass=file permissive=0 Sep 10 01:16:01.382000 audit[4711]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001780060 a2=fc6 a3=0 items=0 ppid=3827 pid=4711 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c562 key=(null) Sep 10 01:16:01.382000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 01:16:02.136000 audit[4791]: AVC avc: denied { watch } for pid=4791 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_11_33.1359678746/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c725 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c604,c725 tclass=file permissive=0 Sep 10 01:16:02.136000 audit[4791]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0028e8200 a2=fc6 a3=0 items=0 ppid=4014 pid=4791 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c725 key=(null) Sep 10 01:16:02.136000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 01:16:05.508000 audit[5512]: NETFILTER_CFG table=filter:132 family=2 entries=34 op=nft_register_rule pid=5512 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:16:05.621582 kernel: kauditd_printk_skb: 20 callbacks suppressed Sep 10 01:16:05.631916 kernel: audit: type=1325 audit(1757466965.508:1606): table=filter:132 family=2 entries=34 op=nft_register_rule pid=5512 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:16:05.632033 kernel: audit: type=1300 audit(1757466965.508:1606): arch=c000003e syscall=46 success=yes exit=17152 a0=3 a1=7fff42614a80 a2=0 a3=7fff42614a6c items=0 ppid=2249 pid=5512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:16:05.632069 kernel: audit: type=1327 audit(1757466965.508:1606): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:16:05.632110 kernel: audit: type=1325 audit(1757466965.517:1607): table=nat:133 family=2 entries=12 op=nft_register_rule pid=5512 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:16:05.632155 kernel: audit: type=1300 audit(1757466965.517:1607): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff42614a80 a2=0 a3=0 items=0 ppid=2249 pid=5512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:16:05.632183 kernel: audit: type=1327 audit(1757466965.517:1607): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:16:05.508000 audit[5512]: SYSCALL arch=c000003e syscall=46 success=yes exit=17152 a0=3 a1=7fff42614a80 a2=0 a3=7fff42614a6c items=0 ppid=2249 pid=5512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:16:05.508000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:16:05.517000 audit[5512]: NETFILTER_CFG table=nat:133 family=2 entries=12 op=nft_register_rule pid=5512 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:16:05.517000 audit[5512]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff42614a80 a2=0 a3=0 items=0 ppid=2249 pid=5512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:16:05.517000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:16:06.709000 audit[5515]: NETFILTER_CFG table=filter:134 family=2 entries=46 op=nft_register_rule pid=5515 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:16:06.830247 kernel: audit: type=1325 audit(1757466966.709:1608): table=filter:134 family=2 entries=46 op=nft_register_rule pid=5515 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:16:06.835379 kernel: audit: type=1300 audit(1757466966.709:1608): arch=c000003e syscall=46 success=yes exit=17152 a0=3 a1=7ffdaeb1cb70 a2=0 a3=7ffdaeb1cb5c items=0 ppid=2249 pid=5515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:16:06.836727 kernel: audit: type=1327 audit(1757466966.709:1608): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:16:06.838037 kernel: audit: type=1325 audit(1757466966.722:1609): table=nat:135 family=2 entries=12 op=nft_register_rule pid=5515 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:16:06.709000 audit[5515]: SYSCALL arch=c000003e syscall=46 success=yes exit=17152 a0=3 a1=7ffdaeb1cb70 a2=0 a3=7ffdaeb1cb5c items=0 ppid=2249 pid=5515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:16:06.709000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:16:06.722000 audit[5515]: NETFILTER_CFG table=nat:135 family=2 entries=12 op=nft_register_rule pid=5515 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:16:06.722000 audit[5515]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdaeb1cb70 a2=0 a3=0 items=0 ppid=2249 pid=5515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:16:06.722000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:16:07.223019 sshd[5496]: pam_unix(sshd:session): session closed for user core Sep 10 01:16:07.288566 systemd[1]: Started sshd@12-139.178.70.105:22-147.75.109.163:36150.service. Sep 10 01:16:07.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.105:22-147.75.109.163:36150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:16:07.288000 audit[5496]: USER_END pid=5496 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:16:07.293000 audit[5496]: CRED_DISP pid=5496 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:16:07.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.105:22-147.75.109.163:43072 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:16:07.307078 systemd[1]: sshd@11-139.178.70.105:22-147.75.109.163:43072.service: Deactivated successfully. Sep 10 01:16:07.309037 systemd[1]: session-14.scope: Deactivated successfully. Sep 10 01:16:07.309755 systemd-logind[1239]: Session 14 logged out. Waiting for processes to exit. Sep 10 01:16:07.310387 systemd-logind[1239]: Removed session 14. Sep 10 01:16:07.529523 sshd[5517]: Accepted publickey for core from 147.75.109.163 port 36150 ssh2: RSA SHA256:0IUR5emySKOryc09IkQfiEMy48OZjcmwN/1tG3dFsA8 Sep 10 01:16:07.528000 audit[5517]: USER_ACCT pid=5517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:16:07.530000 audit[5517]: CRED_ACQ pid=5517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:16:07.530000 audit[5517]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe37fa2620 a2=3 a3=0 items=0 ppid=1 pid=5517 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:16:07.530000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 01:16:07.537342 sshd[5517]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 01:16:07.622039 systemd[1]: Started session-15.scope. Sep 10 01:16:07.622229 systemd-logind[1239]: New session 15 of user core. Sep 10 01:16:07.636000 audit[5517]: USER_START pid=5517 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:16:07.643000 audit[5521]: CRED_ACQ pid=5521 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:16:08.390000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:16:08.390000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0032cbca0 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:16:08.390000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:16:08.391000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:16:08.391000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001eef3c0 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:16:08.391000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:16:08.579000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:16:08.579000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0032cbfa0 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:16:08.579000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:16:08.609000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:16:08.609000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001eef8a0 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:16:08.609000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:16:13.147812 kernel: kauditd_printk_skb: 25 callbacks suppressed Sep 10 01:16:13.211453 kernel: audit: type=1325 audit(1757466973.132:1623): table=filter:136 family=2 entries=34 op=nft_register_rule pid=5530 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:16:13.215932 kernel: audit: type=1300 audit(1757466973.132:1623): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffdcdcd4bf0 a2=0 a3=7ffdcdcd4bdc items=0 ppid=2249 pid=5530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:16:13.216975 kernel: audit: type=1327 audit(1757466973.132:1623): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:16:13.217002 kernel: audit: type=1325 audit(1757466973.145:1624): table=nat:137 family=2 entries=96 op=nft_register_chain pid=5530 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:16:13.218107 kernel: audit: type=1300 audit(1757466973.145:1624): arch=c000003e syscall=46 success=yes exit=45612 a0=3 a1=7ffdcdcd4bf0 a2=0 a3=7ffdcdcd4bdc items=0 ppid=2249 pid=5530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:16:13.218131 kernel: audit: type=1327 audit(1757466973.145:1624): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:16:13.132000 audit[5530]: NETFILTER_CFG table=filter:136 family=2 entries=34 op=nft_register_rule pid=5530 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:16:13.132000 audit[5530]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffdcdcd4bf0 a2=0 a3=7ffdcdcd4bdc items=0 ppid=2249 pid=5530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:16:13.132000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:16:13.145000 audit[5530]: NETFILTER_CFG table=nat:137 family=2 entries=96 op=nft_register_chain pid=5530 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:16:13.145000 audit[5530]: SYSCALL arch=c000003e syscall=46 success=yes exit=45612 a0=3 a1=7ffdcdcd4bf0 a2=0 a3=7ffdcdcd4bdc items=0 ppid=2249 pid=5530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:16:13.145000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:17:00.718000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:01.504951 kernel: audit: type=1400 audit(1757467020.718:1625): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:01.660305 kernel: audit: type=1300 audit(1757467020.718:1625): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0017b0b40 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:01.660466 kernel: audit: type=1327 audit(1757467020.718:1625): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:01.692082 kernel: audit: type=1400 audit(1757467020.727:1626): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:01.726827 kernel: audit: type=1300 audit(1757467020.727:1626): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002dfcd80 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:01.726908 kernel: audit: type=1327 audit(1757467020.727:1626): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:01.742356 kernel: audit: type=1400 audit(1757467021.604:1627): avc: denied { watch } for pid=4711 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_11_33.3120734617/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c562 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c339,c562 tclass=file permissive=0 Sep 10 01:17:01.767601 kernel: audit: type=1300 audit(1757467021.604:1627): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001780240 a2=fc6 a3=0 items=0 ppid=3827 pid=4711 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c562 key=(null) Sep 10 01:17:01.767650 kernel: audit: type=1327 audit(1757467021.604:1627): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 01:17:00.718000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0017b0b40 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:02.289665 kernel: audit: type=1400 audit(1757467022.230:1628): avc: denied { watch } for pid=4791 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_11_33.1359678746/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c725 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c604,c725 tclass=file permissive=0 Sep 10 01:17:00.718000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:00.727000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:00.727000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002dfcd80 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:00.727000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:01.604000 audit[4711]: AVC avc: denied { watch } for pid=4711 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_11_33.3120734617/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c562 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c339,c562 tclass=file permissive=0 Sep 10 01:17:01.604000 audit[4711]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001780240 a2=fc6 a3=0 items=0 ppid=3827 pid=4711 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c562 key=(null) Sep 10 01:17:01.604000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 01:17:02.230000 audit[4791]: AVC avc: denied { watch } for pid=4791 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_11_33.1359678746/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c725 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c604,c725 tclass=file permissive=0 Sep 10 01:17:02.230000 audit[4791]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0028e8000 a2=fc6 a3=0 items=0 ppid=4014 pid=4791 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c725 key=(null) Sep 10 01:17:02.230000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 01:17:02.760000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6730 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:02.760000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c00a15ef90 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:17:02.760000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:17:02.920000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:02.920000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=80 a1=c00f4d9800 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:17:02.920000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:17:03.002000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:03.002000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c00a308860 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:17:03.002000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:17:03.123000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6736 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:03.123000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00a15efc0 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:17:03.123000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:17:03.614000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:03.614000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c00f4d98c0 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:17:03.614000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:17:03.741000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:03.741000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7e a1=c00a308c20 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:17:03.741000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:17:08.474000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:08.726535 kernel: kauditd_printk_skb: 20 callbacks suppressed Sep 10 01:17:08.735486 kernel: audit: type=1400 audit(1757467028.474:1635): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:08.739233 kernel: audit: type=1300 audit(1757467028.474:1635): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002dfcee0 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:08.740221 kernel: audit: type=1327 audit(1757467028.474:1635): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:08.740244 kernel: audit: type=1400 audit(1757467028.512:1636): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:08.740260 kernel: audit: type=1300 audit(1757467028.512:1636): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00221e220 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:08.741402 kernel: audit: type=1327 audit(1757467028.512:1636): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:08.741430 kernel: audit: type=1400 audit(1757467028.599:1637): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:08.741450 kernel: audit: type=1300 audit(1757467028.599:1637): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00221e2e0 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:08.742383 kernel: audit: type=1327 audit(1757467028.599:1637): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:08.742415 kernel: audit: type=1400 audit(1757467028.646:1638): avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:08.474000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002dfcee0 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:08.474000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:08.512000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:08.512000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00221e220 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:08.512000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:08.599000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:08.599000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00221e2e0 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:08.599000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:08.646000 audit[1936]: AVC avc: denied { watch } for pid=1936 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:08.646000 audit[1936]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00221e720 a2=fc6 a3=0 items=0 ppid=1798 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:08.646000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:11.607302 systemd[1]: cri-containerd-147e2987ff6977a909404d4b2e8020af625dafcd587f7106b97c168f0e8ebe30.scope: Deactivated successfully. Sep 10 01:17:11.634000 audit: BPF prog-id=117 op=UNLOAD Sep 10 01:17:11.639000 audit: BPF prog-id=120 op=UNLOAD Sep 10 01:17:11.878000 audit: BPF prog-id=76 op=UNLOAD Sep 10 01:17:11.878000 audit: BPF prog-id=87 op=UNLOAD Sep 10 01:17:12.084407 env[1267]: time="2025-09-10T01:17:11.790505870Z" level=info msg="shim disconnected" id=147e2987ff6977a909404d4b2e8020af625dafcd587f7106b97c168f0e8ebe30 Sep 10 01:17:12.084407 env[1267]: time="2025-09-10T01:17:11.790623883Z" level=warning msg="cleaning up after shim disconnected" id=147e2987ff6977a909404d4b2e8020af625dafcd587f7106b97c168f0e8ebe30 namespace=k8s.io Sep 10 01:17:12.084407 env[1267]: time="2025-09-10T01:17:11.790640444Z" level=info msg="cleaning up dead shim" Sep 10 01:17:12.084407 env[1267]: time="2025-09-10T01:17:11.801530784Z" level=warning msg="cleanup warnings time=\"2025-09-10T01:17:11Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5582 runtime=io.containerd.runc.v2\n" Sep 10 01:17:12.084407 env[1267]: time="2025-09-10T01:17:11.880956815Z" level=info msg="shim disconnected" id=4b6a8ac61a37fdce0164765b3f8d9a612db95e14499ac39d297966a7200d852d Sep 10 01:17:12.084407 env[1267]: time="2025-09-10T01:17:11.880988358Z" level=warning msg="cleaning up after shim disconnected" id=4b6a8ac61a37fdce0164765b3f8d9a612db95e14499ac39d297966a7200d852d namespace=k8s.io Sep 10 01:17:12.084407 env[1267]: time="2025-09-10T01:17:11.880996236Z" level=info msg="cleaning up dead shim" Sep 10 01:17:12.084407 env[1267]: time="2025-09-10T01:17:11.888615987Z" level=warning msg="cleanup warnings time=\"2025-09-10T01:17:11Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5607 runtime=io.containerd.runc.v2\n" Sep 10 01:17:11.646550 systemd[1]: cri-containerd-147e2987ff6977a909404d4b2e8020af625dafcd587f7106b97c168f0e8ebe30.scope: Consumed 20.911s CPU time. Sep 10 01:17:11.874684 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-147e2987ff6977a909404d4b2e8020af625dafcd587f7106b97c168f0e8ebe30-rootfs.mount: Deactivated successfully. Sep 10 01:17:11.875312 systemd[1]: cri-containerd-4b6a8ac61a37fdce0164765b3f8d9a612db95e14499ac39d297966a7200d852d.scope: Deactivated successfully. Sep 10 01:17:11.875512 systemd[1]: cri-containerd-4b6a8ac61a37fdce0164765b3f8d9a612db95e14499ac39d297966a7200d852d.scope: Consumed 4.310s CPU time. Sep 10 01:17:11.880138 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4b6a8ac61a37fdce0164765b3f8d9a612db95e14499ac39d297966a7200d852d-rootfs.mount: Deactivated successfully. Sep 10 01:17:12.309252 systemd[1]: cri-containerd-ee62937825b138c75dba09dbdba44ff73839eb841733417bb809dc9eb10b5f99.scope: Deactivated successfully. Sep 10 01:17:12.309499 systemd[1]: cri-containerd-ee62937825b138c75dba09dbdba44ff73839eb841733417bb809dc9eb10b5f99.scope: Consumed 2.605s CPU time. Sep 10 01:17:12.312000 audit: BPF prog-id=80 op=UNLOAD Sep 10 01:17:12.312000 audit: BPF prog-id=86 op=UNLOAD Sep 10 01:17:12.329776 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ee62937825b138c75dba09dbdba44ff73839eb841733417bb809dc9eb10b5f99-rootfs.mount: Deactivated successfully. Sep 10 01:17:12.331120 env[1267]: time="2025-09-10T01:17:12.331093617Z" level=info msg="shim disconnected" id=ee62937825b138c75dba09dbdba44ff73839eb841733417bb809dc9eb10b5f99 Sep 10 01:17:12.331246 env[1267]: time="2025-09-10T01:17:12.331232419Z" level=warning msg="cleaning up after shim disconnected" id=ee62937825b138c75dba09dbdba44ff73839eb841733417bb809dc9eb10b5f99 namespace=k8s.io Sep 10 01:17:12.331308 env[1267]: time="2025-09-10T01:17:12.331298430Z" level=info msg="cleaning up dead shim" Sep 10 01:17:12.336809 env[1267]: time="2025-09-10T01:17:12.336779617Z" level=warning msg="cleanup warnings time=\"2025-09-10T01:17:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5632 runtime=io.containerd.runc.v2\n" Sep 10 01:17:12.961781 sshd[5517]: pam_unix(sshd:session): session closed for user core Sep 10 01:17:12.965210 systemd[1]: Started sshd@13-139.178.70.105:22-147.75.109.163:34216.service. Sep 10 01:17:12.965000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.105:22-147.75.109.163:34216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:17:12.975000 audit[5517]: USER_END pid=5517 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:12.977000 audit[5517]: CRED_DISP pid=5517 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:13.015610 systemd[1]: sshd@12-139.178.70.105:22-147.75.109.163:36150.service: Deactivated successfully. Sep 10 01:17:13.014000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.105:22-147.75.109.163:36150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:17:13.016296 systemd[1]: session-15.scope: Deactivated successfully. Sep 10 01:17:13.016391 systemd[1]: session-15.scope: Consumed 6.227s CPU time. Sep 10 01:17:13.016866 systemd-logind[1239]: Session 15 logged out. Waiting for processes to exit. Sep 10 01:17:13.017570 systemd-logind[1239]: Removed session 15. Sep 10 01:17:13.065000 audit[5645]: USER_ACCT pid=5645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:13.067023 sshd[5645]: Accepted publickey for core from 147.75.109.163 port 34216 ssh2: RSA SHA256:0IUR5emySKOryc09IkQfiEMy48OZjcmwN/1tG3dFsA8 Sep 10 01:17:13.066000 audit[5645]: CRED_ACQ pid=5645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:13.066000 audit[5645]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc12f8e9e0 a2=3 a3=0 items=0 ppid=1 pid=5645 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:13.066000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 01:17:13.069725 sshd[5645]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 01:17:13.119226 systemd[1]: Started session-16.scope. Sep 10 01:17:13.119692 systemd-logind[1239]: New session 16 of user core. Sep 10 01:17:13.122000 audit[5645]: USER_START pid=5645 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:13.123000 audit[5648]: CRED_ACQ pid=5648 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:13.723437 kubelet[2111]: I0910 01:17:13.720294 2111 request.go:752] "Waited before sending request" delay="11.542722734s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://139.178.70.105:6443/api/v1/namespaces/tigera-operator/configmaps?fieldSelector=metadata.name%3Dkubernetes-services-endpoint&resourceVersion=675" Sep 10 01:17:14.852287 kubelet[2111]: E0910 01:17:14.851664 2111 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": Get \"https://139.178.70.105:6443/api/v1/nodes/localhost?timeout=10s\": context deadline exceeded" Sep 10 01:17:15.083261 kubelet[2111]: E0910 01:17:15.083182 2111 log.go:32] "CreateContainer in sandbox from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" podSandboxID="358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f" Sep 10 01:17:15.099139 kubelet[2111]: E0910 01:17:15.099120 2111 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" containerID="ee62937825b138c75dba09dbdba44ff73839eb841733417bb809dc9eb10b5f99" Sep 10 01:17:15.113056 kubelet[2111]: E0910 01:17:15.112998 2111 container_log_manager.go:274] "Failed to get container status" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" worker=1 containerID="ee62937825b138c75dba09dbdba44ff73839eb841733417bb809dc9eb10b5f99" Sep 10 01:17:15.328451 kubelet[2111]: E0910 01:17:14.928231 2111 log.go:32] "ListContainers with filter from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" filter="&ContainerFilter{Id:,State:&ContainerStateValue{State:CONTAINER_RUNNING,},PodSandboxId:,LabelSelector:map[string]string{},}" Sep 10 01:17:15.328451 kubelet[2111]: E0910 01:17:15.328456 2111 kuberuntime_container.go:540] "ListContainers failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" Sep 10 01:17:15.328451 kubelet[2111]: E0910 01:17:15.328471 2111 kubelet_pods.go:1208] "Error listing containers" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" Sep 10 01:17:15.328451 kubelet[2111]: E0910 01:17:15.328495 2111 kubelet.go:2623] "Failed cleaning pods" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" Sep 10 01:17:15.328451 kubelet[2111]: E0910 01:17:15.328508 2111 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="4m8.346s" Sep 10 01:17:15.328451 kubelet[2111]: E0910 01:17:15.328524 2111 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime is down, PLEG is not healthy: pleg was last seen active 5m4.699708987s ago; threshold is 3m0s]" Sep 10 01:17:15.365151 kubelet[2111]: W0910 01:16:35.978417 2111 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@10-139.178.70.105:22-147.75.109.163:43064.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@10-139.178.70.105:22-147.75.109.163:43064.service: no such file or directory Sep 10 01:17:15.365366 kubelet[2111]: W0910 01:17:15.365347 2111 watcher.go:93] Error while processing event ("/sys/fs/cgroup/user.slice/user-500.slice/session-13.scope": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/user.slice/user-500.slice/session-13.scope: no such file or directory Sep 10 01:17:15.365444 kubelet[2111]: W0910 01:17:15.365434 2111 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@11-139.178.70.105:22-147.75.109.163:43072.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@11-139.178.70.105:22-147.75.109.163:43072.service: no such file or directory Sep 10 01:17:15.366378 kubelet[2111]: W0910 01:17:15.366367 2111 watcher.go:93] Error while processing event ("/sys/fs/cgroup/user.slice/user-500.slice/session-14.scope": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/user.slice/user-500.slice/session-14.scope: no such file or directory Sep 10 01:17:15.366459 kubelet[2111]: W0910 01:17:15.366447 2111 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@12-139.178.70.105:22-147.75.109.163:36150.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@12-139.178.70.105:22-147.75.109.163:36150.service: no such file or directory Sep 10 01:17:15.366520 kubelet[2111]: W0910 01:17:15.366509 2111 watcher.go:93] Error while processing event ("/sys/fs/cgroup/user.slice/user-500.slice/session-15.scope": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/user.slice/user-500.slice/session-15.scope: no such file or directory Sep 10 01:17:15.367145 kubelet[2111]: I0910 01:17:15.367122 2111 request.go:752] "Waited before sending request" delay="4.352451423s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://139.178.70.105:6443/api/v1/namespaces/calico-system/configmaps?fieldSelector=metadata.name%3Dtigera-ca-bundle&resourceVersion=675" Sep 10 01:17:15.385310 kubelet[2111]: E0910 01:17:15.385288 2111 log.go:32] "CreateContainer in sandbox from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" podSandboxID="08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a" Sep 10 01:17:15.385487 kubelet[2111]: E0910 01:17:15.385463 2111 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-qvtsh,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-588jm_calico-system(433ded13-351c-45da-a35c-464e9f991379): CreateContainerError: context deadline exceeded" logger="UnhandledError" Sep 10 01:17:15.403306 kubelet[2111]: E0910 01:17:15.403192 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"csi-node-driver-registrar\" with CreateContainerError: \"context deadline exceeded\"" pod="calico-system/csi-node-driver-588jm" podUID="433ded13-351c-45da-a35c-464e9f991379" Sep 10 01:17:15.424003 systemd[1]: run-containerd-runc-k8s.io-d33397f53ea424cac6098c9e3d1f857cdb8f55da3d920bd5fd7e60c7a3a6ce91-runc.ddiPWH.mount: Deactivated successfully. Sep 10 01:17:15.455988 kubelet[2111]: E0910 01:17:15.455940 2111 log.go:32] "RemovePodSandbox from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" podSandboxID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" Sep 10 01:17:15.458481 kubelet[2111]: E0910 01:17:15.458359 2111 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime is down, PLEG is not healthy: pleg was last seen active 5m4.829536119s ago; threshold is 3m0s]" Sep 10 01:17:15.462202 kubelet[2111]: E0910 01:17:15.455974 2111 kuberuntime_gc.go:184] "Failed to remove sandbox" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" sandboxID="56a5186c78c9b4f42b94bc9cd50001ced4d3fa0454bf3e29df4bd5eeedf4e7b4" Sep 10 01:17:15.551621 kubelet[2111]: I0910 01:17:15.293179 2111 reflector.go:556] "Warning: watch ended with error" reflector="object-\"tigera-operator\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Sep 10 01:17:15.562832 kubelet[2111]: E0910 01:17:15.335804 2111 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-wbdst,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-67bb596d88-mtqfq_calico-system(0d86b565-8184-416c-b12b-737eb73d2b94): CreateContainerError: context deadline exceeded" logger="UnhandledError" Sep 10 01:17:15.565963 kubelet[2111]: E0910 01:17:15.565947 2111 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with CreateContainerError: \"context deadline exceeded\"" pod="calico-system/calico-kube-controllers-67bb596d88-mtqfq" podUID="0d86b565-8184-416c-b12b-737eb73d2b94" Sep 10 01:17:15.658501 kubelet[2111]: E0910 01:17:15.658478 2111 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime is down, PLEG is not healthy: pleg was last seen active 5m5.029651354s ago; threshold is 3m0s]" Sep 10 01:17:15.694140 kubelet[2111]: E0910 01:17:15.462640 2111 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://139.178.70.105:6443/api/v1/namespaces/kube-system/events\": http2: client connection lost" event="&Event{ObjectMeta:{coredns-674b8bbfcf-xz6mb.1863c6aec7698a59 kube-system 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Pod,Namespace:kube-system,Name:coredns-674b8bbfcf-xz6mb,UID:5fd61191-5eac-4e78-9235-5003726f6150,APIVersion:v1,ResourceVersion:809,FieldPath:spec.containers{coredns},},Reason:Unhealthy,Message:Readiness probe failed: Get \"http://192.168.88.134:8181/ready\": context deadline exceeded (Client.Timeout exceeded while awaiting headers),Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-09-10 01:12:13.576817241 +0000 UTC m=+69.222398661,LastTimestamp:2025-09-10 01:12:13.576817241 +0000 UTC m=+69.222398661,Count:1,Type:Warning,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Sep 10 01:17:15.694579 env[1267]: time="2025-09-10T01:17:15.694554344Z" level=info msg="StopPodSandbox for \"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\"" Sep 10 01:17:15.694880 env[1267]: time="2025-09-10T01:17:15.694864338Z" level=info msg="StopContainer for \"a09e2537a6ea6327e82e5a98c70d51b41c480d2a0558367534805ad67a17b479\" with timeout 30 (s)" Sep 10 01:17:15.694973 env[1267]: time="2025-09-10T01:17:15.694960112Z" level=info msg="StopContainer for \"c726506fa55ffe5436651c5b4abc4970268b5d7360d8ea53a06bedc80bd6e0d8\" with timeout 300 (s)" Sep 10 01:17:15.695834 env[1267]: time="2025-09-10T01:17:15.695811477Z" level=info msg="CreateContainer within sandbox \"4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 10 01:17:15.704894 env[1267]: time="2025-09-10T01:17:15.704866248Z" level=info msg="Stop container \"c726506fa55ffe5436651c5b4abc4970268b5d7360d8ea53a06bedc80bd6e0d8\" with signal terminated" Sep 10 01:17:15.704996 env[1267]: time="2025-09-10T01:17:15.704935641Z" level=info msg="Stop container \"a09e2537a6ea6327e82e5a98c70d51b41c480d2a0558367534805ad67a17b479\" with signal terminated" Sep 10 01:17:15.853575 env[1267]: time="2025-09-10T01:17:15.853544298Z" level=info msg="CreateContainer within sandbox \"4613f77da34ab24c558c41e14d56b69a99c093b335d975270e5ebb9d16c330fc\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"3ced42afff630ab48db8d9d9f4d88ba280c34aad198351d57bb98040a33ccd8a\"" Sep 10 01:17:16.026290 env[1267]: time="2025-09-10T01:17:16.026133410Z" level=info msg="StartContainer for \"3ced42afff630ab48db8d9d9f4d88ba280c34aad198351d57bb98040a33ccd8a\"" Sep 10 01:17:16.124797 systemd[1]: Started cri-containerd-3ced42afff630ab48db8d9d9f4d88ba280c34aad198351d57bb98040a33ccd8a.scope. Sep 10 01:17:16.240304 kernel: kauditd_printk_skb: 19 callbacks suppressed Sep 10 01:17:16.316875 kernel: audit: type=1400 audit(1757467036.207:1654): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.331895 kernel: audit: type=1400 audit(1757467036.207:1655): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.336619 kernel: audit: type=1400 audit(1757467036.207:1656): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.336669 kernel: audit: type=1400 audit(1757467036.207:1657): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.345711 kernel: audit: type=1400 audit(1757467036.207:1658): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.345743 kernel: audit: type=1400 audit(1757467036.207:1659): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.352634 kernel: audit: type=1400 audit(1757467036.207:1660): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.357034 kernel: audit: type=1400 audit(1757467036.207:1661): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.364756 kernel: audit: type=1400 audit(1757467036.207:1662): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.364783 kernel: audit: type=1400 audit(1757467036.210:1663): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.210000 audit: BPF prog-id=239 op=LOAD Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { bpf } for pid=5767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4887 pid=5767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:16.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363656434326166666636333061623438646238643964396634643838 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { perfmon } for pid=5767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4887 pid=5767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:16.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363656434326166666636333061623438646238643964396634643838 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { bpf } for pid=5767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { bpf } for pid=5767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { bpf } for pid=5767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { perfmon } for pid=5767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { perfmon } for pid=5767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { perfmon } for pid=5767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { perfmon } for pid=5767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { perfmon } for pid=5767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { bpf } for pid=5767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { bpf } for pid=5767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit: BPF prog-id=240 op=LOAD Sep 10 01:17:16.213000 audit[5767]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000301c40 items=0 ppid=4887 pid=5767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:16.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363656434326166666636333061623438646238643964396634643838 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { bpf } for pid=5767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { bpf } for pid=5767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { perfmon } for pid=5767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { perfmon } for pid=5767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { perfmon } for pid=5767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { perfmon } for pid=5767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { perfmon } for pid=5767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { bpf } for pid=5767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { bpf } for pid=5767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit: BPF prog-id=241 op=LOAD Sep 10 01:17:16.213000 audit[5767]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000301c88 items=0 ppid=4887 pid=5767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:16.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363656434326166666636333061623438646238643964396634643838 Sep 10 01:17:16.213000 audit: BPF prog-id=241 op=UNLOAD Sep 10 01:17:16.213000 audit: BPF prog-id=240 op=UNLOAD Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { bpf } for pid=5767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { bpf } for pid=5767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { bpf } for pid=5767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { perfmon } for pid=5767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { perfmon } for pid=5767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { perfmon } for pid=5767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { perfmon } for pid=5767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { perfmon } for pid=5767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { bpf } for pid=5767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit[5767]: AVC avc: denied { bpf } for pid=5767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:16.213000 audit: BPF prog-id=242 op=LOAD Sep 10 01:17:16.213000 audit[5767]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000326098 items=0 ppid=4887 pid=5767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:16.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363656434326166666636333061623438646238643964396634643838 Sep 10 01:17:16.724981 env[1267]: time="2025-09-10T01:17:16.265014974Z" level=info msg="StartContainer for \"3ced42afff630ab48db8d9d9f4d88ba280c34aad198351d57bb98040a33ccd8a\" returns successfully" Sep 10 01:17:16.448168 systemd[1]: run-containerd-runc-k8s.io-1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50-runc.KZzkHq.mount: Deactivated successfully. Sep 10 01:17:18.100061 env[1267]: 2025-09-10 01:17:17.566 [WARNING][5755] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0", GenerateName:"calico-apiserver-64564cc5c9-", Namespace:"calico-apiserver", SelfLink:"", UID:"d71d6edf-1c94-4b55-bcb5-1de17de53829", ResourceVersion:"1033", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64564cc5c9", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167", Pod:"calico-apiserver-64564cc5c9-lj22c", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibc5271a554e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:17:18.100061 env[1267]: 2025-09-10 01:17:17.602 [INFO][5755] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Sep 10 01:17:18.100061 env[1267]: 2025-09-10 01:17:17.602 [INFO][5755] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" iface="eth0" netns="" Sep 10 01:17:18.100061 env[1267]: 2025-09-10 01:17:17.604 [INFO][5755] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Sep 10 01:17:18.100061 env[1267]: 2025-09-10 01:17:17.604 [INFO][5755] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Sep 10 01:17:18.100061 env[1267]: 2025-09-10 01:17:18.052 [INFO][5808] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" HandleID="k8s-pod-network.e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Workload="localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0" Sep 10 01:17:18.100061 env[1267]: 2025-09-10 01:17:18.064 [INFO][5808] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:17:18.100061 env[1267]: 2025-09-10 01:17:18.064 [INFO][5808] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:17:18.100061 env[1267]: 2025-09-10 01:17:18.088 [WARNING][5808] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" HandleID="k8s-pod-network.e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Workload="localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0" Sep 10 01:17:18.100061 env[1267]: 2025-09-10 01:17:18.088 [INFO][5808] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" HandleID="k8s-pod-network.e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Workload="localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0" Sep 10 01:17:18.100061 env[1267]: 2025-09-10 01:17:18.089 [INFO][5808] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:17:18.100061 env[1267]: 2025-09-10 01:17:18.096 [INFO][5755] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Sep 10 01:17:18.199687 env[1267]: time="2025-09-10T01:17:18.102997360Z" level=info msg="TearDown network for sandbox \"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\" successfully" Sep 10 01:17:18.199687 env[1267]: time="2025-09-10T01:17:18.103020886Z" level=info msg="StopPodSandbox for \"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\" returns successfully" Sep 10 01:17:18.925000 audit[5778]: AVC avc: denied { watch } for pid=5778 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_12_05.3702759193/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c721,c741 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c721,c741 tclass=file permissive=0 Sep 10 01:17:18.925000 audit[5778]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000f100e0 a2=fc6 a3=0 items=0 ppid=4887 pid=5778 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c721,c741 key=(null) Sep 10 01:17:18.925000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 01:17:19.097519 sshd[5645]: pam_unix(sshd:session): session closed for user core Sep 10 01:17:19.145000 audit[5645]: USER_END pid=5645 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:19.146000 audit[5645]: CRED_DISP pid=5645 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:19.170929 systemd[1]: sshd@13-139.178.70.105:22-147.75.109.163:34216.service: Deactivated successfully. Sep 10 01:17:19.172000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.105:22-147.75.109.163:34216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:17:19.176370 systemd[1]: session-16.scope: Deactivated successfully. Sep 10 01:17:19.178797 systemd-logind[1239]: Session 16 logged out. Waiting for processes to exit. Sep 10 01:17:19.186473 systemd-logind[1239]: Removed session 16. Sep 10 01:17:19.474417 kubelet[2111]: E0910 01:17:19.474299 2111 kubelet.go:2460] "Skipping pod synchronization" err="PLEG is not healthy: pleg was last seen active 5m8.505563908s ago; threshold is 3m0s" Sep 10 01:17:19.549883 env[1267]: time="2025-09-10T01:17:19.549112314Z" level=info msg="RemovePodSandbox for \"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\"" Sep 10 01:17:19.549883 env[1267]: time="2025-09-10T01:17:19.549157193Z" level=info msg="Forcibly stopping sandbox \"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\"" Sep 10 01:17:19.555200 env[1267]: time="2025-09-10T01:17:19.554838506Z" level=info msg="StopContainer for \"1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50\" with timeout 2 (s)" Sep 10 01:17:19.559804 env[1267]: time="2025-09-10T01:17:19.559040573Z" level=info msg="Stop container \"1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50\" with signal terminated" Sep 10 01:17:19.561964 kubelet[2111]: E0910 01:17:19.560925 2111 configmap.go:193] Couldn't get configMap calico-system/tigera-ca-bundle: failed to sync configmap cache: timed out waiting for the condition Sep 10 01:17:19.561964 kubelet[2111]: E0910 01:17:19.561154 2111 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/0c5f9fb5-5a2f-422d-8b62-99df7edca538-tigera-ca-bundle podName:0c5f9fb5-5a2f-422d-8b62-99df7edca538 nodeName:}" failed. No retries permitted until 2025-09-10 01:17:20.061079234 +0000 UTC m=+375.706660658 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "tigera-ca-bundle" (UniqueName: "kubernetes.io/configmap/0c5f9fb5-5a2f-422d-8b62-99df7edca538-tigera-ca-bundle") pod "calico-typha-6c8dc6d4c9-rjd64" (UID: "0c5f9fb5-5a2f-422d-8b62-99df7edca538") : failed to sync configmap cache: timed out waiting for the condition Sep 10 01:17:19.603269 systemd[1]: cri-containerd-1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50.scope: Deactivated successfully. Sep 10 01:17:19.603423 systemd[1]: cri-containerd-1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50.scope: Consumed 5.785s CPU time. Sep 10 01:17:19.641760 env[1267]: time="2025-09-10T01:17:19.641360143Z" level=error msg="ExecSync for \"1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50\" failed" error="failed to exec in container: failed to start exec \"1929eb9a0f19641866b82b49106616a95b5ebdab7f68f4b02f69b558b69ab8d7\": OCI runtime exec failed: exec failed: cannot exec in a stopped container: unknown" Sep 10 01:17:19.654347 env[1267]: time="2025-09-10T01:17:19.650339765Z" level=info msg="shim disconnected" id=1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50 Sep 10 01:17:19.654347 env[1267]: time="2025-09-10T01:17:19.650367515Z" level=warning msg="cleaning up after shim disconnected" id=1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50 namespace=k8s.io Sep 10 01:17:19.654347 env[1267]: time="2025-09-10T01:17:19.650373798Z" level=info msg="cleaning up dead shim" Sep 10 01:17:19.651989 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50-rootfs.mount: Deactivated successfully. Sep 10 01:17:19.657557 env[1267]: time="2025-09-10T01:17:19.657406532Z" level=warning msg="cleanup warnings time=\"2025-09-10T01:17:19Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5879 runtime=io.containerd.runc.v2\n" Sep 10 01:17:19.665348 env[1267]: time="2025-09-10T01:17:19.664741059Z" level=info msg="StopContainer for \"1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50\" returns successfully" Sep 10 01:17:19.716063 kubelet[2111]: E0910 01:17:19.716018 2111 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = Unknown desc = failed to exec in container: failed to start exec \"1929eb9a0f19641866b82b49106616a95b5ebdab7f68f4b02f69b558b69ab8d7\": OCI runtime exec failed: exec failed: cannot exec in a stopped container: unknown" containerID="1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50" cmd=["/bin/calico-node","-bird-ready","-felix-ready"] Sep 10 01:17:19.735338 kubelet[2111]: I0910 01:17:19.734802 2111 setters.go:618] "Node became not ready" node="localhost" condition={"type":"Ready","status":"False","lastHeartbeatTime":"2025-09-10T01:17:19Z","lastTransitionTime":"2025-09-10T01:17:19Z","reason":"KubeletNotReady","message":"PLEG is not healthy: pleg was last seen active 5m9.105973058s ago; threshold is 3m0s"} Sep 10 01:17:19.740395 env[1267]: time="2025-09-10T01:17:19.740162046Z" level=error msg="ExecSync for \"1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50\" failed" error="failed to exec in container: container is in CONTAINER_EXITED state" Sep 10 01:17:19.748786 kubelet[2111]: E0910 01:17:19.748734 2111 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = Unknown desc = failed to exec in container: container is in CONTAINER_EXITED state" containerID="1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50" cmd=["/bin/calico-node","-bird-ready","-felix-ready"] Sep 10 01:17:19.752800 env[1267]: time="2025-09-10T01:17:19.751599880Z" level=error msg="ExecSync for \"1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50\" failed" error="failed to exec in container: container is in CONTAINER_EXITED state" Sep 10 01:17:19.752800 env[1267]: time="2025-09-10T01:17:19.751957709Z" level=info msg="CreateContainer within sandbox \"0dc67000b96b0d120770e248353574abf3e7b83182d6ab49857cb237f494a092\" for container &ContainerMetadata{Name:calico-node,Attempt:1,}" Sep 10 01:17:19.752928 kubelet[2111]: E0910 01:17:19.752816 2111 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = Unknown desc = failed to exec in container: container is in CONTAINER_EXITED state" containerID="1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50" cmd=["/bin/calico-node","-bird-ready","-felix-ready"] Sep 10 01:17:19.803586 env[1267]: time="2025-09-10T01:17:19.803476156Z" level=info msg="CreateContainer within sandbox \"0dc67000b96b0d120770e248353574abf3e7b83182d6ab49857cb237f494a092\" for &ContainerMetadata{Name:calico-node,Attempt:1,} returns container id \"bdc74eb6de15db90080f8aab34b9ddf91965ad4dc37fd2c8d39550734c0c1af7\"" Sep 10 01:17:19.803852 env[1267]: time="2025-09-10T01:17:19.803829435Z" level=info msg="StartContainer for \"bdc74eb6de15db90080f8aab34b9ddf91965ad4dc37fd2c8d39550734c0c1af7\"" Sep 10 01:17:19.823732 systemd[1]: Started cri-containerd-bdc74eb6de15db90080f8aab34b9ddf91965ad4dc37fd2c8d39550734c0c1af7.scope. Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { perfmon } for pid=5930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f26def842f8 items=0 ppid=2573 pid=5930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:19.862000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264633734656236646531356462393030383066386161623334623964 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { bpf } for pid=5930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { bpf } for pid=5930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { bpf } for pid=5930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { perfmon } for pid=5930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { perfmon } for pid=5930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { perfmon } for pid=5930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { perfmon } for pid=5930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { perfmon } for pid=5930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { bpf } for pid=5930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { bpf } for pid=5930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit: BPF prog-id=243 op=LOAD Sep 10 01:17:19.862000 audit[5930]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000024988 items=0 ppid=2573 pid=5930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:19.862000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264633734656236646531356462393030383066386161623334623964 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { bpf } for pid=5930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { bpf } for pid=5930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { perfmon } for pid=5930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { perfmon } for pid=5930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { perfmon } for pid=5930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { perfmon } for pid=5930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { perfmon } for pid=5930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { bpf } for pid=5930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { bpf } for pid=5930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit: BPF prog-id=244 op=LOAD Sep 10 01:17:19.862000 audit[5930]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0000249d8 items=0 ppid=2573 pid=5930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:19.862000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264633734656236646531356462393030383066386161623334623964 Sep 10 01:17:19.862000 audit: BPF prog-id=244 op=UNLOAD Sep 10 01:17:19.862000 audit: BPF prog-id=243 op=UNLOAD Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { bpf } for pid=5930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { bpf } for pid=5930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { bpf } for pid=5930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { perfmon } for pid=5930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { perfmon } for pid=5930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { perfmon } for pid=5930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { perfmon } for pid=5930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { perfmon } for pid=5930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { bpf } for pid=5930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit[5930]: AVC avc: denied { bpf } for pid=5930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:19.862000 audit: BPF prog-id=245 op=LOAD Sep 10 01:17:19.862000 audit[5930]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000024a68 items=0 ppid=2573 pid=5930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:19.862000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264633734656236646531356462393030383066386161623334623964 Sep 10 01:17:19.879716 env[1267]: time="2025-09-10T01:17:19.879684160Z" level=info msg="StartContainer for \"bdc74eb6de15db90080f8aab34b9ddf91965ad4dc37fd2c8d39550734c0c1af7\" returns successfully" Sep 10 01:17:20.275077 kubelet[2111]: E0910 01:17:20.275042 2111 kubelet.go:2460] "Skipping pod synchronization" err="PLEG is not healthy: pleg was last seen active 5m9.646200573s ago; threshold is 3m0s" Sep 10 01:17:20.359098 env[1267]: 2025-09-10 01:17:20.060 [WARNING][5893] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0", GenerateName:"calico-apiserver-64564cc5c9-", Namespace:"calico-apiserver", SelfLink:"", UID:"d71d6edf-1c94-4b55-bcb5-1de17de53829", ResourceVersion:"1033", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64564cc5c9", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2e2ca7b9bd10eb4e8949c978a806a6bd1b86f68ae31377ee20cdba922affd167", Pod:"calico-apiserver-64564cc5c9-lj22c", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibc5271a554e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:17:20.359098 env[1267]: 2025-09-10 01:17:20.061 [INFO][5893] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Sep 10 01:17:20.359098 env[1267]: 2025-09-10 01:17:20.061 [INFO][5893] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" iface="eth0" netns="" Sep 10 01:17:20.359098 env[1267]: 2025-09-10 01:17:20.061 [INFO][5893] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Sep 10 01:17:20.359098 env[1267]: 2025-09-10 01:17:20.061 [INFO][5893] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Sep 10 01:17:20.359098 env[1267]: 2025-09-10 01:17:20.340 [INFO][5962] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" HandleID="k8s-pod-network.e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Workload="localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0" Sep 10 01:17:20.359098 env[1267]: 2025-09-10 01:17:20.343 [INFO][5962] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:17:20.359098 env[1267]: 2025-09-10 01:17:20.343 [INFO][5962] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:17:20.359098 env[1267]: 2025-09-10 01:17:20.354 [WARNING][5962] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" HandleID="k8s-pod-network.e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Workload="localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0" Sep 10 01:17:20.359098 env[1267]: 2025-09-10 01:17:20.354 [INFO][5962] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" HandleID="k8s-pod-network.e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Workload="localhost-k8s-calico--apiserver--64564cc5c9--lj22c-eth0" Sep 10 01:17:20.359098 env[1267]: 2025-09-10 01:17:20.356 [INFO][5962] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:17:20.359098 env[1267]: 2025-09-10 01:17:20.357 [INFO][5893] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146" Sep 10 01:17:20.359701 env[1267]: time="2025-09-10T01:17:20.359672944Z" level=info msg="TearDown network for sandbox \"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\" successfully" Sep 10 01:17:20.363700 env[1267]: time="2025-09-10T01:17:20.363682663Z" level=info msg="RemovePodSandbox \"e552ef32f07361a4c23805c02473742dcc186e62c1fa3fc7418e01b7d1c1a146\" returns successfully" Sep 10 01:17:20.364194 env[1267]: time="2025-09-10T01:17:20.364178731Z" level=info msg="StopPodSandbox for \"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\"" Sep 10 01:17:20.451483 env[1267]: 2025-09-10 01:17:20.423 [WARNING][5994] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--54d579b49d--ndnrv-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"a03727ef-5eb3-4502-ae0d-e1b45ce2893c", ResourceVersion:"1016", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93", Pod:"goldmane-54d579b49d-ndnrv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali79df89b929f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:17:20.451483 env[1267]: 2025-09-10 01:17:20.423 [INFO][5994] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Sep 10 01:17:20.451483 env[1267]: 2025-09-10 01:17:20.423 [INFO][5994] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" iface="eth0" netns="" Sep 10 01:17:20.451483 env[1267]: 2025-09-10 01:17:20.423 [INFO][5994] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Sep 10 01:17:20.451483 env[1267]: 2025-09-10 01:17:20.423 [INFO][5994] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Sep 10 01:17:20.451483 env[1267]: 2025-09-10 01:17:20.443 [INFO][6001] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" HandleID="k8s-pod-network.4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Workload="localhost-k8s-goldmane--54d579b49d--ndnrv-eth0" Sep 10 01:17:20.451483 env[1267]: 2025-09-10 01:17:20.443 [INFO][6001] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:17:20.451483 env[1267]: 2025-09-10 01:17:20.443 [INFO][6001] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:17:20.451483 env[1267]: 2025-09-10 01:17:20.447 [WARNING][6001] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" HandleID="k8s-pod-network.4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Workload="localhost-k8s-goldmane--54d579b49d--ndnrv-eth0" Sep 10 01:17:20.451483 env[1267]: 2025-09-10 01:17:20.447 [INFO][6001] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" HandleID="k8s-pod-network.4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Workload="localhost-k8s-goldmane--54d579b49d--ndnrv-eth0" Sep 10 01:17:20.451483 env[1267]: 2025-09-10 01:17:20.448 [INFO][6001] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:17:20.451483 env[1267]: 2025-09-10 01:17:20.449 [INFO][5994] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Sep 10 01:17:20.453327 env[1267]: time="2025-09-10T01:17:20.451915103Z" level=info msg="TearDown network for sandbox \"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\" successfully" Sep 10 01:17:20.453327 env[1267]: time="2025-09-10T01:17:20.451942583Z" level=info msg="StopPodSandbox for \"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\" returns successfully" Sep 10 01:17:20.453327 env[1267]: time="2025-09-10T01:17:20.452407842Z" level=info msg="RemovePodSandbox for \"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\"" Sep 10 01:17:20.453327 env[1267]: time="2025-09-10T01:17:20.452436371Z" level=info msg="Forcibly stopping sandbox \"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\"" Sep 10 01:17:20.502151 env[1267]: 2025-09-10 01:17:20.475 [WARNING][6015] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--54d579b49d--ndnrv-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"a03727ef-5eb3-4502-ae0d-e1b45ce2893c", ResourceVersion:"1016", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"baf49fbc55e7b504d4bcb9ba3a368326e95dd7ff3f4d76fa1b32f8dc50924d93", Pod:"goldmane-54d579b49d-ndnrv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali79df89b929f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:17:20.502151 env[1267]: 2025-09-10 01:17:20.476 [INFO][6015] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Sep 10 01:17:20.502151 env[1267]: 2025-09-10 01:17:20.476 [INFO][6015] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" iface="eth0" netns="" Sep 10 01:17:20.502151 env[1267]: 2025-09-10 01:17:20.476 [INFO][6015] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Sep 10 01:17:20.502151 env[1267]: 2025-09-10 01:17:20.476 [INFO][6015] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Sep 10 01:17:20.502151 env[1267]: 2025-09-10 01:17:20.494 [INFO][6022] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" HandleID="k8s-pod-network.4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Workload="localhost-k8s-goldmane--54d579b49d--ndnrv-eth0" Sep 10 01:17:20.502151 env[1267]: 2025-09-10 01:17:20.494 [INFO][6022] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:17:20.502151 env[1267]: 2025-09-10 01:17:20.494 [INFO][6022] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:17:20.502151 env[1267]: 2025-09-10 01:17:20.498 [WARNING][6022] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" HandleID="k8s-pod-network.4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Workload="localhost-k8s-goldmane--54d579b49d--ndnrv-eth0" Sep 10 01:17:20.502151 env[1267]: 2025-09-10 01:17:20.498 [INFO][6022] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" HandleID="k8s-pod-network.4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Workload="localhost-k8s-goldmane--54d579b49d--ndnrv-eth0" Sep 10 01:17:20.502151 env[1267]: 2025-09-10 01:17:20.499 [INFO][6022] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:17:20.502151 env[1267]: 2025-09-10 01:17:20.500 [INFO][6015] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5" Sep 10 01:17:20.503153 env[1267]: time="2025-09-10T01:17:20.502629664Z" level=info msg="TearDown network for sandbox \"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\" successfully" Sep 10 01:17:20.505833 env[1267]: time="2025-09-10T01:17:20.505816343Z" level=info msg="RemovePodSandbox \"4eff691f8f3848c166769284fc90090616fd568817257290bc9e6affca7f40e5\" returns successfully" Sep 10 01:17:20.506235 env[1267]: time="2025-09-10T01:17:20.506219283Z" level=info msg="StopPodSandbox for \"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\"" Sep 10 01:17:20.551376 env[1267]: 2025-09-10 01:17:20.526 [WARNING][6037] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" WorkloadEndpoint="localhost-k8s-whisker--5d75945987--7blxq-eth0" Sep 10 01:17:20.551376 env[1267]: 2025-09-10 01:17:20.527 [INFO][6037] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Sep 10 01:17:20.551376 env[1267]: 2025-09-10 01:17:20.527 [INFO][6037] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" iface="eth0" netns="" Sep 10 01:17:20.551376 env[1267]: 2025-09-10 01:17:20.527 [INFO][6037] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Sep 10 01:17:20.551376 env[1267]: 2025-09-10 01:17:20.527 [INFO][6037] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Sep 10 01:17:20.551376 env[1267]: 2025-09-10 01:17:20.542 [INFO][6044] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" HandleID="k8s-pod-network.228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Workload="localhost-k8s-whisker--5d75945987--7blxq-eth0" Sep 10 01:17:20.551376 env[1267]: 2025-09-10 01:17:20.542 [INFO][6044] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:17:20.551376 env[1267]: 2025-09-10 01:17:20.542 [INFO][6044] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:17:20.551376 env[1267]: 2025-09-10 01:17:20.547 [WARNING][6044] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" HandleID="k8s-pod-network.228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Workload="localhost-k8s-whisker--5d75945987--7blxq-eth0" Sep 10 01:17:20.551376 env[1267]: 2025-09-10 01:17:20.547 [INFO][6044] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" HandleID="k8s-pod-network.228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Workload="localhost-k8s-whisker--5d75945987--7blxq-eth0" Sep 10 01:17:20.551376 env[1267]: 2025-09-10 01:17:20.547 [INFO][6044] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:17:20.551376 env[1267]: 2025-09-10 01:17:20.549 [INFO][6037] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Sep 10 01:17:20.552271 env[1267]: time="2025-09-10T01:17:20.551676673Z" level=info msg="TearDown network for sandbox \"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\" successfully" Sep 10 01:17:20.552271 env[1267]: time="2025-09-10T01:17:20.551700177Z" level=info msg="StopPodSandbox for \"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\" returns successfully" Sep 10 01:17:20.552271 env[1267]: time="2025-09-10T01:17:20.552019080Z" level=info msg="RemovePodSandbox for \"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\"" Sep 10 01:17:20.552379 env[1267]: time="2025-09-10T01:17:20.552036723Z" level=info msg="Forcibly stopping sandbox \"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\"" Sep 10 01:17:20.605181 env[1267]: 2025-09-10 01:17:20.579 [WARNING][6058] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" WorkloadEndpoint="localhost-k8s-whisker--5d75945987--7blxq-eth0" Sep 10 01:17:20.605181 env[1267]: 2025-09-10 01:17:20.579 [INFO][6058] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Sep 10 01:17:20.605181 env[1267]: 2025-09-10 01:17:20.579 [INFO][6058] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" iface="eth0" netns="" Sep 10 01:17:20.605181 env[1267]: 2025-09-10 01:17:20.579 [INFO][6058] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Sep 10 01:17:20.605181 env[1267]: 2025-09-10 01:17:20.579 [INFO][6058] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Sep 10 01:17:20.605181 env[1267]: 2025-09-10 01:17:20.596 [INFO][6065] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" HandleID="k8s-pod-network.228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Workload="localhost-k8s-whisker--5d75945987--7blxq-eth0" Sep 10 01:17:20.605181 env[1267]: 2025-09-10 01:17:20.596 [INFO][6065] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:17:20.605181 env[1267]: 2025-09-10 01:17:20.596 [INFO][6065] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:17:20.605181 env[1267]: 2025-09-10 01:17:20.601 [WARNING][6065] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" HandleID="k8s-pod-network.228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Workload="localhost-k8s-whisker--5d75945987--7blxq-eth0" Sep 10 01:17:20.605181 env[1267]: 2025-09-10 01:17:20.601 [INFO][6065] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" HandleID="k8s-pod-network.228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Workload="localhost-k8s-whisker--5d75945987--7blxq-eth0" Sep 10 01:17:20.605181 env[1267]: 2025-09-10 01:17:20.602 [INFO][6065] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:17:20.605181 env[1267]: 2025-09-10 01:17:20.603 [INFO][6058] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb" Sep 10 01:17:20.605986 env[1267]: time="2025-09-10T01:17:20.605500907Z" level=info msg="TearDown network for sandbox \"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\" successfully" Sep 10 01:17:20.608350 env[1267]: time="2025-09-10T01:17:20.608325965Z" level=info msg="RemovePodSandbox \"228943f76ef37258a41ca9e7cddb501b9e522b45fc02d990d9bbb4079abee4bb\" returns successfully" Sep 10 01:17:20.608851 env[1267]: time="2025-09-10T01:17:20.608831499Z" level=info msg="StopPodSandbox for \"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\"" Sep 10 01:17:20.674723 env[1267]: 2025-09-10 01:17:20.642 [WARNING][6080] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--sntmg-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"9bad00c4-3e3e-4827-9970-a77e3259bf14", ResourceVersion:"1395", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887", Pod:"coredns-674b8bbfcf-sntmg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali9b0342317b9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:17:20.674723 env[1267]: 2025-09-10 01:17:20.642 [INFO][6080] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Sep 10 01:17:20.674723 env[1267]: 2025-09-10 01:17:20.642 [INFO][6080] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" iface="eth0" netns="" Sep 10 01:17:20.674723 env[1267]: 2025-09-10 01:17:20.642 [INFO][6080] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Sep 10 01:17:20.674723 env[1267]: 2025-09-10 01:17:20.642 [INFO][6080] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Sep 10 01:17:20.674723 env[1267]: 2025-09-10 01:17:20.661 [INFO][6087] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" HandleID="k8s-pod-network.aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Workload="localhost-k8s-coredns--674b8bbfcf--sntmg-eth0" Sep 10 01:17:20.674723 env[1267]: 2025-09-10 01:17:20.661 [INFO][6087] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:17:20.674723 env[1267]: 2025-09-10 01:17:20.661 [INFO][6087] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:17:20.674723 env[1267]: 2025-09-10 01:17:20.671 [WARNING][6087] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" HandleID="k8s-pod-network.aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Workload="localhost-k8s-coredns--674b8bbfcf--sntmg-eth0" Sep 10 01:17:20.674723 env[1267]: 2025-09-10 01:17:20.671 [INFO][6087] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" HandleID="k8s-pod-network.aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Workload="localhost-k8s-coredns--674b8bbfcf--sntmg-eth0" Sep 10 01:17:20.674723 env[1267]: 2025-09-10 01:17:20.672 [INFO][6087] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:17:20.674723 env[1267]: 2025-09-10 01:17:20.673 [INFO][6080] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Sep 10 01:17:20.675539 env[1267]: time="2025-09-10T01:17:20.675137721Z" level=info msg="TearDown network for sandbox \"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\" successfully" Sep 10 01:17:20.675539 env[1267]: time="2025-09-10T01:17:20.675165861Z" level=info msg="StopPodSandbox for \"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\" returns successfully" Sep 10 01:17:20.675539 env[1267]: time="2025-09-10T01:17:20.675495879Z" level=info msg="RemovePodSandbox for \"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\"" Sep 10 01:17:20.675539 env[1267]: time="2025-09-10T01:17:20.675514656Z" level=info msg="Forcibly stopping sandbox \"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\"" Sep 10 01:17:20.713824 env[1267]: time="2025-09-10T01:17:20.713769696Z" level=error msg="ExecSync for \"1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50\" failed" error="failed to exec in container: container is in CONTAINER_EXITED state" Sep 10 01:17:20.714222 kubelet[2111]: E0910 01:17:20.714190 2111 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = Unknown desc = failed to exec in container: container is in CONTAINER_EXITED state" containerID="1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50" cmd=["/bin/calico-node","-bird-ready","-felix-ready"] Sep 10 01:17:20.714667 env[1267]: time="2025-09-10T01:17:20.714626366Z" level=error msg="ExecSync for \"1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50\" failed" error="failed to exec in container: container is in CONTAINER_EXITED state" Sep 10 01:17:20.714816 kubelet[2111]: E0910 01:17:20.714784 2111 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = Unknown desc = failed to exec in container: container is in CONTAINER_EXITED state" containerID="1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50" cmd=["/bin/calico-node","-bird-ready","-felix-ready"] Sep 10 01:17:20.715077 env[1267]: time="2025-09-10T01:17:20.714948458Z" level=error msg="ExecSync for \"1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50\" failed" error="failed to exec in container: container is in CONTAINER_EXITED state" Sep 10 01:17:20.715230 kubelet[2111]: E0910 01:17:20.715202 2111 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = Unknown desc = failed to exec in container: container is in CONTAINER_EXITED state" containerID="1a51fb53a3253b6b98ed955d782794c4967dece37083397a8edf84e0a479fa50" cmd=["/bin/calico-node","-bird-ready","-felix-ready"] Sep 10 01:17:20.749815 env[1267]: time="2025-09-10T01:17:20.749674181Z" level=info msg="StopPodSandbox for \"36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81\"" Sep 10 01:17:20.753564 env[1267]: time="2025-09-10T01:17:20.753539406Z" level=info msg="Container to stop \"13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Sep 10 01:17:20.756218 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81-shm.mount: Deactivated successfully. Sep 10 01:17:20.758192 env[1267]: 2025-09-10 01:17:20.704 [WARNING][6102] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--sntmg-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"9bad00c4-3e3e-4827-9970-a77e3259bf14", ResourceVersion:"1395", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"76ea4c8b10caa840ad7007b264e5eb348f972b2d3d894529b987e5ceb6413887", Pod:"coredns-674b8bbfcf-sntmg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali9b0342317b9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:17:20.758192 env[1267]: 2025-09-10 01:17:20.705 [INFO][6102] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Sep 10 01:17:20.758192 env[1267]: 2025-09-10 01:17:20.705 [INFO][6102] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" iface="eth0" netns="" Sep 10 01:17:20.758192 env[1267]: 2025-09-10 01:17:20.705 [INFO][6102] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Sep 10 01:17:20.758192 env[1267]: 2025-09-10 01:17:20.705 [INFO][6102] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Sep 10 01:17:20.758192 env[1267]: 2025-09-10 01:17:20.732 [INFO][6109] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" HandleID="k8s-pod-network.aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Workload="localhost-k8s-coredns--674b8bbfcf--sntmg-eth0" Sep 10 01:17:20.758192 env[1267]: 2025-09-10 01:17:20.732 [INFO][6109] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:17:20.758192 env[1267]: 2025-09-10 01:17:20.733 [INFO][6109] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:17:20.758192 env[1267]: 2025-09-10 01:17:20.739 [WARNING][6109] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" HandleID="k8s-pod-network.aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Workload="localhost-k8s-coredns--674b8bbfcf--sntmg-eth0" Sep 10 01:17:20.758192 env[1267]: 2025-09-10 01:17:20.739 [INFO][6109] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" HandleID="k8s-pod-network.aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Workload="localhost-k8s-coredns--674b8bbfcf--sntmg-eth0" Sep 10 01:17:20.758192 env[1267]: 2025-09-10 01:17:20.741 [INFO][6109] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:17:20.758192 env[1267]: 2025-09-10 01:17:20.744 [INFO][6102] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c" Sep 10 01:17:20.758192 env[1267]: time="2025-09-10T01:17:20.757158235Z" level=info msg="TearDown network for sandbox \"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\" successfully" Sep 10 01:17:20.768713 env[1267]: time="2025-09-10T01:17:20.768674635Z" level=info msg="RemovePodSandbox \"aacce716f9c93a192dc1f65f9db411504037b2385a8b0fa2719b1285b81e638c\" returns successfully" Sep 10 01:17:20.770063 env[1267]: time="2025-09-10T01:17:20.769341101Z" level=info msg="StopPodSandbox for \"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\"" Sep 10 01:17:20.775000 audit: BPF prog-id=204 op=UNLOAD Sep 10 01:17:20.776993 systemd[1]: cri-containerd-36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81.scope: Deactivated successfully. Sep 10 01:17:20.779405 env[1267]: time="2025-09-10T01:17:20.779371931Z" level=info msg="CreateContainer within sandbox \"08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Sep 10 01:17:20.779000 audit: BPF prog-id=207 op=UNLOAD Sep 10 01:17:20.786906 env[1267]: time="2025-09-10T01:17:20.786875998Z" level=info msg="CreateContainer within sandbox \"358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Sep 10 01:17:20.798864 kubelet[2111]: I0910 01:17:20.798811 2111 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-5749f8c7fd-7bgh4" podStartSLOduration=316.822415443 podStartE2EDuration="5m36.798785505s" podCreationTimestamp="2025-09-10 01:11:44 +0000 UTC" firstStartedPulling="2025-09-10 01:11:45.531738614 +0000 UTC m=+41.177320031" lastFinishedPulling="2025-09-10 01:12:05.508108672 +0000 UTC m=+61.153690093" observedRunningTime="2025-09-10 01:17:20.798340279 +0000 UTC m=+376.443921702" watchObservedRunningTime="2025-09-10 01:17:20.798785505 +0000 UTC m=+376.444366933" Sep 10 01:17:20.804398 systemd[1]: cri-containerd-a09e2537a6ea6327e82e5a98c70d51b41c480d2a0558367534805ad67a17b479.scope: Deactivated successfully. Sep 10 01:17:20.803000 audit: BPF prog-id=192 op=UNLOAD Sep 10 01:17:20.807000 audit: BPF prog-id=195 op=UNLOAD Sep 10 01:17:20.817677 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2611232556.mount: Deactivated successfully. Sep 10 01:17:20.832754 env[1267]: time="2025-09-10T01:17:20.832667802Z" level=info msg="CreateContainer within sandbox \"08ab255484a8f5d4629cb158f78e9060bf1244ba909fdd3a8c53354f1281456a\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"008ad26c868cbb7d049eb10fe20e274faf190f535818086544b8f05ecda7f418\"" Sep 10 01:17:20.834312 env[1267]: time="2025-09-10T01:17:20.833284699Z" level=info msg="StartContainer for \"008ad26c868cbb7d049eb10fe20e274faf190f535818086544b8f05ecda7f418\"" Sep 10 01:17:20.835043 env[1267]: time="2025-09-10T01:17:20.834809918Z" level=info msg="CreateContainer within sandbox \"358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"e7ec1ae0201761d297287763ca27482f9772d894e69098211e14d72f22216679\"" Sep 10 01:17:20.837613 env[1267]: time="2025-09-10T01:17:20.837494986Z" level=info msg="StartContainer for \"e7ec1ae0201761d297287763ca27482f9772d894e69098211e14d72f22216679\"" Sep 10 01:17:20.838036 env[1267]: time="2025-09-10T01:17:20.838007300Z" level=info msg="shim disconnected" id=36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81 Sep 10 01:17:20.838099 env[1267]: time="2025-09-10T01:17:20.838032668Z" level=warning msg="cleaning up after shim disconnected" id=36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81 namespace=k8s.io Sep 10 01:17:20.838099 env[1267]: time="2025-09-10T01:17:20.838050399Z" level=info msg="cleaning up dead shim" Sep 10 01:17:20.860891 env[1267]: time="2025-09-10T01:17:20.860779569Z" level=warning msg="cleanup warnings time=\"2025-09-10T01:17:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6155 runtime=io.containerd.runc.v2\n" Sep 10 01:17:20.864073 env[1267]: time="2025-09-10T01:17:20.864034628Z" level=info msg="shim disconnected" id=a09e2537a6ea6327e82e5a98c70d51b41c480d2a0558367534805ad67a17b479 Sep 10 01:17:20.866620 env[1267]: time="2025-09-10T01:17:20.864168241Z" level=warning msg="cleaning up after shim disconnected" id=a09e2537a6ea6327e82e5a98c70d51b41c480d2a0558367534805ad67a17b479 namespace=k8s.io Sep 10 01:17:20.866620 env[1267]: time="2025-09-10T01:17:20.864184446Z" level=info msg="cleaning up dead shim" Sep 10 01:17:20.878377 systemd[1]: Started cri-containerd-008ad26c868cbb7d049eb10fe20e274faf190f535818086544b8f05ecda7f418.scope. Sep 10 01:17:20.891385 systemd[1]: Started cri-containerd-e7ec1ae0201761d297287763ca27482f9772d894e69098211e14d72f22216679.scope. Sep 10 01:17:20.912132 env[1267]: time="2025-09-10T01:17:20.912095605Z" level=warning msg="cleanup warnings time=\"2025-09-10T01:17:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6194 runtime=io.containerd.runc.v2\n" Sep 10 01:17:20.919232 env[1267]: time="2025-09-10T01:17:20.919183256Z" level=info msg="StopContainer for \"a09e2537a6ea6327e82e5a98c70d51b41c480d2a0558367534805ad67a17b479\" returns successfully" Sep 10 01:17:20.924060 env[1267]: time="2025-09-10T01:17:20.924027382Z" level=info msg="CreateContainer within sandbox \"cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4\" for container &ContainerMetadata{Name:coredns,Attempt:1,}" Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { perfmon } for pid=6167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7ff11b862bd8 items=0 ppid=3967 pid=6167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:20.944000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030386164323663383638636262376430343965623130666532306532 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { bpf } for pid=6167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { bpf } for pid=6167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { bpf } for pid=6167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { perfmon } for pid=6167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { perfmon } for pid=6167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { perfmon } for pid=6167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { perfmon } for pid=6167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { perfmon } for pid=6167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { bpf } for pid=6167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { bpf } for pid=6167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit: BPF prog-id=246 op=LOAD Sep 10 01:17:20.944000 audit[6167]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000a0948 items=0 ppid=3967 pid=6167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:20.944000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030386164323663383638636262376430343965623130666532306532 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { bpf } for pid=6167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { bpf } for pid=6167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { perfmon } for pid=6167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { perfmon } for pid=6167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { perfmon } for pid=6167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { perfmon } for pid=6167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { perfmon } for pid=6167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { bpf } for pid=6167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { bpf } for pid=6167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit: BPF prog-id=247 op=LOAD Sep 10 01:17:20.944000 audit[6167]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000a0998 items=0 ppid=3967 pid=6167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:20.944000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030386164323663383638636262376430343965623130666532306532 Sep 10 01:17:20.944000 audit: BPF prog-id=247 op=UNLOAD Sep 10 01:17:20.944000 audit: BPF prog-id=246 op=UNLOAD Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { bpf } for pid=6167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { bpf } for pid=6167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { bpf } for pid=6167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { perfmon } for pid=6167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { perfmon } for pid=6167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { perfmon } for pid=6167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { perfmon } for pid=6167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { perfmon } for pid=6167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { bpf } for pid=6167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit[6167]: AVC avc: denied { bpf } for pid=6167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.944000 audit: BPF prog-id=248 op=LOAD Sep 10 01:17:20.944000 audit[6167]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000a0a28 items=0 ppid=3967 pid=6167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:20.944000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030386164323663383638636262376430343965623130666532306532 Sep 10 01:17:20.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.945000 audit: BPF prog-id=249 op=LOAD Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { bpf } for pid=6193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4553 pid=6193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:20.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537656331616530323031373631643239373238373736336361323734 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { perfmon } for pid=6193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4553 pid=6193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:20.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537656331616530323031373631643239373238373736336361323734 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { bpf } for pid=6193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { bpf } for pid=6193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { bpf } for pid=6193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { perfmon } for pid=6193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { perfmon } for pid=6193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { perfmon } for pid=6193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { perfmon } for pid=6193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { perfmon } for pid=6193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { bpf } for pid=6193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { bpf } for pid=6193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit: BPF prog-id=250 op=LOAD Sep 10 01:17:20.946000 audit[6193]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001ddfc0 items=0 ppid=4553 pid=6193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:20.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537656331616530323031373631643239373238373736336361323734 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { bpf } for pid=6193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { bpf } for pid=6193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { perfmon } for pid=6193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { perfmon } for pid=6193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { perfmon } for pid=6193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { perfmon } for pid=6193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { perfmon } for pid=6193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { bpf } for pid=6193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { bpf } for pid=6193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit: BPF prog-id=251 op=LOAD Sep 10 01:17:20.946000 audit[6193]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003aa008 items=0 ppid=4553 pid=6193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:20.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537656331616530323031373631643239373238373736336361323734 Sep 10 01:17:20.946000 audit: BPF prog-id=251 op=UNLOAD Sep 10 01:17:20.946000 audit: BPF prog-id=250 op=UNLOAD Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { bpf } for pid=6193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { bpf } for pid=6193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { bpf } for pid=6193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { perfmon } for pid=6193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { perfmon } for pid=6193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { perfmon } for pid=6193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { perfmon } for pid=6193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { perfmon } for pid=6193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { bpf } for pid=6193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit[6193]: AVC avc: denied { bpf } for pid=6193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:20.946000 audit: BPF prog-id=252 op=LOAD Sep 10 01:17:20.946000 audit[6193]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003aa418 items=0 ppid=4553 pid=6193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:20.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537656331616530323031373631643239373238373736336361323734 Sep 10 01:17:20.999406 env[1267]: time="2025-09-10T01:17:20.999363850Z" level=info msg="StartContainer for \"008ad26c868cbb7d049eb10fe20e274faf190f535818086544b8f05ecda7f418\" returns successfully" Sep 10 01:17:21.001288 env[1267]: 2025-09-10 01:17:20.912 [WARNING][6145] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0", GenerateName:"calico-kube-controllers-67bb596d88-", Namespace:"calico-system", SelfLink:"", UID:"0d86b565-8184-416c-b12b-737eb73d2b94", ResourceVersion:"1877", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"67bb596d88", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f", Pod:"calico-kube-controllers-67bb596d88-mtqfq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie9652f7e06c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:17:21.001288 env[1267]: 2025-09-10 01:17:20.912 [INFO][6145] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Sep 10 01:17:21.001288 env[1267]: 2025-09-10 01:17:20.912 [INFO][6145] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" iface="eth0" netns="" Sep 10 01:17:21.001288 env[1267]: 2025-09-10 01:17:20.912 [INFO][6145] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Sep 10 01:17:21.001288 env[1267]: 2025-09-10 01:17:20.912 [INFO][6145] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Sep 10 01:17:21.001288 env[1267]: 2025-09-10 01:17:20.976 [INFO][6233] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" HandleID="k8s-pod-network.b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Workload="localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0" Sep 10 01:17:21.001288 env[1267]: 2025-09-10 01:17:20.976 [INFO][6233] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:17:21.001288 env[1267]: 2025-09-10 01:17:20.976 [INFO][6233] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:17:21.001288 env[1267]: 2025-09-10 01:17:20.993 [WARNING][6233] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" HandleID="k8s-pod-network.b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Workload="localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0" Sep 10 01:17:21.001288 env[1267]: 2025-09-10 01:17:20.993 [INFO][6233] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" HandleID="k8s-pod-network.b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Workload="localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0" Sep 10 01:17:21.001288 env[1267]: 2025-09-10 01:17:20.995 [INFO][6233] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:17:21.001288 env[1267]: 2025-09-10 01:17:20.999 [INFO][6145] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Sep 10 01:17:21.001288 env[1267]: time="2025-09-10T01:17:21.001142253Z" level=info msg="TearDown network for sandbox \"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\" successfully" Sep 10 01:17:21.001288 env[1267]: time="2025-09-10T01:17:21.001193615Z" level=info msg="StopPodSandbox for \"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\" returns successfully" Sep 10 01:17:21.003113 env[1267]: time="2025-09-10T01:17:21.003082579Z" level=info msg="RemovePodSandbox for \"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\"" Sep 10 01:17:21.003219 env[1267]: time="2025-09-10T01:17:21.003113879Z" level=info msg="Forcibly stopping sandbox \"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\"" Sep 10 01:17:21.007022 env[1267]: time="2025-09-10T01:17:21.004701641Z" level=info msg="StartContainer for \"e7ec1ae0201761d297287763ca27482f9772d894e69098211e14d72f22216679\" returns successfully" Sep 10 01:17:21.015407 env[1267]: time="2025-09-10T01:17:21.015361237Z" level=info msg="CreateContainer within sandbox \"cedb352323a15e068e46ae9bcb2f6c7783b0cdb016551e97cd7894fad94807e4\" for &ContainerMetadata{Name:coredns,Attempt:1,} returns container id \"05ce9c81636eb8d579823714d161f9ff086f868d436faf4d134d38702d37f8e6\"" Sep 10 01:17:21.017070 env[1267]: time="2025-09-10T01:17:21.017034316Z" level=info msg="StartContainer for \"05ce9c81636eb8d579823714d161f9ff086f868d436faf4d134d38702d37f8e6\"" Sep 10 01:17:21.037106 systemd[1]: Started cri-containerd-05ce9c81636eb8d579823714d161f9ff086f868d436faf4d134d38702d37f8e6.scope. Sep 10 01:17:21.041021 systemd-networkd[1063]: cali53dd666f0e1: Link DOWN Sep 10 01:17:21.041026 systemd-networkd[1063]: cali53dd666f0e1: Lost carrier Sep 10 01:17:21.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.066000 audit: BPF prog-id=253 op=LOAD Sep 10 01:17:21.067000 audit[6289]: AVC avc: denied { bpf } for pid=6289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.067000 audit[6289]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4149 pid=6289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:21.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035636539633831363336656238643537393832333731346431363166 Sep 10 01:17:21.067000 audit[6289]: AVC avc: denied { perfmon } for pid=6289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.067000 audit[6289]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4149 pid=6289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:21.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035636539633831363336656238643537393832333731346431363166 Sep 10 01:17:21.067000 audit[6289]: AVC avc: denied { bpf } for pid=6289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.067000 audit[6289]: AVC avc: denied { bpf } for pid=6289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.067000 audit[6289]: AVC avc: denied { bpf } for pid=6289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.067000 audit[6289]: AVC avc: denied { perfmon } for pid=6289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.067000 audit[6289]: AVC avc: denied { perfmon } for pid=6289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.067000 audit[6289]: AVC avc: denied { perfmon } for pid=6289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.067000 audit[6289]: AVC avc: denied { perfmon } for pid=6289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.067000 audit[6289]: AVC avc: denied { perfmon } for pid=6289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.067000 audit[6289]: AVC avc: denied { bpf } for pid=6289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.067000 audit[6289]: AVC avc: denied { bpf } for pid=6289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.067000 audit: BPF prog-id=254 op=LOAD Sep 10 01:17:21.067000 audit[6289]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001e0df0 items=0 ppid=4149 pid=6289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:21.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035636539633831363336656238643537393832333731346431363166 Sep 10 01:17:21.067000 audit[6289]: AVC avc: denied { bpf } for pid=6289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.067000 audit[6289]: AVC avc: denied { bpf } for pid=6289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.067000 audit[6289]: AVC avc: denied { perfmon } for pid=6289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.067000 audit[6289]: AVC avc: denied { perfmon } for pid=6289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.067000 audit[6289]: AVC avc: denied { perfmon } for pid=6289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.067000 audit[6289]: AVC avc: denied { perfmon } for pid=6289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.067000 audit[6289]: AVC avc: denied { perfmon } for pid=6289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.067000 audit[6289]: AVC avc: denied { bpf } for pid=6289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.067000 audit[6289]: AVC avc: denied { bpf } for pid=6289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.067000 audit: BPF prog-id=255 op=LOAD Sep 10 01:17:21.067000 audit[6289]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001e0e38 items=0 ppid=4149 pid=6289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:21.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035636539633831363336656238643537393832333731346431363166 Sep 10 01:17:21.068000 audit: BPF prog-id=255 op=UNLOAD Sep 10 01:17:21.068000 audit: BPF prog-id=254 op=UNLOAD Sep 10 01:17:21.068000 audit[6289]: AVC avc: denied { bpf } for pid=6289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.068000 audit[6289]: AVC avc: denied { bpf } for pid=6289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.068000 audit[6289]: AVC avc: denied { bpf } for pid=6289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.068000 audit[6289]: AVC avc: denied { perfmon } for pid=6289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.068000 audit[6289]: AVC avc: denied { perfmon } for pid=6289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.068000 audit[6289]: AVC avc: denied { perfmon } for pid=6289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.068000 audit[6289]: AVC avc: denied { perfmon } for pid=6289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.068000 audit[6289]: AVC avc: denied { perfmon } for pid=6289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.068000 audit[6289]: AVC avc: denied { bpf } for pid=6289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.068000 audit[6289]: AVC avc: denied { bpf } for pid=6289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:21.068000 audit: BPF prog-id=256 op=LOAD Sep 10 01:17:21.068000 audit[6289]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001e1248 items=0 ppid=4149 pid=6289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:21.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035636539633831363336656238643537393832333731346431363166 Sep 10 01:17:21.114820 env[1267]: time="2025-09-10T01:17:21.114752180Z" level=info msg="StartContainer for \"05ce9c81636eb8d579823714d161f9ff086f868d436faf4d134d38702d37f8e6\" returns successfully" Sep 10 01:17:21.192822 env[1267]: 2025-09-10 01:17:21.011 [INFO][6234] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" Sep 10 01:17:21.192822 env[1267]: 2025-09-10 01:17:21.012 [INFO][6234] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" iface="eth0" netns="/var/run/netns/cni-352b23d6-f8f3-34b8-73c2-6793d8699315" Sep 10 01:17:21.192822 env[1267]: 2025-09-10 01:17:21.013 [INFO][6234] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" iface="eth0" netns="/var/run/netns/cni-352b23d6-f8f3-34b8-73c2-6793d8699315" Sep 10 01:17:21.192822 env[1267]: 2025-09-10 01:17:21.028 [INFO][6234] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" after=16.31089ms iface="eth0" netns="/var/run/netns/cni-352b23d6-f8f3-34b8-73c2-6793d8699315" Sep 10 01:17:21.192822 env[1267]: 2025-09-10 01:17:21.028 [INFO][6234] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" Sep 10 01:17:21.192822 env[1267]: 2025-09-10 01:17:21.028 [INFO][6234] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" Sep 10 01:17:21.192822 env[1267]: 2025-09-10 01:17:21.097 [INFO][6294] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" HandleID="k8s-pod-network.36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" Workload="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" Sep 10 01:17:21.192822 env[1267]: 2025-09-10 01:17:21.097 [INFO][6294] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:17:21.192822 env[1267]: 2025-09-10 01:17:21.097 [INFO][6294] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:17:21.192822 env[1267]: 2025-09-10 01:17:21.188 [INFO][6294] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" HandleID="k8s-pod-network.36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" Workload="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" Sep 10 01:17:21.192822 env[1267]: 2025-09-10 01:17:21.188 [INFO][6294] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" HandleID="k8s-pod-network.36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" Workload="localhost-k8s-calico--apiserver--64564cc5c9--z6hvk-eth0" Sep 10 01:17:21.192822 env[1267]: 2025-09-10 01:17:21.190 [INFO][6294] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:17:21.192822 env[1267]: 2025-09-10 01:17:21.191 [INFO][6234] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81" Sep 10 01:17:21.193984 env[1267]: time="2025-09-10T01:17:21.193949490Z" level=info msg="TearDown network for sandbox \"36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81\" successfully" Sep 10 01:17:21.194068 env[1267]: time="2025-09-10T01:17:21.193978950Z" level=info msg="StopPodSandbox for \"36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81\" returns successfully" Sep 10 01:17:21.211941 env[1267]: 2025-09-10 01:17:21.097 [WARNING][6276] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0", GenerateName:"calico-kube-controllers-67bb596d88-", Namespace:"calico-system", SelfLink:"", UID:"0d86b565-8184-416c-b12b-737eb73d2b94", ResourceVersion:"1877", Generation:0, CreationTimestamp:time.Date(2025, time.September, 10, 1, 11, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"67bb596d88", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"358a65195867b25446cf31532e1c56dd9dad044cb57426aa8f2efd5a2bd7f41f", Pod:"calico-kube-controllers-67bb596d88-mtqfq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie9652f7e06c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 10 01:17:21.211941 env[1267]: 2025-09-10 01:17:21.101 [INFO][6276] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Sep 10 01:17:21.211941 env[1267]: 2025-09-10 01:17:21.101 [INFO][6276] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" iface="eth0" netns="" Sep 10 01:17:21.211941 env[1267]: 2025-09-10 01:17:21.101 [INFO][6276] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Sep 10 01:17:21.211941 env[1267]: 2025-09-10 01:17:21.101 [INFO][6276] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Sep 10 01:17:21.211941 env[1267]: 2025-09-10 01:17:21.134 [INFO][6333] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" HandleID="k8s-pod-network.b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Workload="localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0" Sep 10 01:17:21.211941 env[1267]: 2025-09-10 01:17:21.134 [INFO][6333] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 10 01:17:21.211941 env[1267]: 2025-09-10 01:17:21.190 [INFO][6333] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 10 01:17:21.211941 env[1267]: 2025-09-10 01:17:21.199 [WARNING][6333] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" HandleID="k8s-pod-network.b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Workload="localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0" Sep 10 01:17:21.211941 env[1267]: 2025-09-10 01:17:21.199 [INFO][6333] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" HandleID="k8s-pod-network.b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Workload="localhost-k8s-calico--kube--controllers--67bb596d88--mtqfq-eth0" Sep 10 01:17:21.211941 env[1267]: 2025-09-10 01:17:21.202 [INFO][6333] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 10 01:17:21.211941 env[1267]: 2025-09-10 01:17:21.208 [INFO][6276] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d" Sep 10 01:17:21.211941 env[1267]: time="2025-09-10T01:17:21.211609913Z" level=info msg="TearDown network for sandbox \"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\" successfully" Sep 10 01:17:21.223723 env[1267]: time="2025-09-10T01:17:21.223261591Z" level=info msg="RemovePodSandbox \"b2bee881079e38377418c8fa1b97e1699423dc4c6dd95237d5e07c57d88b932d\" returns successfully" Sep 10 01:17:21.317147 kernel: kauditd_printk_skb: 257 callbacks suppressed Sep 10 01:17:21.326973 kernel: audit: type=1400 audit(1757467041.312:1728): avc: denied { write } for pid=6383 comm="tee" name="fd" dev="proc" ino=62828 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 01:17:21.329433 kernel: audit: type=1400 audit(1757467041.312:1729): avc: denied { write } for pid=6390 comm="tee" name="fd" dev="proc" ino=62206 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 01:17:21.329476 kernel: audit: type=1300 audit(1757467041.312:1729): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffef058c7e6 a2=241 a3=1b6 items=1 ppid=6354 pid=6390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:21.329511 kernel: audit: type=1307 audit(1757467041.312:1729): cwd="/etc/service/enabled/bird/log" Sep 10 01:17:21.334962 kernel: audit: type=1302 audit(1757467041.312:1729): item=0 name="/dev/fd/63" inode=62198 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:17:21.312000 audit[6383]: AVC avc: denied { write } for pid=6383 comm="tee" name="fd" dev="proc" ino=62828 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 01:17:21.340776 kernel: audit: type=1327 audit(1757467041.312:1729): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 01:17:21.342835 kernel: audit: type=1400 audit(1757467041.314:1730): avc: denied { write } for pid=6392 comm="tee" name="fd" dev="proc" ino=62210 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 01:17:21.344092 kernel: audit: type=1300 audit(1757467041.314:1730): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffee19317e5 a2=241 a3=1b6 items=1 ppid=6356 pid=6392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:21.312000 audit[6390]: AVC avc: denied { write } for pid=6390 comm="tee" name="fd" dev="proc" ino=62206 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 01:17:21.312000 audit[6390]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffef058c7e6 a2=241 a3=1b6 items=1 ppid=6354 pid=6390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:21.312000 audit: CWD cwd="/etc/service/enabled/bird/log" Sep 10 01:17:21.312000 audit: PATH item=0 name="/dev/fd/63" inode=62198 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:17:21.349343 kernel: audit: type=1307 audit(1757467041.314:1730): cwd="/etc/service/enabled/felix/log" Sep 10 01:17:21.349374 kernel: audit: type=1302 audit(1757467041.314:1730): item=0 name="/dev/fd/63" inode=62199 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:17:21.312000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 01:17:21.314000 audit[6392]: AVC avc: denied { write } for pid=6392 comm="tee" name="fd" dev="proc" ino=62210 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 01:17:21.314000 audit[6392]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffee19317e5 a2=241 a3=1b6 items=1 ppid=6356 pid=6392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:21.314000 audit: CWD cwd="/etc/service/enabled/felix/log" Sep 10 01:17:21.314000 audit: PATH item=0 name="/dev/fd/63" inode=62199 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:17:21.314000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 01:17:21.318000 audit[6400]: AVC avc: denied { write } for pid=6400 comm="tee" name="fd" dev="proc" ino=62217 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 01:17:21.318000 audit[6400]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe9b1287e5 a2=241 a3=1b6 items=1 ppid=6360 pid=6400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:21.318000 audit: CWD cwd="/etc/service/enabled/bird6/log" Sep 10 01:17:21.318000 audit: PATH item=0 name="/dev/fd/63" inode=62214 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:17:21.318000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 01:17:21.323000 audit[6403]: AVC avc: denied { write } for pid=6403 comm="tee" name="fd" dev="proc" ino=62224 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 01:17:21.323000 audit[6403]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc440987e5 a2=241 a3=1b6 items=1 ppid=6365 pid=6403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:21.323000 audit: CWD cwd="/etc/service/enabled/confd/log" Sep 10 01:17:21.323000 audit: PATH item=0 name="/dev/fd/63" inode=62221 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:17:21.323000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 01:17:21.312000 audit[6383]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff1244a7d5 a2=241 a3=1b6 items=1 ppid=6359 pid=6383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:21.312000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Sep 10 01:17:21.312000 audit: PATH item=0 name="/dev/fd/63" inode=62810 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:17:21.312000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 01:17:21.329000 audit[6394]: AVC avc: denied { write } for pid=6394 comm="tee" name="fd" dev="proc" ino=62230 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 01:17:21.329000 audit[6394]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe256e67d6 a2=241 a3=1b6 items=1 ppid=6355 pid=6394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:21.329000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Sep 10 01:17:21.329000 audit: PATH item=0 name="/dev/fd/63" inode=62825 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:17:21.329000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 01:17:21.336000 audit[6407]: AVC avc: denied { write } for pid=6407 comm="tee" name="fd" dev="proc" ino=62234 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 10 01:17:21.336000 audit[6407]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd0725e7e7 a2=241 a3=1b6 items=1 ppid=6367 pid=6407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:21.336000 audit: CWD cwd="/etc/service/enabled/cni/log" Sep 10 01:17:21.336000 audit: PATH item=0 name="/dev/fd/63" inode=62834 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 10 01:17:21.336000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 10 01:17:21.369259 kubelet[2111]: I0910 01:17:21.369220 2111 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/373a83e4-9cfa-498c-a1d2-cf000ad59143-calico-apiserver-certs\") pod \"373a83e4-9cfa-498c-a1d2-cf000ad59143\" (UID: \"373a83e4-9cfa-498c-a1d2-cf000ad59143\") " Sep 10 01:17:21.369419 kubelet[2111]: I0910 01:17:21.369328 2111 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-fvdn9\" (UniqueName: \"kubernetes.io/projected/373a83e4-9cfa-498c-a1d2-cf000ad59143-kube-api-access-fvdn9\") pod \"373a83e4-9cfa-498c-a1d2-cf000ad59143\" (UID: \"373a83e4-9cfa-498c-a1d2-cf000ad59143\") " Sep 10 01:17:21.494176 kubelet[2111]: I0910 01:17:21.492886 2111 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/373a83e4-9cfa-498c-a1d2-cf000ad59143-kube-api-access-fvdn9" (OuterVolumeSpecName: "kube-api-access-fvdn9") pod "373a83e4-9cfa-498c-a1d2-cf000ad59143" (UID: "373a83e4-9cfa-498c-a1d2-cf000ad59143"). InnerVolumeSpecName "kube-api-access-fvdn9". PluginName "kubernetes.io/projected", VolumeGIDValue "" Sep 10 01:17:21.494434 kubelet[2111]: I0910 01:17:21.489258 2111 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/373a83e4-9cfa-498c-a1d2-cf000ad59143-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "373a83e4-9cfa-498c-a1d2-cf000ad59143" (UID: "373a83e4-9cfa-498c-a1d2-cf000ad59143"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGIDValue "" Sep 10 01:17:21.573889 kubelet[2111]: I0910 01:17:21.573854 2111 reconciler_common.go:299] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/373a83e4-9cfa-498c-a1d2-cf000ad59143-calico-apiserver-certs\") on node \"localhost\" DevicePath \"\"" Sep 10 01:17:21.574069 kubelet[2111]: I0910 01:17:21.574058 2111 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-fvdn9\" (UniqueName: \"kubernetes.io/projected/373a83e4-9cfa-498c-a1d2-cf000ad59143-kube-api-access-fvdn9\") on node \"localhost\" DevicePath \"\"" Sep 10 01:17:21.623818 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2882880379.mount: Deactivated successfully. Sep 10 01:17:21.624933 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-36823fabc927bdbf2fe320c4fbbc369dc9d2baf88b67a378eb98f93912ef4b81-rootfs.mount: Deactivated successfully. Sep 10 01:17:21.624998 systemd[1]: run-netns-cni\x2d352b23d6\x2df8f3\x2d34b8\x2d73c2\x2d6793d8699315.mount: Deactivated successfully. Sep 10 01:17:21.625037 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a09e2537a6ea6327e82e5a98c70d51b41c480d2a0558367534805ad67a17b479-rootfs.mount: Deactivated successfully. Sep 10 01:17:21.625085 systemd[1]: var-lib-kubelet-pods-373a83e4\x2d9cfa\x2d498c\x2da1d2\x2dcf000ad59143-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dfvdn9.mount: Deactivated successfully. Sep 10 01:17:21.625147 systemd[1]: var-lib-kubelet-pods-373a83e4\x2d9cfa\x2d498c\x2da1d2\x2dcf000ad59143-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Sep 10 01:17:21.639000 audit[6312]: AVC avc: denied { getattr } for pid=6312 comm="coredns" path="cgroup:[4026532780]" dev="nsfs" ino=4026532780 scontext=system_u:system_r:svirt_lxc_net_t:s0:c354,c963 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 10 01:17:21.639000 audit[6312]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a3c0 a2=c00012be48 a3=0 items=0 ppid=4149 pid=6312 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c354,c963 key=(null) Sep 10 01:17:21.639000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 10 01:17:22.195884 systemd[1]: Removed slice kubepods-besteffort-pod373a83e4_9cfa_498c_a1d2_cf000ad59143.slice. Sep 10 01:17:22.460561 kubelet[2111]: I0910 01:17:22.457287 2111 scope.go:117] "RemoveContainer" containerID="4b6a8ac61a37fdce0164765b3f8d9a612db95e14499ac39d297966a7200d852d" Sep 10 01:17:22.470465 kubelet[2111]: I0910 01:17:22.470445 2111 scope.go:117] "RemoveContainer" containerID="ee62937825b138c75dba09dbdba44ff73839eb841733417bb809dc9eb10b5f99" Sep 10 01:17:22.470825 kubelet[2111]: I0910 01:17:22.470815 2111 scope.go:117] "RemoveContainer" containerID="13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c" Sep 10 01:17:22.472404 systemd[1]: cri-containerd-c726506fa55ffe5436651c5b4abc4970268b5d7360d8ea53a06bedc80bd6e0d8.scope: Deactivated successfully. Sep 10 01:17:22.472000 audit: BPF prog-id=129 op=UNLOAD Sep 10 01:17:22.475000 audit: BPF prog-id=132 op=UNLOAD Sep 10 01:17:22.478007 kubelet[2111]: I0910 01:17:22.472902 2111 scope.go:117] "RemoveContainer" containerID="147e2987ff6977a909404d4b2e8020af625dafcd587f7106b97c168f0e8ebe30" Sep 10 01:17:22.630557 env[1267]: time="2025-09-10T01:17:22.626890521Z" level=info msg="shim disconnected" id=c726506fa55ffe5436651c5b4abc4970268b5d7360d8ea53a06bedc80bd6e0d8 Sep 10 01:17:22.630557 env[1267]: time="2025-09-10T01:17:22.626919927Z" level=warning msg="cleaning up after shim disconnected" id=c726506fa55ffe5436651c5b4abc4970268b5d7360d8ea53a06bedc80bd6e0d8 namespace=k8s.io Sep 10 01:17:22.630557 env[1267]: time="2025-09-10T01:17:22.626928201Z" level=info msg="cleaning up dead shim" Sep 10 01:17:22.630321 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c726506fa55ffe5436651c5b4abc4970268b5d7360d8ea53a06bedc80bd6e0d8-rootfs.mount: Deactivated successfully. Sep 10 01:17:22.700718 env[1267]: time="2025-09-10T01:17:22.634999516Z" level=warning msg="cleanup warnings time=\"2025-09-10T01:17:22Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6495 runtime=io.containerd.runc.v2\n" Sep 10 01:17:22.726944 env[1267]: time="2025-09-10T01:17:22.726875187Z" level=info msg="StopContainer for \"c726506fa55ffe5436651c5b4abc4970268b5d7360d8ea53a06bedc80bd6e0d8\" returns successfully" Sep 10 01:17:22.763189 env[1267]: time="2025-09-10T01:17:22.763160539Z" level=info msg="RemoveContainer for \"13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c\"" Sep 10 01:17:22.781816 env[1267]: time="2025-09-10T01:17:22.781742692Z" level=info msg="RemoveContainer for \"13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c\" returns successfully" Sep 10 01:17:22.846265 kubelet[2111]: I0910 01:17:22.846249 2111 scope.go:117] "RemoveContainer" containerID="13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c" Sep 10 01:17:22.852428 env[1267]: time="2025-09-10T01:17:22.847002980Z" level=error msg="ContainerStatus for \"13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c\": not found" Sep 10 01:17:22.870775 kubelet[2111]: I0910 01:17:22.868620 2111 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Sep 10 01:17:22.870945 kubelet[2111]: I0910 01:17:22.870937 2111 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Sep 10 01:17:22.922567 kubelet[2111]: E0910 01:17:22.922548 2111 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c\": not found" containerID="13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c" Sep 10 01:17:22.931475 kubelet[2111]: I0910 01:17:22.931444 2111 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c"} err="failed to get container status \"13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c\": rpc error: code = NotFound desc = an error occurred when try to find container \"13f84fc77701361aee609a5b51a4940c1fbdfc225bf0f7fe69d90b346a218b4c\": not found" Sep 10 01:17:22.938527 env[1267]: time="2025-09-10T01:17:22.938492941Z" level=info msg="CreateContainer within sandbox \"9a9e1f6e1801ca0bb93836c607ee1f5cc423dcf06a7a84c8ac3a657b9fb512f1\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Sep 10 01:17:22.938741 env[1267]: time="2025-09-10T01:17:22.938722342Z" level=info msg="CreateContainer within sandbox \"76c942ff090c238c530c335b3d2b8fc6735d0650dc98765d975198a4dcb66ecf\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Sep 10 01:17:22.970390 env[1267]: time="2025-09-10T01:17:22.970301532Z" level=info msg="CreateContainer within sandbox \"d350382b7a78a49f2469b885ec43776d768cf830983b7092b475d9723387f8df\" for container &ContainerMetadata{Name:calico-typha,Attempt:1,}" Sep 10 01:17:22.981962 env[1267]: time="2025-09-10T01:17:22.981904069Z" level=info msg="CreateContainer within sandbox \"f029ed326167d1ac97c2fb51a6efb0755ba2bf00282d33fefeea30d71593b289\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Sep 10 01:17:23.062261 env[1267]: time="2025-09-10T01:17:23.062220114Z" level=info msg="CreateContainer within sandbox \"76c942ff090c238c530c335b3d2b8fc6735d0650dc98765d975198a4dcb66ecf\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"966cd97ea0433da3ce74cc938ace4c42751036e4966052bd498299ce9dc7bb76\"" Sep 10 01:17:23.068666 env[1267]: time="2025-09-10T01:17:23.068623054Z" level=info msg="CreateContainer within sandbox \"d350382b7a78a49f2469b885ec43776d768cf830983b7092b475d9723387f8df\" for &ContainerMetadata{Name:calico-typha,Attempt:1,} returns container id \"1587cd6d00a42d97cd486d2469115fd9f8fe19fc2a61f28d0f6137f68857e2d9\"" Sep 10 01:17:23.072470 env[1267]: time="2025-09-10T01:17:23.072433726Z" level=info msg="CreateContainer within sandbox \"f029ed326167d1ac97c2fb51a6efb0755ba2bf00282d33fefeea30d71593b289\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"11798113ee7d3c80f7677ea3d95e617ed57402a93f670aca2fdec8523aba67f0\"" Sep 10 01:17:23.073186 env[1267]: time="2025-09-10T01:17:23.073167406Z" level=info msg="CreateContainer within sandbox \"9a9e1f6e1801ca0bb93836c607ee1f5cc423dcf06a7a84c8ac3a657b9fb512f1\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"a89f4b0c6f6e4b1e78218bf381a00a7262e5f71e14d423cdd8090ba49bad8b41\"" Sep 10 01:17:23.079789 kubelet[2111]: I0910 01:17:23.052656 2111 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-65f67d55cc-tsnl2" podStartSLOduration=321.043794134 podStartE2EDuration="5m21.043794134s" podCreationTimestamp="2025-09-10 01:12:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-10 01:17:22.997873822 +0000 UTC m=+378.643455250" watchObservedRunningTime="2025-09-10 01:17:23.043794134 +0000 UTC m=+378.689375557" Sep 10 01:17:23.096783 env[1267]: time="2025-09-10T01:17:23.096645789Z" level=info msg="StartContainer for \"11798113ee7d3c80f7677ea3d95e617ed57402a93f670aca2fdec8523aba67f0\"" Sep 10 01:17:23.096783 env[1267]: time="2025-09-10T01:17:23.096703001Z" level=info msg="StartContainer for \"1587cd6d00a42d97cd486d2469115fd9f8fe19fc2a61f28d0f6137f68857e2d9\"" Sep 10 01:17:23.097240 env[1267]: time="2025-09-10T01:17:23.096662439Z" level=info msg="StartContainer for \"a89f4b0c6f6e4b1e78218bf381a00a7262e5f71e14d423cdd8090ba49bad8b41\"" Sep 10 01:17:23.097240 env[1267]: time="2025-09-10T01:17:23.097137590Z" level=info msg="StartContainer for \"966cd97ea0433da3ce74cc938ace4c42751036e4966052bd498299ce9dc7bb76\"" Sep 10 01:17:23.175517 kubelet[2111]: I0910 01:17:23.175464 2111 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-67bb596d88-mtqfq" podStartSLOduration=329.81153399 podStartE2EDuration="6m3.17298497s" podCreationTimestamp="2025-09-10 01:11:20 +0000 UTC" firstStartedPulling="2025-09-10 01:11:54.139817865 +0000 UTC m=+49.785399281" lastFinishedPulling="2025-09-10 01:12:27.501268841 +0000 UTC m=+83.146850261" observedRunningTime="2025-09-10 01:17:23.130930449 +0000 UTC m=+378.776511878" watchObservedRunningTime="2025-09-10 01:17:23.17298497 +0000 UTC m=+378.818566393" Sep 10 01:17:23.192610 systemd[1]: Started cri-containerd-1587cd6d00a42d97cd486d2469115fd9f8fe19fc2a61f28d0f6137f68857e2d9.scope. Sep 10 01:17:23.193571 systemd[1]: Started cri-containerd-a89f4b0c6f6e4b1e78218bf381a00a7262e5f71e14d423cdd8090ba49bad8b41.scope. Sep 10 01:17:23.198700 systemd[1]: Started cri-containerd-11798113ee7d3c80f7677ea3d95e617ed57402a93f670aca2fdec8523aba67f0.scope. Sep 10 01:17:23.208062 systemd[1]: Started cri-containerd-966cd97ea0433da3ce74cc938ace4c42751036e4966052bd498299ce9dc7bb76.scope. Sep 10 01:17:23.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.249000 audit: BPF prog-id=257 op=LOAD Sep 10 01:17:23.249000 audit[6589]: AVC avc: denied { bpf } for pid=6589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.249000 audit[6589]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1848 pid=6589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:23.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936366364393765613034333364613363653734636339333861636534 Sep 10 01:17:23.249000 audit[6589]: AVC avc: denied { perfmon } for pid=6589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.249000 audit[6589]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1848 pid=6589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:23.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936366364393765613034333364613363653734636339333861636534 Sep 10 01:17:23.249000 audit[6589]: AVC avc: denied { bpf } for pid=6589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.249000 audit[6589]: AVC avc: denied { bpf } for pid=6589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.249000 audit[6589]: AVC avc: denied { bpf } for pid=6589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.249000 audit[6589]: AVC avc: denied { perfmon } for pid=6589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.249000 audit[6589]: AVC avc: denied { perfmon } for pid=6589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.249000 audit[6589]: AVC avc: denied { perfmon } for pid=6589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.249000 audit[6589]: AVC avc: denied { perfmon } for pid=6589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.249000 audit[6589]: AVC avc: denied { perfmon } for pid=6589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.249000 audit[6589]: AVC avc: denied { bpf } for pid=6589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.249000 audit[6589]: AVC avc: denied { bpf } for pid=6589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.249000 audit: BPF prog-id=258 op=LOAD Sep 10 01:17:23.249000 audit[6589]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00034a3e0 items=0 ppid=1848 pid=6589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:23.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936366364393765613034333364613363653734636339333861636534 Sep 10 01:17:23.250000 audit[6589]: AVC avc: denied { bpf } for pid=6589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.250000 audit[6589]: AVC avc: denied { bpf } for pid=6589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.250000 audit[6589]: AVC avc: denied { perfmon } for pid=6589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.250000 audit[6589]: AVC avc: denied { perfmon } for pid=6589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.250000 audit[6589]: AVC avc: denied { perfmon } for pid=6589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.250000 audit[6589]: AVC avc: denied { perfmon } for pid=6589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.250000 audit[6589]: AVC avc: denied { perfmon } for pid=6589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.250000 audit[6589]: AVC avc: denied { bpf } for pid=6589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.250000 audit[6589]: AVC avc: denied { bpf } for pid=6589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.250000 audit: BPF prog-id=259 op=LOAD Sep 10 01:17:23.250000 audit[6589]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00034a428 items=0 ppid=1848 pid=6589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:23.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936366364393765613034333364613363653734636339333861636534 Sep 10 01:17:23.250000 audit: BPF prog-id=259 op=UNLOAD Sep 10 01:17:23.250000 audit: BPF prog-id=258 op=UNLOAD Sep 10 01:17:23.250000 audit[6589]: AVC avc: denied { bpf } for pid=6589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.250000 audit[6589]: AVC avc: denied { bpf } for pid=6589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.250000 audit[6589]: AVC avc: denied { bpf } for pid=6589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.250000 audit[6589]: AVC avc: denied { perfmon } for pid=6589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.250000 audit[6589]: AVC avc: denied { perfmon } for pid=6589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.250000 audit[6589]: AVC avc: denied { perfmon } for pid=6589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.250000 audit[6589]: AVC avc: denied { perfmon } for pid=6589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.250000 audit[6589]: AVC avc: denied { perfmon } for pid=6589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.250000 audit[6589]: AVC avc: denied { bpf } for pid=6589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.250000 audit[6589]: AVC avc: denied { bpf } for pid=6589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.250000 audit: BPF prog-id=260 op=LOAD Sep 10 01:17:23.250000 audit[6589]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00034a838 items=0 ppid=1848 pid=6589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:23.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936366364393765613034333364613363653734636339333861636534 Sep 10 01:17:23.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit: BPF prog-id=261 op=LOAD Sep 10 01:17:23.261000 audit[6578]: AVC avc: denied { bpf } for pid=6578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit[6578]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1798 pid=6578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:23.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138396634623063366636653462316537383231386266333831613030 Sep 10 01:17:23.261000 audit[6578]: AVC avc: denied { perfmon } for pid=6578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit[6578]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1798 pid=6578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:23.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138396634623063366636653462316537383231386266333831613030 Sep 10 01:17:23.261000 audit[6578]: AVC avc: denied { bpf } for pid=6578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit[6578]: AVC avc: denied { bpf } for pid=6578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit[6578]: AVC avc: denied { bpf } for pid=6578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit[6578]: AVC avc: denied { perfmon } for pid=6578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit[6578]: AVC avc: denied { perfmon } for pid=6578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit[6578]: AVC avc: denied { perfmon } for pid=6578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit[6578]: AVC avc: denied { perfmon } for pid=6578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit[6578]: AVC avc: denied { perfmon } for pid=6578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit[6578]: AVC avc: denied { bpf } for pid=6578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit[6578]: AVC avc: denied { bpf } for pid=6578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.261000 audit: BPF prog-id=262 op=LOAD Sep 10 01:17:23.261000 audit[6578]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003ae180 items=0 ppid=1798 pid=6578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:23.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138396634623063366636653462316537383231386266333831613030 Sep 10 01:17:23.262000 audit[6578]: AVC avc: denied { bpf } for pid=6578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.262000 audit[6578]: AVC avc: denied { bpf } for pid=6578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.262000 audit[6578]: AVC avc: denied { perfmon } for pid=6578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.262000 audit[6578]: AVC avc: denied { perfmon } for pid=6578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.262000 audit[6578]: AVC avc: denied { perfmon } for pid=6578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.262000 audit[6578]: AVC avc: denied { perfmon } for pid=6578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.262000 audit[6578]: AVC avc: denied { perfmon } for pid=6578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.262000 audit[6578]: AVC avc: denied { bpf } for pid=6578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.262000 audit[6578]: AVC avc: denied { bpf } for pid=6578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.262000 audit: BPF prog-id=263 op=LOAD Sep 10 01:17:23.262000 audit[6578]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003ae1c8 items=0 ppid=1798 pid=6578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:23.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138396634623063366636653462316537383231386266333831613030 Sep 10 01:17:23.262000 audit: BPF prog-id=263 op=UNLOAD Sep 10 01:17:23.262000 audit: BPF prog-id=262 op=UNLOAD Sep 10 01:17:23.262000 audit[6578]: AVC avc: denied { bpf } for pid=6578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.262000 audit[6578]: AVC avc: denied { bpf } for pid=6578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.262000 audit[6578]: AVC avc: denied { bpf } for pid=6578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.262000 audit[6578]: AVC avc: denied { perfmon } for pid=6578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.262000 audit[6578]: AVC avc: denied { perfmon } for pid=6578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.262000 audit[6578]: AVC avc: denied { perfmon } for pid=6578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.262000 audit[6578]: AVC avc: denied { perfmon } for pid=6578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.262000 audit[6578]: AVC avc: denied { perfmon } for pid=6578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.262000 audit[6578]: AVC avc: denied { bpf } for pid=6578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.262000 audit[6578]: AVC avc: denied { bpf } for pid=6578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.262000 audit: BPF prog-id=264 op=LOAD Sep 10 01:17:23.262000 audit[6578]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ae5d8 items=0 ppid=1798 pid=6578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:23.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138396634623063366636653462316537383231386266333831613030 Sep 10 01:17:23.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.274000 audit: BPF prog-id=265 op=LOAD Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { bpf } for pid=6575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2508 pid=6575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:23.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135383763643664303061343264393763643438366432343639313135 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { perfmon } for pid=6575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2508 pid=6575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:23.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135383763643664303061343264393763643438366432343639313135 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { bpf } for pid=6575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { bpf } for pid=6575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { bpf } for pid=6575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { perfmon } for pid=6575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { perfmon } for pid=6575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { perfmon } for pid=6575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { perfmon } for pid=6575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { perfmon } for pid=6575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { bpf } for pid=6575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { bpf } for pid=6575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit: BPF prog-id=266 op=LOAD Sep 10 01:17:23.275000 audit[6575]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00021ad40 items=0 ppid=2508 pid=6575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:23.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135383763643664303061343264393763643438366432343639313135 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { bpf } for pid=6575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { bpf } for pid=6575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { perfmon } for pid=6575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { perfmon } for pid=6575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { perfmon } for pid=6575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { perfmon } for pid=6575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { perfmon } for pid=6575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { bpf } for pid=6575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { bpf } for pid=6575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit: BPF prog-id=267 op=LOAD Sep 10 01:17:23.275000 audit[6575]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00021ad88 items=0 ppid=2508 pid=6575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:23.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135383763643664303061343264393763643438366432343639313135 Sep 10 01:17:23.275000 audit: BPF prog-id=267 op=UNLOAD Sep 10 01:17:23.275000 audit: BPF prog-id=266 op=UNLOAD Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { bpf } for pid=6575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { bpf } for pid=6575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { bpf } for pid=6575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { perfmon } for pid=6575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { perfmon } for pid=6575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { perfmon } for pid=6575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { perfmon } for pid=6575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { perfmon } for pid=6575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { bpf } for pid=6575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit[6575]: AVC avc: denied { bpf } for pid=6575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.275000 audit: BPF prog-id=268 op=LOAD Sep 10 01:17:23.275000 audit[6575]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00021b198 items=0 ppid=2508 pid=6575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:23.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135383763643664303061343264393763643438366432343639313135 Sep 10 01:17:23.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit: BPF prog-id=269 op=LOAD Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { bpf } for pid=6573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2206 pid=6573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:23.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131373938313133656537643363383066373637376561336439356536 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { perfmon } for pid=6573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2206 pid=6573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:23.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131373938313133656537643363383066373637376561336439356536 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { bpf } for pid=6573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { bpf } for pid=6573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { bpf } for pid=6573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { perfmon } for pid=6573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { perfmon } for pid=6573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { perfmon } for pid=6573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { perfmon } for pid=6573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { perfmon } for pid=6573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { bpf } for pid=6573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { bpf } for pid=6573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit: BPF prog-id=270 op=LOAD Sep 10 01:17:23.286000 audit[6573]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000a95c0 items=0 ppid=2206 pid=6573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:23.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131373938313133656537643363383066373637376561336439356536 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { bpf } for pid=6573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { bpf } for pid=6573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { perfmon } for pid=6573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { perfmon } for pid=6573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { perfmon } for pid=6573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { perfmon } for pid=6573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { perfmon } for pid=6573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { bpf } for pid=6573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { bpf } for pid=6573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit: BPF prog-id=271 op=LOAD Sep 10 01:17:23.286000 audit[6573]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000a9608 items=0 ppid=2206 pid=6573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:23.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131373938313133656537643363383066373637376561336439356536 Sep 10 01:17:23.286000 audit: BPF prog-id=271 op=UNLOAD Sep 10 01:17:23.286000 audit: BPF prog-id=270 op=UNLOAD Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { bpf } for pid=6573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { bpf } for pid=6573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { bpf } for pid=6573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { perfmon } for pid=6573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { perfmon } for pid=6573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { perfmon } for pid=6573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { perfmon } for pid=6573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { perfmon } for pid=6573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { bpf } for pid=6573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit[6573]: AVC avc: denied { bpf } for pid=6573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:23.286000 audit: BPF prog-id=272 op=LOAD Sep 10 01:17:23.286000 audit[6573]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000a9a18 items=0 ppid=2206 pid=6573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:23.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131373938313133656537643363383066373637376561336439356536 Sep 10 01:17:23.450721 env[1267]: time="2025-09-10T01:17:23.307080248Z" level=info msg="StartContainer for \"966cd97ea0433da3ce74cc938ace4c42751036e4966052bd498299ce9dc7bb76\" returns successfully" Sep 10 01:17:23.450721 env[1267]: time="2025-09-10T01:17:23.307459944Z" level=info msg="StartContainer for \"a89f4b0c6f6e4b1e78218bf381a00a7262e5f71e14d423cdd8090ba49bad8b41\" returns successfully" Sep 10 01:17:23.450721 env[1267]: time="2025-09-10T01:17:23.314482403Z" level=info msg="StartContainer for \"11798113ee7d3c80f7677ea3d95e617ed57402a93f670aca2fdec8523aba67f0\" returns successfully" Sep 10 01:17:23.450721 env[1267]: time="2025-09-10T01:17:23.359574220Z" level=info msg="StartContainer for \"1587cd6d00a42d97cd486d2469115fd9f8fe19fc2a61f28d0f6137f68857e2d9\" returns successfully" Sep 10 01:17:23.638207 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1624772522.mount: Deactivated successfully. Sep 10 01:17:23.638512 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2302023560.mount: Deactivated successfully. Sep 10 01:17:24.123943 systemd[1]: Started sshd@14-139.178.70.105:22-147.75.109.163:39218.service. Sep 10 01:17:24.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.105:22-147.75.109.163:39218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:17:24.604000 audit[6686]: USER_ACCT pid=6686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:24.611000 audit[6686]: CRED_ACQ pid=6686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:24.611000 audit[6686]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe82bf75c0 a2=3 a3=0 items=0 ppid=1 pid=6686 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:24.611000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 01:17:24.632225 sshd[6686]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 01:17:24.804842 sshd[6686]: Accepted publickey for core from 147.75.109.163 port 39218 ssh2: RSA SHA256:0IUR5emySKOryc09IkQfiEMy48OZjcmwN/1tG3dFsA8 Sep 10 01:17:24.845292 systemd-logind[1239]: New session 17 of user core. Sep 10 01:17:24.859000 audit[6686]: USER_START pid=6686 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:24.855197 systemd[1]: Started session-17.scope. Sep 10 01:17:24.885000 audit[6693]: CRED_ACQ pid=6693 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:29.172647 kernel: kauditd_printk_skb: 266 callbacks suppressed Sep 10 01:17:29.370618 kernel: audit: type=1400 audit(1757467049.166:1816): avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:29.379282 kernel: audit: type=1300 audit(1757467049.166:1816): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0007da0c0 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:29.381156 kernel: audit: type=1327 audit(1757467049.166:1816): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:29.382856 kernel: audit: type=1400 audit(1757467049.176:1817): avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:29.384082 kernel: audit: type=1300 audit(1757467049.176:1817): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000af2420 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:29.386028 kernel: audit: type=1327 audit(1757467049.176:1817): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:29.166000 audit[6616]: AVC avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:29.166000 audit[6616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0007da0c0 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:29.166000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:29.176000 audit[6616]: AVC avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:29.176000 audit[6616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000af2420 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:29.176000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:47.978000 audit[6616]: AVC avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:48.081860 kernel: audit: type=1400 audit(1757467067.978:1818): avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:48.090213 kernel: audit: type=1300 audit(1757467067.978:1818): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ffdaa0 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:48.090267 kernel: audit: type=1327 audit(1757467067.978:1818): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:48.091133 kernel: audit: type=1400 audit(1757467067.978:1819): avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:48.091159 kernel: audit: type=1300 audit(1757467067.978:1819): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ffdde0 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:48.091176 kernel: audit: type=1327 audit(1757467067.978:1819): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:48.091191 kernel: audit: type=1400 audit(1757467067.978:1820): avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:48.091222 kernel: audit: type=1300 audit(1757467067.978:1820): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0010ae660 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:48.091241 kernel: audit: type=1327 audit(1757467067.978:1820): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:48.091257 kernel: audit: type=1400 audit(1757467067.978:1821): avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:47.978000 audit[6616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ffdaa0 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:47.978000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:47.978000 audit[6616]: AVC avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:47.978000 audit[6616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ffdde0 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:47.978000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:47.978000 audit[6616]: AVC avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:47.978000 audit[6616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0010ae660 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:47.978000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:47.978000 audit[6616]: AVC avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:17:47.978000 audit[6616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ffde00 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:47.978000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:48.380000 audit[6616]: AVC avc: denied { watch } for pid=6616 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=6761 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 10 01:17:48.380000 audit[6616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00116c000 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:48.380000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:48.381000 audit[6616]: AVC avc: denied { watch } for pid=6616 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds" dev="sda9" ino=7302 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 10 01:17:48.381000 audit[6616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0017147d0 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:48.381000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:48.392000 audit[7096]: AVC avc: denied { execute } for pid=7096 comm="kube-controller" name="uds" dev="sda9" ino=7468 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0 Sep 10 01:17:48.392000 audit[7096]: SYSCALL arch=c000003e syscall=59 success=no exit=-13 a0=c00104cdc0 a1=c000b759b0 a2=c0001bb900 a3=0 items=0 ppid=6616 pid=7096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:17:48.392000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:17:49.460874 sshd[6686]: pam_unix(sshd:session): session closed for user core Sep 10 01:17:49.555000 audit[6686]: USER_END pid=6686 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:49.560000 audit[6686]: CRED_DISP pid=6686 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:49.596000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.105:22-147.75.109.163:39218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:17:49.590210 systemd[1]: sshd@14-139.178.70.105:22-147.75.109.163:39218.service: Deactivated successfully. Sep 10 01:17:49.604239 systemd[1]: session-17.scope: Deactivated successfully. Sep 10 01:17:49.604373 systemd[1]: session-17.scope: Consumed 1.555s CPU time. Sep 10 01:17:49.611079 systemd-logind[1239]: Session 17 logged out. Waiting for processes to exit. Sep 10 01:17:49.635588 systemd-logind[1239]: Removed session 17. Sep 10 01:17:49.868000 audit[7120]: NETFILTER_CFG table=filter:138 family=2 entries=15 op=nft_register_rule pid=7120 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:17:49.868000 audit[7120]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fffad7c5160 a2=0 a3=7fffad7c514c items=0 ppid=2249 pid=7120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:49.868000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:17:49.874000 audit[7120]: NETFILTER_CFG table=nat:139 family=2 entries=85 op=nft_register_chain pid=7120 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:17:49.874000 audit[7120]: SYSCALL arch=c000003e syscall=46 success=yes exit=36948 a0=3 a1=7fffad7c5160 a2=0 a3=7fffad7c514c items=0 ppid=2249 pid=7120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:49.874000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:17:49.960000 audit[7125]: NETFILTER_CFG table=filter:140 family=2 entries=8 op=nft_register_rule pid=7125 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:17:49.960000 audit[7125]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff80610300 a2=0 a3=7fff806102ec items=0 ppid=2249 pid=7125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:49.960000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:17:49.965000 audit[7125]: NETFILTER_CFG table=nat:141 family=2 entries=50 op=nft_register_rule pid=7125 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 10 01:17:49.965000 audit[7125]: SYSCALL arch=c000003e syscall=46 success=yes exit=17292 a0=3 a1=7fff80610300 a2=0 a3=7fff806102ec items=0 ppid=2249 pid=7125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:49.965000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 10 01:17:52.035000 audit[7181]: AVC avc: denied { bpf } for pid=7181 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.035000 audit[7181]: AVC avc: denied { bpf } for pid=7181 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.035000 audit[7181]: AVC avc: denied { perfmon } for pid=7181 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.035000 audit[7181]: AVC avc: denied { perfmon } for pid=7181 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.035000 audit[7181]: AVC avc: denied { perfmon } for pid=7181 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.035000 audit[7181]: AVC avc: denied { perfmon } for pid=7181 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.035000 audit[7181]: AVC avc: denied { perfmon } for pid=7181 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.035000 audit[7181]: AVC avc: denied { bpf } for pid=7181 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.035000 audit[7181]: AVC avc: denied { bpf } for pid=7181 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.035000 audit: BPF prog-id=273 op=LOAD Sep 10 01:17:52.035000 audit[7181]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffefc5b37b0 a2=98 a3=1fffffffffffffff items=0 ppid=7126 pid=7181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.035000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 10 01:17:52.035000 audit: BPF prog-id=273 op=UNLOAD Sep 10 01:17:52.037000 audit[7181]: AVC avc: denied { bpf } for pid=7181 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.037000 audit[7181]: AVC avc: denied { bpf } for pid=7181 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.037000 audit[7181]: AVC avc: denied { perfmon } for pid=7181 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.037000 audit[7181]: AVC avc: denied { perfmon } for pid=7181 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.037000 audit[7181]: AVC avc: denied { perfmon } for pid=7181 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.037000 audit[7181]: AVC avc: denied { perfmon } for pid=7181 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.037000 audit[7181]: AVC avc: denied { perfmon } for pid=7181 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.037000 audit[7181]: AVC avc: denied { bpf } for pid=7181 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.037000 audit[7181]: AVC avc: denied { bpf } for pid=7181 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.037000 audit: BPF prog-id=274 op=LOAD Sep 10 01:17:52.037000 audit[7181]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffefc5b3690 a2=94 a3=3 items=0 ppid=7126 pid=7181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.037000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 10 01:17:52.037000 audit: BPF prog-id=274 op=UNLOAD Sep 10 01:17:52.037000 audit[7181]: AVC avc: denied { bpf } for pid=7181 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.037000 audit[7181]: AVC avc: denied { bpf } for pid=7181 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.037000 audit[7181]: AVC avc: denied { perfmon } for pid=7181 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.037000 audit[7181]: AVC avc: denied { perfmon } for pid=7181 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.037000 audit[7181]: AVC avc: denied { perfmon } for pid=7181 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.037000 audit[7181]: AVC avc: denied { perfmon } for pid=7181 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.037000 audit[7181]: AVC avc: denied { perfmon } for pid=7181 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.037000 audit[7181]: AVC avc: denied { bpf } for pid=7181 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.037000 audit[7181]: AVC avc: denied { bpf } for pid=7181 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.037000 audit: BPF prog-id=275 op=LOAD Sep 10 01:17:52.037000 audit[7181]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffefc5b36d0 a2=94 a3=7ffefc5b38b0 items=0 ppid=7126 pid=7181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.037000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 10 01:17:52.037000 audit: BPF prog-id=275 op=UNLOAD Sep 10 01:17:52.037000 audit[7181]: AVC avc: denied { perfmon } for pid=7181 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.037000 audit[7181]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffefc5b37a0 a2=50 a3=a000000085 items=0 ppid=7126 pid=7181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.037000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 10 01:17:52.060000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.060000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.060000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.060000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.060000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.060000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.060000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.060000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.060000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.060000 audit: BPF prog-id=276 op=LOAD Sep 10 01:17:52.060000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcd00d3c80 a2=98 a3=3 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.060000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.060000 audit: BPF prog-id=276 op=UNLOAD Sep 10 01:17:52.061000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.061000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.061000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.061000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.061000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.061000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.061000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.061000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.061000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.061000 audit: BPF prog-id=277 op=LOAD Sep 10 01:17:52.061000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffcd00d3a70 a2=94 a3=54428f items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.061000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.062000 audit: BPF prog-id=277 op=UNLOAD Sep 10 01:17:52.062000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.062000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.062000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.062000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.062000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.062000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.062000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.062000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.062000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.062000 audit: BPF prog-id=278 op=LOAD Sep 10 01:17:52.062000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffcd00d3aa0 a2=94 a3=2 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.062000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.062000 audit: BPF prog-id=278 op=UNLOAD Sep 10 01:17:52.154000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.154000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.154000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.154000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.154000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.154000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.154000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.154000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.154000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.154000 audit: BPF prog-id=279 op=LOAD Sep 10 01:17:52.154000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffcd00d3960 a2=94 a3=1 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.154000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.154000 audit: BPF prog-id=279 op=UNLOAD Sep 10 01:17:52.154000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.154000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffcd00d3a30 a2=50 a3=7ffcd00d3b10 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.154000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcd00d3970 a2=28 a3=0 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.162000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcd00d39a0 a2=28 a3=0 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.162000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcd00d38b0 a2=28 a3=0 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.162000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcd00d39c0 a2=28 a3=0 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.162000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcd00d39a0 a2=28 a3=0 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.162000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcd00d3990 a2=28 a3=0 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.162000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcd00d39c0 a2=28 a3=0 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.162000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcd00d39a0 a2=28 a3=0 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.162000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcd00d39c0 a2=28 a3=0 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.162000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcd00d3990 a2=28 a3=0 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.162000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcd00d3a00 a2=28 a3=0 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.162000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffcd00d37b0 a2=50 a3=1 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.162000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit: BPF prog-id=280 op=LOAD Sep 10 01:17:52.162000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffcd00d37b0 a2=94 a3=5 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.162000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.162000 audit: BPF prog-id=280 op=UNLOAD Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffcd00d3860 a2=50 a3=1 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.162000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffcd00d3980 a2=4 a3=38 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.162000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.162000 audit[7182]: AVC avc: denied { confidentiality } for pid=7182 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 01:17:52.162000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffcd00d39d0 a2=94 a3=6 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.162000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { confidentiality } for pid=7182 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 01:17:52.163000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffcd00d3180 a2=94 a3=88 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.163000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { perfmon } for pid=7182 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { bpf } for pid=7182 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.163000 audit[7182]: AVC avc: denied { confidentiality } for pid=7182 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 01:17:52.163000 audit[7182]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffcd00d3180 a2=94 a3=88 items=0 ppid=7126 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.163000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 10 01:17:52.441000 audit[7185]: AVC avc: denied { bpf } for pid=7185 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.441000 audit[7185]: AVC avc: denied { bpf } for pid=7185 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.441000 audit[7185]: AVC avc: denied { perfmon } for pid=7185 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.441000 audit[7185]: AVC avc: denied { perfmon } for pid=7185 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.441000 audit[7185]: AVC avc: denied { perfmon } for pid=7185 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.441000 audit[7185]: AVC avc: denied { perfmon } for pid=7185 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.441000 audit[7185]: AVC avc: denied { perfmon } for pid=7185 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.441000 audit[7185]: AVC avc: denied { bpf } for pid=7185 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.441000 audit[7185]: AVC avc: denied { bpf } for pid=7185 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.441000 audit: BPF prog-id=281 op=LOAD Sep 10 01:17:52.441000 audit[7185]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe7f4c0e00 a2=98 a3=1999999999999999 items=0 ppid=7126 pid=7185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.441000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 10 01:17:52.443000 audit: BPF prog-id=281 op=UNLOAD Sep 10 01:17:52.443000 audit[7185]: AVC avc: denied { bpf } for pid=7185 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.443000 audit[7185]: AVC avc: denied { bpf } for pid=7185 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.443000 audit[7185]: AVC avc: denied { perfmon } for pid=7185 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.443000 audit[7185]: AVC avc: denied { perfmon } for pid=7185 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.443000 audit[7185]: AVC avc: denied { perfmon } for pid=7185 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.443000 audit[7185]: AVC avc: denied { perfmon } for pid=7185 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.443000 audit[7185]: AVC avc: denied { perfmon } for pid=7185 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.443000 audit[7185]: AVC avc: denied { bpf } for pid=7185 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.443000 audit[7185]: AVC avc: denied { bpf } for pid=7185 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.443000 audit: BPF prog-id=282 op=LOAD Sep 10 01:17:52.443000 audit[7185]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe7f4c0ce0 a2=94 a3=ffff items=0 ppid=7126 pid=7185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.443000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 10 01:17:52.443000 audit: BPF prog-id=282 op=UNLOAD Sep 10 01:17:52.443000 audit[7185]: AVC avc: denied { bpf } for pid=7185 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.443000 audit[7185]: AVC avc: denied { bpf } for pid=7185 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.443000 audit[7185]: AVC avc: denied { perfmon } for pid=7185 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.443000 audit[7185]: AVC avc: denied { perfmon } for pid=7185 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.443000 audit[7185]: AVC avc: denied { perfmon } for pid=7185 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.443000 audit[7185]: AVC avc: denied { perfmon } for pid=7185 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.443000 audit[7185]: AVC avc: denied { perfmon } for pid=7185 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.443000 audit[7185]: AVC avc: denied { bpf } for pid=7185 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.443000 audit[7185]: AVC avc: denied { bpf } for pid=7185 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:52.443000 audit: BPF prog-id=283 op=LOAD Sep 10 01:17:52.443000 audit[7185]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe7f4c0d20 a2=94 a3=7ffe7f4c0f00 items=0 ppid=7126 pid=7185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:52.443000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 10 01:17:52.443000 audit: BPF prog-id=283 op=UNLOAD Sep 10 01:17:54.525909 systemd[1]: Started sshd@15-139.178.70.105:22-147.75.109.163:46326.service. Sep 10 01:17:54.674840 kernel: kauditd_printk_skb: 256 callbacks suppressed Sep 10 01:17:54.680991 kernel: audit: type=1130 audit(1757467074.532:1873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.105:22-147.75.109.163:46326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:17:54.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.105:22-147.75.109.163:46326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:17:55.335000 audit[7200]: USER_ACCT pid=7200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:55.445223 kernel: audit: type=1101 audit(1757467075.335:1874): pid=7200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:55.456242 kernel: audit: type=1103 audit(1757467075.405:1875): pid=7200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:55.466774 kernel: audit: type=1006 audit(1757467075.408:1876): pid=7200 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Sep 10 01:17:55.470533 kernel: audit: type=1300 audit(1757467075.408:1876): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd49953bd0 a2=3 a3=0 items=0 ppid=1 pid=7200 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:55.470562 kernel: audit: type=1327 audit(1757467075.408:1876): proctitle=737368643A20636F7265205B707269765D Sep 10 01:17:55.405000 audit[7200]: CRED_ACQ pid=7200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:55.408000 audit[7200]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd49953bd0 a2=3 a3=0 items=0 ppid=1 pid=7200 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:55.408000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 10 01:17:55.547644 sshd[7200]: Accepted publickey for core from 147.75.109.163 port 46326 ssh2: RSA SHA256:0IUR5emySKOryc09IkQfiEMy48OZjcmwN/1tG3dFsA8 Sep 10 01:17:55.429344 sshd[7200]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 10 01:17:55.639833 systemd-logind[1239]: New session 18 of user core. Sep 10 01:17:55.648655 systemd[1]: Started session-18.scope. Sep 10 01:17:55.682906 kernel: audit: type=1105 audit(1757467075.674:1877): pid=7200 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:55.674000 audit[7200]: USER_START pid=7200 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:55.697000 audit[7203]: CRED_ACQ pid=7203 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:55.702336 kernel: audit: type=1103 audit(1757467075.697:1878): pid=7203 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:17:55.978000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.025810 kernel: audit: type=1400 audit(1757467075.978:1879): avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.048892 kernel: audit: type=1400 audit(1757467075.978:1879): avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.978000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.978000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.978000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.978000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.978000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.978000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.978000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.978000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.978000 audit: BPF prog-id=284 op=LOAD Sep 10 01:17:55.978000 audit[7216]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffaada09e0 a2=98 a3=0 items=0 ppid=7126 pid=7216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:55.978000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:17:55.978000 audit: BPF prog-id=284 op=UNLOAD Sep 10 01:17:55.986000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.986000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.986000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.986000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.986000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.986000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.986000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.986000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.986000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.986000 audit: BPF prog-id=285 op=LOAD Sep 10 01:17:55.986000 audit[7216]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffaada07f0 a2=94 a3=54428f items=0 ppid=7126 pid=7216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:55.986000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:17:55.986000 audit: BPF prog-id=285 op=UNLOAD Sep 10 01:17:55.986000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.986000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.986000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.986000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.986000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.986000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.986000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.986000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.986000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.986000 audit: BPF prog-id=286 op=LOAD Sep 10 01:17:55.986000 audit[7216]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffaada0820 a2=94 a3=2 items=0 ppid=7126 pid=7216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:55.986000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:17:55.986000 audit: BPF prog-id=286 op=UNLOAD Sep 10 01:17:55.987000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.987000 audit[7216]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffaada06f0 a2=28 a3=0 items=0 ppid=7126 pid=7216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:55.987000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:17:55.988000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.988000 audit[7216]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffaada0720 a2=28 a3=0 items=0 ppid=7126 pid=7216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:55.988000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:17:55.988000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.988000 audit[7216]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffaada0630 a2=28 a3=0 items=0 ppid=7126 pid=7216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:55.988000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:17:55.988000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.988000 audit[7216]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffaada0740 a2=28 a3=0 items=0 ppid=7126 pid=7216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:55.988000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:17:55.988000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.988000 audit[7216]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffaada0720 a2=28 a3=0 items=0 ppid=7126 pid=7216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:55.988000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:17:55.988000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.988000 audit[7216]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffaada0710 a2=28 a3=0 items=0 ppid=7126 pid=7216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:55.988000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:17:55.988000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.988000 audit[7216]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffaada0740 a2=28 a3=0 items=0 ppid=7126 pid=7216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:55.988000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:17:55.988000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.988000 audit[7216]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffaada0720 a2=28 a3=0 items=0 ppid=7126 pid=7216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:55.988000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:17:55.988000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.988000 audit[7216]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffaada0740 a2=28 a3=0 items=0 ppid=7126 pid=7216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:55.988000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:17:55.988000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.988000 audit[7216]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffaada0710 a2=28 a3=0 items=0 ppid=7126 pid=7216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:55.988000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:17:55.988000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.988000 audit[7216]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fffaada0780 a2=28 a3=0 items=0 ppid=7126 pid=7216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:55.988000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:17:55.988000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.988000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.988000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.988000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.988000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.988000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.988000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.988000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.988000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.988000 audit: BPF prog-id=287 op=LOAD Sep 10 01:17:55.988000 audit[7216]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fffaada05f0 a2=94 a3=0 items=0 ppid=7126 pid=7216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:55.988000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:17:55.988000 audit: BPF prog-id=287 op=UNLOAD Sep 10 01:17:55.988000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.988000 audit[7216]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7fffaada05e0 a2=50 a3=2800 items=0 ppid=7126 pid=7216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:55.988000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:17:55.988000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.988000 audit[7216]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7fffaada05e0 a2=50 a3=2800 items=0 ppid=7126 pid=7216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:55.988000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:17:55.989000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.989000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.989000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.989000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.989000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.989000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.989000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.989000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.989000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.989000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.989000 audit: BPF prog-id=288 op=LOAD Sep 10 01:17:55.989000 audit[7216]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fffaad9fe00 a2=94 a3=2 items=0 ppid=7126 pid=7216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:55.989000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:17:55.989000 audit: BPF prog-id=288 op=UNLOAD Sep 10 01:17:55.989000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.989000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.989000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.989000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.989000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.989000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.989000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.989000 audit[7216]: AVC avc: denied { perfmon } for pid=7216 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.989000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.989000 audit[7216]: AVC avc: denied { bpf } for pid=7216 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:55.989000 audit: BPF prog-id=289 op=LOAD Sep 10 01:17:55.989000 audit[7216]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fffaad9ff00 a2=94 a3=30 items=0 ppid=7126 pid=7216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:55.989000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 10 01:17:56.006000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.006000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.006000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.006000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.006000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.006000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.006000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.006000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.006000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.006000 audit: BPF prog-id=290 op=LOAD Sep 10 01:17:56.006000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffee0b8f20 a2=98 a3=0 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.006000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.006000 audit: BPF prog-id=290 op=UNLOAD Sep 10 01:17:56.007000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.007000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.007000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.007000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.007000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.007000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.007000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.007000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.007000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.007000 audit: BPF prog-id=291 op=LOAD Sep 10 01:17:56.007000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffee0b8d10 a2=94 a3=54428f items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.007000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.007000 audit: BPF prog-id=291 op=UNLOAD Sep 10 01:17:56.007000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.007000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.007000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.007000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.007000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.007000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.007000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.007000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.007000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.007000 audit: BPF prog-id=292 op=LOAD Sep 10 01:17:56.007000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffee0b8d40 a2=94 a3=2 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.007000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.007000 audit: BPF prog-id=292 op=UNLOAD Sep 10 01:17:56.110000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.110000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.110000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.110000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.110000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.110000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.110000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.110000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.110000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.110000 audit: BPF prog-id=293 op=LOAD Sep 10 01:17:56.110000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffee0b8c00 a2=94 a3=1 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.110000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.110000 audit: BPF prog-id=293 op=UNLOAD Sep 10 01:17:56.110000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.110000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fffee0b8cd0 a2=50 a3=7fffee0b8db0 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.110000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffee0b8c10 a2=28 a3=0 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.118000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffee0b8c40 a2=28 a3=0 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.118000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffee0b8b50 a2=28 a3=0 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.118000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffee0b8c60 a2=28 a3=0 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.118000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffee0b8c40 a2=28 a3=0 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.118000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffee0b8c30 a2=28 a3=0 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.118000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffee0b8c60 a2=28 a3=0 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.118000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffee0b8c40 a2=28 a3=0 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.118000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffee0b8c60 a2=28 a3=0 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.118000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffee0b8c30 a2=28 a3=0 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.118000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffee0b8ca0 a2=28 a3=0 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.118000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fffee0b8a50 a2=50 a3=1 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.118000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit: BPF prog-id=294 op=LOAD Sep 10 01:17:56.118000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fffee0b8a50 a2=94 a3=5 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.118000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.118000 audit: BPF prog-id=294 op=UNLOAD Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fffee0b8b00 a2=50 a3=1 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.118000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fffee0b8c20 a2=4 a3=38 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.118000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { confidentiality } for pid=7222 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 01:17:56.118000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffee0b8c70 a2=94 a3=6 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.118000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { confidentiality } for pid=7222 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 01:17:56.118000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffee0b8420 a2=94 a3=88 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.118000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { perfmon } for pid=7222 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.118000 audit[7222]: AVC avc: denied { confidentiality } for pid=7222 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 10 01:17:56.118000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffee0b8420 a2=94 a3=88 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.118000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.127000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.127000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffee0b9e50 a2=10 a3=f8f00800 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.127000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.127000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.127000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffee0b9cf0 a2=10 a3=3 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.127000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.127000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.127000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffee0b9c90 a2=10 a3=3 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.127000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.127000 audit[7222]: AVC avc: denied { bpf } for pid=7222 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 10 01:17:56.127000 audit[7222]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffee0b9c90 a2=10 a3=7 items=0 ppid=7126 pid=7222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:56.127000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 10 01:17:56.416000 audit: BPF prog-id=289 op=UNLOAD Sep 10 01:17:57.182000 audit[7274]: NETFILTER_CFG table=filter:142 family=2 entries=67 op=nft_register_rule pid=7274 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 01:17:57.182000 audit[7274]: SYSCALL arch=c000003e syscall=46 success=yes exit=12812 a0=3 a1=7fffcffffe90 a2=0 a3=7fffcffffe7c items=0 ppid=7126 pid=7274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:57.182000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 01:17:57.186000 audit[7274]: NETFILTER_CFG table=filter:143 family=2 entries=2 op=nft_unregister_chain pid=7274 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 10 01:17:57.186000 audit[7274]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7fffcffffe90 a2=0 a3=555a317fa000 items=0 ppid=7126 pid=7274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 10 01:17:57.186000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 10 01:18:02.367724 kernel: kauditd_printk_skb: 284 callbacks suppressed Sep 10 01:18:02.477787 kernel: audit: type=1400 audit(1757467082.346:1938): avc: denied { watch } for pid=4791 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_11_33.1359678746/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c725 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c604,c725 tclass=file permissive=0 Sep 10 01:18:02.491781 kernel: audit: type=1400 audit(1757467082.346:1939): avc: denied { watch } for pid=4711 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_11_33.3120734617/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c562 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c339,c562 tclass=file permissive=0 Sep 10 01:18:02.493543 kernel: audit: type=1300 audit(1757467082.346:1939): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000056580 a2=fc6 a3=0 items=0 ppid=3827 pid=4711 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c562 key=(null) Sep 10 01:18:02.493589 kernel: audit: type=1327 audit(1757467082.346:1939): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 01:18:02.493621 kernel: audit: type=1300 audit(1757467082.346:1938): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000a871c0 a2=fc6 a3=0 items=0 ppid=4014 pid=4791 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c725 key=(null) Sep 10 01:18:02.493655 kernel: audit: type=1327 audit(1757467082.346:1938): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 01:18:02.346000 audit[4791]: AVC avc: denied { watch } for pid=4791 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_11_33.1359678746/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c725 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c604,c725 tclass=file permissive=0 Sep 10 01:18:02.346000 audit[4711]: AVC avc: denied { watch } for pid=4711 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_11_33.3120734617/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c339,c562 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c339,c562 tclass=file permissive=0 Sep 10 01:18:02.346000 audit[4711]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000056580 a2=fc6 a3=0 items=0 ppid=3827 pid=4711 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c339,c562 key=(null) Sep 10 01:18:02.346000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 01:18:02.346000 audit[4791]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000a871c0 a2=fc6 a3=0 items=0 ppid=4014 pid=4791 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c725 key=(null) Sep 10 01:18:02.346000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 01:18:04.209000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:18:04.340755 kernel: audit: type=1400 audit(1757467084.209:1940): avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:18:04.361689 kernel: audit: type=1300 audit(1757467084.209:1940): arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c0070ffc50 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:18:04.363112 kernel: audit: type=1327 audit(1757467084.209:1940): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:18:04.363139 kernel: audit: type=1400 audit(1757467084.304:1941): avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:18:04.209000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c0070ffc50 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:18:04.209000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:18:04.304000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:18:04.304000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c011300d00 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:18:04.304000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:18:04.333000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:18:04.333000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=82 a1=c0043ec820 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:18:04.333000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:18:04.410000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6736 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:18:04.410000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=82 a1=c0070ffda0 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:18:04.410000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:18:04.502000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:18:04.502000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=82 a1=c003d89860 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:18:04.502000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:18:04.770000 audit[1984]: AVC avc: denied { watch } for pid=1984 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6730 scontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:18:04.770000 audit[1984]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=82 a1=c00a90de60 a2=fc6 a3=0 items=0 ppid=1812 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c134,c242 key=(null) Sep 10 01:18:04.770000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313035002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Sep 10 01:18:19.008000 audit[5778]: AVC avc: denied { watch } for pid=5778 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_12_05.3702759193/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c721,c741 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c721,c741 tclass=file permissive=0 Sep 10 01:18:19.367306 kernel: kauditd_printk_skb: 14 callbacks suppressed Sep 10 01:18:19.405846 kernel: audit: type=1400 audit(1757467099.008:1946): avc: denied { watch } for pid=5778 comm="apiserver" path="/calico-apiserver-certs/..2025_09_10_01_12_05.3702759193/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c721,c741 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c721,c741 tclass=file permissive=0 Sep 10 01:18:19.445359 kernel: audit: type=1300 audit(1757467099.008:1946): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000f11c80 a2=fc6 a3=0 items=0 ppid=4887 pid=5778 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c721,c741 key=(null) Sep 10 01:18:19.453878 kernel: audit: type=1327 audit(1757467099.008:1946): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 01:18:19.008000 audit[5778]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000f11c80 a2=fc6 a3=0 items=0 ppid=4887 pid=5778 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c721,c741 key=(null) Sep 10 01:18:19.008000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 10 01:18:29.197000 audit[6616]: AVC avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:18:29.288144 kernel: audit: type=1400 audit(1757467109.197:1947): avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:18:29.291850 kernel: audit: type=1300 audit(1757467109.197:1947): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0028fe450 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:18:29.292553 kernel: audit: type=1327 audit(1757467109.197:1947): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:18:29.292582 kernel: audit: type=1400 audit(1757467109.201:1948): avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:18:29.292599 kernel: audit: type=1300 audit(1757467109.201:1948): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002a12540 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:18:29.292615 kernel: audit: type=1327 audit(1757467109.201:1948): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:18:29.197000 audit[6616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0028fe450 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:18:29.197000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:18:29.201000 audit[6616]: AVC avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:18:29.201000 audit[6616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002a12540 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:18:29.201000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:18:46.980163 update_engine[1240]: I0910 01:18:46.968108 1240 prefs.cc:52] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Sep 10 01:18:46.980163 update_engine[1240]: I0910 01:18:46.970705 1240 prefs.cc:52] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Sep 10 01:18:47.119639 update_engine[1240]: I0910 01:18:46.987993 1240 prefs.cc:52] aleph-version not present in /var/lib/update_engine/prefs Sep 10 01:18:47.119639 update_engine[1240]: I0910 01:18:46.993992 1240 omaha_request_params.cc:62] Current group set to lts Sep 10 01:18:47.119639 update_engine[1240]: I0910 01:18:47.026774 1240 update_attempter.cc:499] Already updated boot flags. Skipping. Sep 10 01:18:47.119639 update_engine[1240]: I0910 01:18:47.026788 1240 update_attempter.cc:643] Scheduling an action processor start. Sep 10 01:18:47.119639 update_engine[1240]: I0910 01:18:47.026808 1240 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Sep 10 01:18:47.119639 update_engine[1240]: I0910 01:18:47.032946 1240 prefs.cc:52] previous-version not present in /var/lib/update_engine/prefs Sep 10 01:18:47.119639 update_engine[1240]: I0910 01:18:47.035112 1240 omaha_request_action.cc:270] Posting an Omaha request to disabled Sep 10 01:18:47.119639 update_engine[1240]: I0910 01:18:47.035118 1240 omaha_request_action.cc:271] Request: Sep 10 01:18:47.119639 update_engine[1240]: Sep 10 01:18:47.119639 update_engine[1240]: Sep 10 01:18:47.119639 update_engine[1240]: Sep 10 01:18:47.119639 update_engine[1240]: Sep 10 01:18:47.119639 update_engine[1240]: Sep 10 01:18:47.119639 update_engine[1240]: Sep 10 01:18:47.119639 update_engine[1240]: Sep 10 01:18:47.119639 update_engine[1240]: Sep 10 01:18:47.119639 update_engine[1240]: I0910 01:18:47.035122 1240 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 10 01:18:47.183735 locksmithd[1293]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Sep 10 01:18:47.197002 update_engine[1240]: I0910 01:18:47.188000 1240 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 10 01:18:47.197002 update_engine[1240]: E0910 01:18:47.192009 1240 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 10 01:18:47.197002 update_engine[1240]: I0910 01:18:47.192065 1240 libcurl_http_fetcher.cc:283] No HTTP response, retry 1 Sep 10 01:18:48.008000 audit[6616]: AVC avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:18:48.183343 kernel: audit: type=1400 audit(1757467128.008:1949): avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:18:48.212476 kernel: audit: type=1300 audit(1757467128.008:1949): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002c41c20 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:18:48.216421 kernel: audit: type=1327 audit(1757467128.008:1949): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:18:48.219037 kernel: audit: type=1400 audit(1757467128.077:1950): avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:18:48.219063 kernel: audit: type=1300 audit(1757467128.077:1950): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002cc0600 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:18:48.220667 kernel: audit: type=1327 audit(1757467128.077:1950): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:18:48.220767 kernel: audit: type=1400 audit(1757467128.095:1951): avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:18:48.223639 kernel: audit: type=1300 audit(1757467128.095:1951): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002cc0620 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:18:48.225065 kernel: audit: type=1327 audit(1757467128.095:1951): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:18:48.230675 kernel: audit: type=1400 audit(1757467128.095:1952): avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:18:48.008000 audit[6616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002c41c20 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:18:48.008000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:18:48.077000 audit[6616]: AVC avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:18:48.077000 audit[6616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002cc0600 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:18:48.077000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:18:48.095000 audit[6616]: AVC avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:18:48.095000 audit[6616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002cc0620 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:18:48.095000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:18:48.095000 audit[6616]: AVC avc: denied { watch } for pid=6616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6728 scontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 10 01:18:48.095000 audit[6616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002cc0640 a2=fc6 a3=0 items=0 ppid=1798 pid=6616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c22,c293 key=(null) Sep 10 01:18:48.095000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 10 01:18:57.930224 update_engine[1240]: I0910 01:18:57.918934 1240 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 10 01:18:57.994901 update_engine[1240]: I0910 01:18:57.942274 1240 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 10 01:18:57.994901 update_engine[1240]: E0910 01:18:57.944689 1240 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 10 01:18:57.994901 update_engine[1240]: I0910 01:18:57.944813 1240 libcurl_http_fetcher.cc:283] No HTTP response, retry 2 Sep 10 01:18:58.037388 sshd[7200]: pam_unix(sshd:session): session closed for user core Sep 10 01:18:58.084000 audit[7200]: USER_END pid=7200 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:18:58.105344 kernel: kauditd_printk_skb: 2 callbacks suppressed Sep 10 01:18:58.109033 kernel: audit: type=1106 audit(1757467138.084:1953): pid=7200 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:18:58.110657 kernel: audit: type=1104 audit(1757467138.087:1954): pid=7200 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:18:58.087000 audit[7200]: CRED_DISP pid=7200 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 10 01:18:58.114380 systemd[1]: sshd@15-139.178.70.105:22-147.75.109.163:46326.service: Deactivated successfully. Sep 10 01:18:58.121749 kernel: audit: type=1131 audit(1757467138.117:1955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.105:22-147.75.109.163:46326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:18:58.117000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.105:22-147.75.109.163:46326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 10 01:18:58.124632 systemd[1]: session-18.scope: Deactivated successfully. Sep 10 01:18:58.124723 systemd[1]: session-18.scope: Consumed 7.760s CPU time. Sep 10 01:18:58.127292 systemd-logind[1239]: Session 18 logged out. Waiting for processes to exit. Sep 10 01:18:58.142892 systemd-logind[1239]: Removed session 18.